B4BY.588
Home
Terminal
Upload
information
Create File
Create Folder
About
Tools
:
/
usr
/
local
/
maldetect.bk23402
/
Filename :
event_log
back
Copy
May 13 2026 03:27:26 trec maldet(12549): {sigup} performing signature update check... May 13 2026 03:27:26 trec maldet(12549): {sigup} could not determine signature version May 13 2026 03:27:26 trec maldet(12549): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 13 2026 03:27:26 trec maldet(12549): {sigup} signature files missing or corrupted, forcing update... May 13 2026 03:27:26 trec maldet(12549): {sigup} new signature set 2026051290484 available May 13 2026 03:27:26 trec maldet(12549): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 13 2026 03:27:26 trec maldet(12549): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 13 2026 03:27:27 trec maldet(12549): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 13 2026 03:27:27 trec maldet(12549): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 13 2026 03:27:27 trec maldet(12549): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 13 2026 03:27:27 trec maldet(12549): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 13 2026 03:27:27 trec maldet(12549): {sigup} verified md5sum of maldet-sigpack.tgz May 13 2026 03:27:27 trec maldet(12549): {sigup} unpacked and installed maldet-sigpack.tgz May 13 2026 03:27:27 trec maldet(12549): {sigup} verified md5sum of maldet-clean.tgz May 13 2026 03:27:27 trec maldet(12549): {sigup} unpacked and installed maldet-clean.tgz May 13 2026 03:27:27 trec maldet(12549): {sigup} signature set update completed May 13 2026 03:27:27 trec maldet(12549): {sigup} 51468 signatures (45387 MD5 | 2375 HEX | 3706 YARA | 0 USER) May 13 2026 03:27:28 trec maldet(13884): {cve-2026-41940} starting one-shot cPanel defensive remediation (scanid: 260513-0327.13884) May 13 2026 03:27:29 trec maldet(13884): {cve-2026-41940}R killed defunct May 13 2026 03:27:29 trec maldet(13884): {cve-2026-41940} remediation completed: 0 action(s) taken, time 1s May 13 2026 03:27:29 trec maldet(10305): {update} completed update v1.6.6 3a1792 => v1.6.6 e54dca, running signature updates... May 13 2026 03:27:29 trec maldet(16629): {sigup} performing signature update check... May 13 2026 03:27:29 trec maldet(16629): {sigup} local signature set is version 2026051290484 May 13 2026 03:27:29 trec maldet(16629): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 13 2026 03:27:29 trec maldet(16629): {sigup} latest signature set already installed May 13 2026 03:27:29 trec maldet(10305): {update} update and config import completed May 13 2026 03:27:30 trec maldet(17434): {sigup} performing signature update check... May 13 2026 03:27:30 trec maldet(17434): {sigup} local signature set is version 2026051290484 May 13 2026 03:27:30 trec maldet(17434): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 13 2026 03:27:30 trec maldet(17434): {sigup} latest signature set already installed May 13 2026 03:27:30 trec maldet(18462): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 13 2026 03:27:30 trec maldet(18462): {scan} signatures loaded: 51468 (45387 MD5 | 2375 HEX | 3706 YARA | 0 USER) May 13 2026 03:27:30 trec maldet(18462): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 13 2026 03:27:30 trec maldet(18462): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 13 2026 03:27:30 trec maldet(18462): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 May 13 2026 03:36:53 trec maldet(18462): {scan} file list completed in 563s, found 94018 files... May 13 2026 03:36:53 trec maldet(18462): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 13 2026 03:36:53 trec maldet(18462): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (94018 files) in progress... May 13 2026 04:05:56 trec maldet(18462): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! May 13 2026 04:05:56 trec maldet(18462): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 94018, malware hits 0, cleaned hits 0, time 2306s May 13 2026 04:05:56 trec maldet(18462): {scan} scan report saved, to view run: maldet --report 260513-0327.18462 May 13 2026 12:21:48 trec maldet(11269): {sigup} performing signature update check... May 13 2026 12:21:48 trec maldet(11269): {sigup} local signature set is version 2026051290484 May 13 2026 12:21:48 trec maldet(11269): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 13 2026 12:21:48 trec maldet(11269): {sigup} latest signature set already installed May 13 2026 12:21:58 trec maldet(14187): {scan} signatures loaded: 51468 (45387 MD5 | 2375 HEX | 3706 YARA | 0 USER) May 13 2026 12:21:58 trec maldet(14187): {scan} building file list for /root/a/padelmx/homedir/public_html, this might take awhile... May 13 2026 12:21:58 trec maldet(14187): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 13 2026 12:21:58 trec maldet(14187): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /root/a/padelmx/homedir/public_html /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 May 13 2026 12:21:58 trec maldet(14187): {scan} file list completed in 0s, found 64418 files... May 13 2026 12:21:58 trec maldet(14187): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 13 2026 12:21:58 trec maldet(14187): {scan} scan of /root/a/padelmx/homedir/public_html (64418 files) in progress... May 13 2026 12:47:18 trec maldet(14187): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! May 13 2026 12:47:18 trec maldet(14187): {scan} scan completed on /root/a/padelmx/homedir/public_html: files 64418, malware hits 0, cleaned hits 0, time 1521s May 13 2026 12:47:18 trec maldet(14187): {scan} scan report saved, to view run: maldet --report 260513-1221.14187 May 14 2026 04:23:52 trec maldet(26113): {update} checking for available updates... May 14 2026 04:23:52 trec maldet(26113): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 14 2026 04:23:52 trec maldet(26113): {update} hashing install files and checking against server... May 14 2026 04:23:53 trec maldet(26113): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 14 2026 04:23:53 trec maldet(26113): {update} latest version already installed. May 14 2026 04:23:53 trec maldet(27258): {sigup} performing signature update check... May 14 2026 04:23:53 trec maldet(27258): {sigup} local signature set is version 2026051290484 May 14 2026 04:23:53 trec maldet(27258): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 14 2026 04:23:53 trec maldet(27258): {sigup} latest signature set already installed May 14 2026 04:23:54 trec maldet(28091): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 14 2026 04:23:56 trec maldet(28091): {scan} signatures loaded: 51468 (45387 MD5 | 2375 HEX | 3706 YARA | 0 USER) May 14 2026 04:23:56 trec maldet(28091): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 14 2026 04:23:56 trec maldet(28091): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 14 2026 04:23:56 trec maldet(28091): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 May 14 2026 04:33:17 trec maldet(28091): {scan} file list completed in 561s, found 115398 files... May 14 2026 04:33:17 trec maldet(28091): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 14 2026 04:33:17 trec maldet(28091): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (115398 files) in progress... May 14 2026 05:36:12 trec maldet(28091): {hit} malware hit {HEX}php.generic.globals.500 found for /home/sisriego/public_html/wp-includes/eznoav.php May 14 2026 05:36:12 trec maldet(28091): {quar} malware quarantined from '/home/sisriego/public_html/wp-includes/eznoav.php' to '/usr/local/maldetect/quarantine/eznoav.php.2654023760' May 14 2026 05:36:12 trec maldet(28091): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 115398, malware hits 1, cleaned hits 0, time 4338s May 14 2026 05:36:12 trec maldet(28091): {scan} scan report saved, to view run: maldet --report 260514-0423.28091 May 14 2026 05:36:12 trec maldet(28091): {alert} sent scan report to carlos@trec.com.mx May 14 2026 22:28:13 trec maldet(25760): {sigup} performing signature update check... May 14 2026 22:28:13 trec maldet(25760): {sigup} local signature set is version 2026051290484 May 14 2026 22:28:13 trec maldet(25760): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 14 2026 22:28:14 trec maldet(25760): {sigup} latest signature set already installed May 14 2026 22:32:15 trec maldet(20931): {scan} signatures loaded: 51468 (45387 MD5 | 2375 HEX | 3706 YARA | 0 USER) May 14 2026 22:32:15 trec maldet(20931): {scan} building file list for /home/terzapmx/public_html/, this might take awhile... May 14 2026 22:32:15 trec maldet(20931): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 14 2026 22:32:15 trec maldet(20931): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home/terzapmx/public_html/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 May 14 2026 22:32:15 trec maldet(20931): {scan} file list completed in 0s, found 299 files... May 14 2026 22:32:15 trec maldet(20931): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 14 2026 22:32:15 trec maldet(20931): {scan} scan of /home/terzapmx/public_html/ (299 files) in progress... May 14 2026 22:32:39 trec maldet(20931): {scan} scan completed on /home/terzapmx/public_html/: files 299, malware hits 0, cleaned hits 0, time 25s May 14 2026 22:32:39 trec maldet(20931): {scan} scan report saved, to view run: maldet --report 260514-2232.20931 May 15 2026 03:30:05 trec maldet(5544): {update} checking for available updates... May 15 2026 03:30:06 trec maldet(5544): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 15 2026 03:30:06 trec maldet(5544): {update} hashing install files and checking against server... May 15 2026 03:30:06 trec maldet(5544): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 15 2026 03:30:06 trec maldet(5544): {update} latest version already installed. May 15 2026 03:30:06 trec maldet(6256): {sigup} performing signature update check... May 15 2026 03:30:06 trec maldet(6256): {sigup} local signature set is version 2026051290484 May 15 2026 03:30:06 trec maldet(6256): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 15 2026 03:30:06 trec maldet(6256): {sigup} latest signature set already installed May 15 2026 03:30:07 trec maldet(6944): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 15 2026 03:30:07 trec maldet(6944): {scan} signatures loaded: 51468 (45387 MD5 | 2375 HEX | 3706 YARA | 0 USER) May 15 2026 03:30:07 trec maldet(6944): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 15 2026 03:30:07 trec maldet(6944): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 15 2026 03:30:07 trec maldet(6944): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 May 15 2026 03:39:22 trec maldet(6944): {scan} file list completed in 555s, found 19531 files... May 15 2026 03:39:22 trec maldet(6944): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 15 2026 03:39:22 trec maldet(6944): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (19531 files) in progress... May 15 2026 03:52:35 trec maldet(6944): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 19531, malware hits 0, cleaned hits 0, time 1348s May 15 2026 03:52:35 trec maldet(6944): {scan} scan report saved, to view run: maldet --report 260515-0330.6944 May 16 2026 03:57:57 trec maldet(2329): {update} checking for available updates... May 16 2026 03:57:57 trec maldet(2329): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 16 2026 03:57:57 trec maldet(2329): {update} hashing install files and checking against server... May 16 2026 03:57:57 trec maldet(2329): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 16 2026 03:57:57 trec maldet(2329): {update} latest version already installed. May 16 2026 03:57:58 trec maldet(3329): {sigup} performing signature update check... May 16 2026 03:57:58 trec maldet(3329): {sigup} local signature set is version 2026051290484 May 16 2026 03:57:58 trec maldet(3329): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 16 2026 03:57:58 trec maldet(3329): {sigup} latest signature set already installed May 16 2026 03:57:59 trec maldet(4059): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 16 2026 03:58:05 trec maldet(4059): {scan} signatures loaded: 51468 (45387 MD5 | 2375 HEX | 3706 YARA | 0 USER) May 16 2026 03:58:05 trec maldet(4059): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 16 2026 03:58:05 trec maldet(4059): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 16 2026 03:58:05 trec maldet(4059): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 May 16 2026 04:18:50 trec maldet(4059): {scan} file list completed in 1245s, found 1953 files... May 16 2026 04:18:50 trec maldet(4059): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 16 2026 04:18:50 trec maldet(4059): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1953 files) in progress... May 16 2026 04:23:16 trec maldet(4059): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1953, malware hits 0, cleaned hits 0, time 1517s May 16 2026 04:23:16 trec maldet(4059): {scan} scan report saved, to view run: maldet --report 260516-0357.4059 May 17 2026 04:13:47 trec maldet(31565): {update} checking for available updates... May 17 2026 04:13:48 trec maldet(31565): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 17 2026 04:13:48 trec maldet(31565): {update} hashing install files and checking against server... May 17 2026 04:13:48 trec maldet(31565): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 17 2026 04:13:48 trec maldet(31565): {update} latest version already installed. May 17 2026 04:13:49 trec maldet(32619): {sigup} performing signature update check... May 17 2026 04:13:49 trec maldet(32619): {sigup} local signature set is version 2026051290484 May 17 2026 04:13:49 trec maldet(32619): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 17 2026 04:13:49 trec maldet(32619): {sigup} latest signature set already installed May 17 2026 04:13:50 trec maldet(1196): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 17 2026 04:13:53 trec maldet(1196): {scan} signatures loaded: 51468 (45387 MD5 | 2375 HEX | 3706 YARA | 0 USER) May 17 2026 04:13:53 trec maldet(1196): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 17 2026 04:13:53 trec maldet(1196): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 17 2026 04:13:53 trec maldet(1196): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 May 17 2026 04:40:13 trec maldet(1196): {scan} file list completed in 1580s, found 34041 files... May 17 2026 04:40:13 trec maldet(1196): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 17 2026 04:40:13 trec maldet(1196): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (34041 files) in progress... May 17 2026 05:13:58 trec maldet(1196): {hit} malware hit {HEX}php.polyshell.jfif.phpcomment.704 found for /home/sportmx/public_html/wp-content/updraft/backup_2023-04-26-1928_SportMaster_b92831b3b507-themes.zip May 17 2026 05:13:59 trec maldet(1196): {quar} malware quarantined from '/home/sportmx/public_html/wp-content/updraft/backup_2023-04-26-1928_SportMaster_b92831b3b507-themes.zip' to '/usr/local/maldetect/quarantine/backup_2023-04-26-1928_SportMaster_b92831b3b507-themes.zip.41108845' May 17 2026 05:13:59 trec maldet(1196): {hit} malware hit {HEX}php.polyshell.jfif.phpcomment.704 found for /home/sportmx/public_html/wp-content/updraft/backup_2023-04-26-1928_SportMaster_b92831b3b507-others.zip May 17 2026 05:13:59 trec maldet(1196): {quar} malware quarantined from '/home/sportmx/public_html/wp-content/updraft/backup_2023-04-26-1928_SportMaster_b92831b3b507-others.zip' to '/usr/local/maldetect/quarantine/backup_2023-04-26-1928_SportMaster_b92831b3b507-others.zip.132818149' May 17 2026 05:13:59 trec maldet(1196): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 34041, malware hits 2, cleaned hits 0, time 3609s May 17 2026 05:13:59 trec maldet(1196): {scan} scan report saved, to view run: maldet --report 260517-0413.1196 May 17 2026 05:14:00 trec maldet(1196): {alert} sent scan report to carlos@trec.com.mx May 18 2026 04:01:43 trec maldet(8953): {update} checking for available updates... May 18 2026 04:01:44 trec maldet(8953): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 18 2026 04:01:44 trec maldet(8953): {update} hashing install files and checking against server... May 18 2026 04:01:44 trec maldet(8953): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 18 2026 04:01:44 trec maldet(8953): {update} latest version already installed. May 18 2026 04:01:44 trec maldet(9760): {sigup} performing signature update check... May 18 2026 04:01:44 trec maldet(9760): {sigup} local signature set is version 2026051290484 May 18 2026 04:01:44 trec maldet(9760): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 18 2026 04:01:44 trec maldet(9760): {sigup} latest signature set already installed May 18 2026 04:01:45 trec maldet(10769): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 18 2026 04:01:46 trec maldet(10769): {scan} signatures loaded: 51468 (45387 MD5 | 2375 HEX | 3706 YARA | 0 USER) May 18 2026 04:01:46 trec maldet(10769): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 18 2026 04:01:46 trec maldet(10769): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 18 2026 04:01:46 trec maldet(10769): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 May 18 2026 04:14:54 trec maldet(10769): {scan} file list completed in 788s, found 4514 files... May 18 2026 04:14:54 trec maldet(10769): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 18 2026 04:14:54 trec maldet(10769): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (4514 files) in progress... May 18 2026 04:21:46 trec maldet(10769): {hit} malware hit {HEX}php.polyshell.jfif.phpcomment.704 found for /home/padel/public_html/wp-content/updraft/backup_2023-04-24-1340_CANCHAS_DE_PADELCOM_5e3e73a081a9-themes.zip May 18 2026 04:21:46 trec maldet(10769): {quar} malware quarantined from '/home/padel/public_html/wp-content/updraft/backup_2023-04-24-1340_CANCHAS_DE_PADELCOM_5e3e73a081a9-themes.zip' to '/usr/local/maldetect/quarantine/backup_2023-04-24-1340_CANCHAS_DE_PADELCOM_5e3e73a081a9-themes.zip.559926396' May 18 2026 04:21:46 trec maldet(10769): {hit} malware hit {HEX}php.polyshell.jfif.phpcomment.704 found for /home/padel/public_html/wp-content/updraft/backup_2023-04-24-1340_CANCHAS_DE_PADELCOM_5e3e73a081a9-others.zip May 18 2026 04:21:46 trec maldet(10769): {quar} malware quarantined from '/home/padel/public_html/wp-content/updraft/backup_2023-04-24-1340_CANCHAS_DE_PADELCOM_5e3e73a081a9-others.zip' to '/usr/local/maldetect/quarantine/backup_2023-04-24-1340_CANCHAS_DE_PADELCOM_5e3e73a081a9-others.zip.2825315290' May 18 2026 04:21:46 trec maldet(10769): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 4514, malware hits 2, cleaned hits 0, time 1201s May 18 2026 04:21:46 trec maldet(10769): {scan} scan report saved, to view run: maldet --report 260518-0401.10769 May 18 2026 04:21:46 trec maldet(10769): {alert} sent scan report to carlos@trec.com.mx May 19 2026 04:04:05 trec maldet(27006): {update} checking for available updates... May 19 2026 04:04:05 trec maldet(27006): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 19 2026 04:04:05 trec maldet(27006): {update} hashing install files and checking against server... May 19 2026 04:04:05 trec maldet(27006): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 19 2026 04:04:05 trec maldet(27006): {update} latest version already installed. May 19 2026 04:04:05 trec maldet(28107): {sigup} performing signature update check... May 19 2026 04:04:05 trec maldet(28107): {sigup} local signature set is version 2026051290484 May 19 2026 04:04:06 trec maldet(28107): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 19 2026 04:04:06 trec maldet(28107): {sigup} latest signature set already installed May 19 2026 04:04:06 trec maldet(28953): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 19 2026 04:04:08 trec maldet(28953): {scan} signatures loaded: 51468 (45387 MD5 | 2375 HEX | 3706 YARA | 0 USER) May 19 2026 04:04:08 trec maldet(28953): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 19 2026 04:04:08 trec maldet(28953): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 19 2026 04:04:08 trec maldet(28953): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 May 19 2026 04:17:56 trec maldet(28953): {scan} file list completed in 828s, found 111686 files... May 19 2026 04:17:56 trec maldet(28953): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 19 2026 04:17:56 trec maldet(28953): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (111686 files) in progress... May 19 2026 05:31:02 trec maldet(28953): {hit} malware hit {HEX}php.polyshell.jfif.phpcomment.704 found for /home/padel/public_html/wp-content/updraft/backup_2023-04-24-1340_CANCHAS_DE_PADELCOM_5e3e73a081a9-themes.zip May 19 2026 05:31:02 trec maldet(28953): {quar} malware quarantined from '/home/padel/public_html/wp-content/updraft/backup_2023-04-24-1340_CANCHAS_DE_PADELCOM_5e3e73a081a9-themes.zip' to '/usr/local/maldetect/quarantine/backup_2023-04-24-1340_CANCHAS_DE_PADELCOM_5e3e73a081a9-themes.zip.88911993' May 19 2026 05:31:02 trec maldet(28953): {hit} malware hit {HEX}php.polyshell.jfif.phpcomment.704 found for /home/padel/public_html/wp-content/updraft/backup_2023-04-24-1340_CANCHAS_DE_PADELCOM_5e3e73a081a9-others.zip May 19 2026 05:31:02 trec maldet(28953): {quar} malware quarantined from '/home/padel/public_html/wp-content/updraft/backup_2023-04-24-1340_CANCHAS_DE_PADELCOM_5e3e73a081a9-others.zip' to '/usr/local/maldetect/quarantine/backup_2023-04-24-1340_CANCHAS_DE_PADELCOM_5e3e73a081a9-others.zip.2163315252' May 19 2026 05:31:02 trec maldet(28953): {hit} malware hit {HEX}php.polyshell.jfif.phpcomment.704 found for /home/sportmx/public_html/wp-content/updraft/backup_2023-04-26-1928_SportMaster_b92831b3b507-themes.zip May 19 2026 05:31:02 trec maldet(28953): {quar} malware quarantined from '/home/sportmx/public_html/wp-content/updraft/backup_2023-04-26-1928_SportMaster_b92831b3b507-themes.zip' to '/usr/local/maldetect/quarantine/backup_2023-04-26-1928_SportMaster_b92831b3b507-themes.zip.2060816290' May 19 2026 05:31:02 trec maldet(28953): {hit} malware hit {HEX}php.polyshell.jfif.phpcomment.704 found for /home/sportmx/public_html/wp-content/updraft/backup_2023-04-26-1928_SportMaster_b92831b3b507-others.zip May 19 2026 05:31:02 trec maldet(28953): {quar} malware quarantined from '/home/sportmx/public_html/wp-content/updraft/backup_2023-04-26-1928_SportMaster_b92831b3b507-others.zip' to '/usr/local/maldetect/quarantine/backup_2023-04-26-1928_SportMaster_b92831b3b507-others.zip.230669666' May 19 2026 05:31:03 trec maldet(28953): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 111686, malware hits 4, cleaned hits 0, time 5217s May 19 2026 05:31:03 trec maldet(28953): {scan} scan report saved, to view run: maldet --report 260519-0404.28953 May 19 2026 05:31:03 trec maldet(28953): {alert} sent scan report to carlos@trec.com.mx May 20 2026 03:33:11 trec maldet(4053): {update} checking for available updates... May 20 2026 03:33:11 trec maldet(4053): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 20 2026 03:33:11 trec maldet(4053): {update} hashing install files and checking against server... May 20 2026 03:33:12 trec maldet(4053): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 20 2026 03:33:12 trec maldet(4053): {update} latest version already installed. May 20 2026 03:33:12 trec maldet(4790): {sigup} performing signature update check... May 20 2026 03:33:12 trec maldet(4790): {sigup} local signature set is version 2026051290484 May 20 2026 03:33:12 trec maldet(4790): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 20 2026 03:33:12 trec maldet(4790): {sigup} latest signature set already installed May 20 2026 03:33:12 trec maldet(5501): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 20 2026 03:33:14 trec maldet(5501): {scan} signatures loaded: 51468 (45387 MD5 | 2375 HEX | 3706 YARA | 0 USER) May 20 2026 03:33:14 trec maldet(5501): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 20 2026 03:33:14 trec maldet(5501): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 20 2026 03:33:14 trec maldet(5501): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 May 20 2026 03:44:43 trec maldet(5501): {scan} file list completed in 689s, found 114882 files... May 20 2026 03:44:43 trec maldet(5501): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 20 2026 03:44:43 trec maldet(5501): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (114882 files) in progress... May 20 2026 04:24:23 trec maldet(5501): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! May 20 2026 04:24:23 trec maldet(5501): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 114882, malware hits 0, cleaned hits 0, time 3071s May 20 2026 04:24:23 trec maldet(5501): {scan} scan report saved, to view run: maldet --report 260520-0333.5501 May 20 2026 11:41:57 trec maldet(23790): {sigup} performing signature update check... May 20 2026 11:41:57 trec maldet(23790): {sigup} local signature set is version 2026051290484 May 20 2026 11:41:58 trec maldet(23790): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 20 2026 11:41:58 trec maldet(23790): {sigup} latest signature set already installed May 20 2026 11:42:00 trec maldet(24853): {update} checking for available updates... May 20 2026 11:42:00 trec maldet(24853): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 20 2026 11:42:00 trec maldet(24853): {update} hashing install files and checking against server... May 20 2026 11:42:00 trec maldet(24853): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 20 2026 11:42:00 trec maldet(24853): {update} latest version already installed. May 20 2026 11:42:08 trec maldet(27357): {scan} must use absolute path, provided relative path '.' May 20 2026 11:42:16 trec maldet(28866): {scan} signatures loaded: 51468 (45387 MD5 | 2375 HEX | 3706 YARA | 0 USER) May 20 2026 11:42:16 trec maldet(28866): {scan} building file list for /home/padel/public_html of new/modified files from last 7 days, this might take awhile... May 20 2026 11:42:16 trec maldet(28866): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 20 2026 11:42:16 trec maldet(28866): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home/padel/public_html /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -7 -o -ctime -7 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 May 20 2026 11:42:16 trec maldet(28866): {scan} file list completed in 0s, found 19466 files... May 20 2026 11:42:16 trec maldet(28866): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 20 2026 11:42:16 trec maldet(28866): {scan} scan of /home/padel/public_html (19466 files) in progress... May 20 2026 11:54:29 trec maldet(28866): {scan} scan completed on /home/padel/public_html: files 19466, malware hits 0, cleaned hits 0, time 734s May 20 2026 11:54:29 trec maldet(28866): {scan} scan report saved, to view run: maldet --report 260520-1142.28866 May 21 2026 04:41:55 trec maldet(22434): {update} checking for available updates... May 21 2026 04:41:56 trec maldet(22434): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 21 2026 04:41:56 trec maldet(22434): {update} hashing install files and checking against server... May 21 2026 04:41:56 trec maldet(22434): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 21 2026 04:41:56 trec maldet(22434): {update} latest version already installed. May 21 2026 04:41:56 trec maldet(23271): {sigup} performing signature update check... May 21 2026 04:41:56 trec maldet(23271): {sigup} local signature set is version 2026051290484 May 21 2026 04:41:56 trec maldet(23271): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 21 2026 04:41:56 trec maldet(23271): {sigup} latest signature set already installed May 21 2026 04:41:57 trec maldet(24306): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 21 2026 04:41:58 trec maldet(24306): {scan} signatures loaded: 51468 (45387 MD5 | 2375 HEX | 3706 YARA | 0 USER) May 21 2026 04:41:58 trec maldet(24306): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 21 2026 04:41:58 trec maldet(24306): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 21 2026 04:41:58 trec maldet(24306): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 May 21 2026 04:52:40 trec maldet(24306): {scan} file list completed in 642s, found 43275 files... May 21 2026 04:52:40 trec maldet(24306): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 21 2026 04:52:40 trec maldet(24306): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (43275 files) in progress... May 21 2026 05:05:40 trec maldet(24306): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! May 21 2026 05:05:41 trec maldet(24306): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 43275, malware hits 0, cleaned hits 0, time 1423s May 21 2026 05:05:41 trec maldet(24306): {scan} scan report saved, to view run: maldet --report 260521-0441.24306 May 22 2026 04:14:15 trec maldet(25158): {update} checking for available updates... May 22 2026 04:14:15 trec maldet(25158): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 22 2026 04:14:15 trec maldet(25158): {update} hashing install files and checking against server... May 22 2026 04:14:15 trec maldet(25158): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 22 2026 04:14:15 trec maldet(25158): {update} latest version already installed. May 22 2026 04:14:16 trec maldet(25980): {sigup} performing signature update check... May 22 2026 04:14:16 trec maldet(25980): {sigup} local signature set is version 2026051290484 May 22 2026 04:14:16 trec maldet(25980): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 22 2026 04:14:16 trec maldet(25980): {sigup} latest signature set already installed May 22 2026 04:14:17 trec maldet(26774): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 22 2026 04:14:17 trec maldet(26774): {scan} signatures loaded: 51468 (45387 MD5 | 2375 HEX | 3706 YARA | 0 USER) May 22 2026 04:14:17 trec maldet(26774): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 22 2026 04:14:17 trec maldet(26774): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 22 2026 04:14:17 trec maldet(26774): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 May 22 2026 04:29:13 trec maldet(26774): {scan} file list completed in 896s, found 130242 files... May 22 2026 04:29:13 trec maldet(26774): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 22 2026 04:29:13 trec maldet(26774): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (130242 files) in progress... May 22 2026 05:34:12 trec maldet(26774): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! May 22 2026 05:34:12 trec maldet(26774): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 130242, malware hits 0, cleaned hits 0, time 4795s May 22 2026 05:34:12 trec maldet(26774): {scan} scan report saved, to view run: maldet --report 260522-0414.26774 May 23 2026 03:34:04 trec maldet(11775): {update} checking for available updates... May 23 2026 03:34:04 trec maldet(11775): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 23 2026 03:34:04 trec maldet(11775): {update} hashing install files and checking against server... May 23 2026 03:34:05 trec maldet(11775): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 23 2026 03:34:05 trec maldet(11775): {update} latest version already installed. May 23 2026 03:34:06 trec maldet(12917): {sigup} performing signature update check... May 23 2026 03:34:06 trec maldet(12917): {sigup} local signature set is version 2026051290484 May 23 2026 03:34:06 trec maldet(12917): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 23 2026 03:34:06 trec maldet(12917): {sigup} latest signature set already installed May 23 2026 03:34:06 trec maldet(13780): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 23 2026 03:34:08 trec maldet(13780): {scan} signatures loaded: 51468 (45387 MD5 | 2375 HEX | 3706 YARA | 0 USER) May 23 2026 03:34:08 trec maldet(13780): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 23 2026 03:34:08 trec maldet(13780): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 23 2026 03:34:08 trec maldet(13780): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 May 23 2026 03:56:21 trec maldet(13780): {scan} file list completed in 1333s, found 27706 files... May 23 2026 03:56:21 trec maldet(13780): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 23 2026 03:56:21 trec maldet(13780): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (27706 files) in progress... May 23 2026 04:14:36 trec maldet(13780): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! May 23 2026 04:14:36 trec maldet(13780): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 27706, malware hits 0, cleaned hits 0, time 2430s May 23 2026 04:14:36 trec maldet(13780): {scan} scan report saved, to view run: maldet --report 260523-0334.13780 May 24 2026 03:54:26 trec maldet(30653): {update} checking for available updates... May 24 2026 03:54:26 trec maldet(30653): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 24 2026 03:54:26 trec maldet(30653): {update} hashing install files and checking against server... May 24 2026 03:54:27 trec maldet(30653): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 24 2026 03:54:27 trec maldet(30653): {update} latest version already installed. May 24 2026 03:54:27 trec maldet(31883): {sigup} performing signature update check... May 24 2026 03:54:27 trec maldet(31883): {sigup} local signature set is version 2026051290484 May 24 2026 03:54:28 trec maldet(31883): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 24 2026 03:54:29 trec maldet(31883): {sigup} new signature set 2026052390483 available May 24 2026 03:54:29 trec maldet(31883): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 24 2026 03:54:30 trec maldet(31883): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 24 2026 03:54:30 trec maldet(31883): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 24 2026 03:54:30 trec maldet(31883): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 24 2026 03:54:30 trec maldet(31883): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 24 2026 03:54:31 trec maldet(31883): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 24 2026 03:54:31 trec maldet(31883): {sigup} verified md5sum of maldet-sigpack.tgz May 24 2026 03:54:34 trec maldet(31883): {sigup} unpacked and installed maldet-sigpack.tgz May 24 2026 03:54:36 trec maldet(31883): {sigup} verified md5sum of maldet-clean.tgz May 24 2026 03:54:36 trec maldet(31883): {sigup} unpacked and installed maldet-clean.tgz May 24 2026 03:54:36 trec maldet(31883): {sigup} signature set update completed May 24 2026 03:54:36 trec maldet(31883): {sigup} 51467 signatures (45387 MD5 | 2374 HEX | 3706 YARA | 0 USER) May 24 2026 03:54:37 trec maldet(1828): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 24 2026 03:54:40 trec maldet(1828): {scan} signatures loaded: 51467 (45387 MD5 | 2374 HEX | 3706 YARA | 0 USER) May 24 2026 03:54:40 trec maldet(1828): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 24 2026 03:54:40 trec maldet(1828): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 24 2026 03:54:40 trec maldet(1828): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 May 24 2026 04:32:19 trec maldet(1828): {scan} file list completed in 2259s, found 3141 files... May 24 2026 04:32:19 trec maldet(1828): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 24 2026 04:32:19 trec maldet(1828): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (3141 files) in progress... May 24 2026 04:40:05 trec maldet(1828): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! May 24 2026 04:40:05 trec maldet(1828): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 3141, malware hits 0, cleaned hits 0, time 2728s May 24 2026 04:40:05 trec maldet(1828): {scan} scan report saved, to view run: maldet --report 260524-0354.1828 May 25 2026 04:02:44 trec maldet(23129): {update} checking for available updates... May 25 2026 04:02:44 trec maldet(23129): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 25 2026 04:02:44 trec maldet(23129): {update} hashing install files and checking against server... May 25 2026 04:02:45 trec maldet(23129): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 25 2026 04:02:45 trec maldet(23129): {update} latest version already installed. May 25 2026 04:02:45 trec maldet(23986): {sigup} performing signature update check... May 25 2026 04:02:45 trec maldet(23986): {sigup} local signature set is version 2026052390483 May 25 2026 04:02:45 trec maldet(23986): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 25 2026 04:02:46 trec maldet(23986): {sigup} new signature set 2026052490478 available May 25 2026 04:02:46 trec maldet(23986): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 25 2026 04:02:48 trec maldet(23986): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 25 2026 04:02:48 trec maldet(23986): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 25 2026 04:02:48 trec maldet(23986): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 25 2026 04:02:48 trec maldet(23986): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 25 2026 04:02:48 trec maldet(23986): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 25 2026 04:02:48 trec maldet(23986): {sigup} verified md5sum of maldet-sigpack.tgz May 25 2026 04:02:52 trec maldet(23986): {sigup} unpacked and installed maldet-sigpack.tgz May 25 2026 04:02:52 trec maldet(23986): {sigup} verified md5sum of maldet-clean.tgz May 25 2026 04:02:52 trec maldet(23986): {sigup} unpacked and installed maldet-clean.tgz May 25 2026 04:02:52 trec maldet(23986): {sigup} signature set update completed May 25 2026 04:02:52 trec maldet(23986): {sigup} 51464 signatures (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) May 25 2026 04:02:52 trec maldet(25672): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 25 2026 04:02:55 trec maldet(25672): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) May 25 2026 04:02:55 trec maldet(25672): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 25 2026 04:02:55 trec maldet(25672): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 25 2026 04:02:55 trec maldet(25672): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 May 25 2026 05:01:09 trec maldet(25672): {scan} file list completed in 3493s, found 1898 files... May 25 2026 05:01:09 trec maldet(25672): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 25 2026 05:01:09 trec maldet(25672): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1898 files) in progress... May 25 2026 05:08:02 trec maldet(25672): {hit} malware hit {HEX}php.generic.globals.500 found for /home/consfutmx/public_html/wp-includes/cmuiqs.php May 25 2026 05:08:02 trec maldet(25672): {quar} malware quarantined from '/home/consfutmx/public_html/wp-includes/cmuiqs.php' to '/usr/local/maldetect/quarantine/cmuiqs.php.2856924838' May 25 2026 05:08:02 trec maldet(25672): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1898, malware hits 1, cleaned hits 0, time 3910s May 25 2026 05:08:02 trec maldet(25672): {scan} scan report saved, to view run: maldet --report 260525-0402.25672 May 25 2026 05:08:02 trec maldet(25672): {alert} sent scan report to carlos@trec.com.mx May 26 2026 04:22:51 trec maldet(13868): {update} checking for available updates... May 26 2026 04:22:51 trec maldet(13868): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 26 2026 04:22:51 trec maldet(13868): {update} hashing install files and checking against server... May 26 2026 04:22:51 trec maldet(13868): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 26 2026 04:22:51 trec maldet(13868): {update} latest version already installed. May 26 2026 04:22:52 trec maldet(14822): {sigup} performing signature update check... May 26 2026 04:22:52 trec maldet(14822): {sigup} local signature set is version 2026052490478 May 26 2026 04:22:52 trec maldet(14822): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 26 2026 04:22:52 trec maldet(14822): {sigup} latest signature set already installed May 26 2026 04:22:53 trec maldet(15962): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 26 2026 04:22:54 trec maldet(15962): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) May 26 2026 04:22:54 trec maldet(15962): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 26 2026 04:22:54 trec maldet(15962): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 26 2026 04:22:54 trec maldet(15962): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 May 26 2026 04:33:52 trec maldet(15962): {scan} file list completed in 658s, found 64611 files... May 26 2026 04:33:52 trec maldet(15962): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 26 2026 04:33:52 trec maldet(15962): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (64611 files) in progress... May 26 2026 04:46:13 trec maldet(15962): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 64611, malware hits 0, cleaned hits 0, time 1400s May 26 2026 04:46:13 trec maldet(15962): {scan} scan report saved, to view run: maldet --report 260526-0422.15962 May 27 2026 03:37:59 trec maldet(22110): {update} checking for available updates... May 27 2026 03:37:59 trec maldet(22110): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 27 2026 03:37:59 trec maldet(22110): {update} hashing install files and checking against server... May 27 2026 03:37:59 trec maldet(22110): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 27 2026 03:37:59 trec maldet(22110): {update} latest version already installed. May 27 2026 03:38:00 trec maldet(22944): {sigup} performing signature update check... May 27 2026 03:38:00 trec maldet(22944): {sigup} local signature set is version 2026052490478 May 27 2026 03:38:00 trec maldet(22944): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 27 2026 03:38:00 trec maldet(22944): {sigup} latest signature set already installed May 27 2026 03:38:01 trec maldet(24174): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 27 2026 03:38:04 trec maldet(24174): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) May 27 2026 03:38:04 trec maldet(24174): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 27 2026 03:38:04 trec maldet(24174): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 27 2026 03:38:04 trec maldet(24174): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 May 27 2026 03:49:27 trec maldet(24174): {scan} file list completed in 683s, found 135979 files... May 27 2026 03:49:27 trec maldet(24174): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 27 2026 03:49:27 trec maldet(24174): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (135979 files) in progress... May 27 2026 04:27:43 trec maldet(24174): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! May 27 2026 04:27:43 trec maldet(24174): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 135979, malware hits 0, cleaned hits 0, time 2982s May 27 2026 04:27:43 trec maldet(24174): {scan} scan report saved, to view run: maldet --report 260527-0338.24174 May 27 2026 22:32:41 trec maldet(28499): {sigup} performing signature update check... May 27 2026 22:32:41 trec maldet(28499): {sigup} local signature set is version 2026052490478 May 27 2026 22:32:41 trec maldet(28499): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 27 2026 22:32:41 trec maldet(28499): {sigup} latest signature set already installed May 27 2026 22:32:48 trec maldet(30057): {update} checking for available updates... May 27 2026 22:32:48 trec maldet(30057): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 27 2026 22:32:48 trec maldet(30057): {update} hashing install files and checking against server... May 27 2026 22:32:49 trec maldet(30057): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 27 2026 22:32:49 trec maldet(30057): {update} latest version already installed. May 27 2026 22:33:01 trec maldet(32305): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) May 27 2026 22:33:01 trec maldet(32305): {scan} building file list for /home/padelmx/public_html of new/modified files from last 7 days, this might take awhile... May 27 2026 22:33:01 trec maldet(32305): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 27 2026 22:33:01 trec maldet(32305): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home/padelmx/public_html /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -7 -o -ctime -7 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 May 27 2026 22:33:02 trec maldet(32305): {scan} file list completed in 1s, found 61407 files... May 27 2026 22:33:02 trec maldet(32305): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 27 2026 22:33:02 trec maldet(32305): {scan} scan of /home/padelmx/public_html (61407 files) in progress... May 28 2026 04:13:52 trec maldet(617): {update} checking for available updates... May 28 2026 04:13:53 trec maldet(617): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 28 2026 04:13:53 trec maldet(617): {update} hashing install files and checking against server... May 28 2026 04:13:53 trec maldet(617): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 28 2026 04:13:53 trec maldet(617): {update} latest version already installed. May 28 2026 04:13:54 trec maldet(1846): {sigup} performing signature update check... May 28 2026 04:13:54 trec maldet(1846): {sigup} local signature set is version 2026052490478 May 28 2026 04:13:54 trec maldet(1846): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 28 2026 04:13:54 trec maldet(1846): {sigup} latest signature set already installed May 28 2026 04:13:55 trec maldet(2711): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 28 2026 04:13:57 trec maldet(2711): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) May 28 2026 04:13:57 trec maldet(2711): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 28 2026 04:13:57 trec maldet(2711): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 28 2026 04:13:57 trec maldet(2711): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 May 28 2026 04:33:18 trec maldet(2711): {scan} file list completed in 1160s, found 233154 files... May 28 2026 04:33:18 trec maldet(2711): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 28 2026 04:33:18 trec maldet(2711): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (233154 files) in progress... May 28 2026 05:38:41 trec maldet(2711): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! May 28 2026 05:38:41 trec maldet(2711): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 233154, malware hits 0, cleaned hits 0, time 5086s May 28 2026 05:38:41 trec maldet(2711): {scan} scan report saved, to view run: maldet --report 260528-0413.2711 May 29 2026 03:55:43 trec maldet(21175): {update} checking for available updates... May 29 2026 03:55:43 trec maldet(21175): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 29 2026 03:55:43 trec maldet(21175): {update} hashing install files and checking against server... May 29 2026 03:55:43 trec maldet(21175): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 29 2026 03:55:43 trec maldet(21175): {update} latest version already installed. May 29 2026 03:55:44 trec maldet(21971): {sigup} performing signature update check... May 29 2026 03:55:44 trec maldet(21971): {sigup} local signature set is version 2026052490478 May 29 2026 03:55:44 trec maldet(21971): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 29 2026 03:55:44 trec maldet(21971): {sigup} latest signature set already installed May 29 2026 03:55:44 trec maldet(22939): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 29 2026 03:55:46 trec maldet(22939): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) May 29 2026 03:55:46 trec maldet(22939): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 29 2026 03:55:46 trec maldet(22939): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 29 2026 03:55:46 trec maldet(22939): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 May 29 2026 04:04:55 trec maldet(22939): {scan} file list completed in 549s, found 118495 files... May 29 2026 04:04:55 trec maldet(22939): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 29 2026 04:04:55 trec maldet(22939): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (118495 files) in progress... May 29 2026 04:48:25 trec maldet(22939): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 118495, malware hits 0, cleaned hits 0, time 3161s May 29 2026 04:48:25 trec maldet(22939): {scan} scan report saved, to view run: maldet --report 260529-0355.22939 May 30 2026 03:37:56 trec maldet(31141): {update} checking for available updates... May 30 2026 03:37:56 trec maldet(31141): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 30 2026 03:37:56 trec maldet(31141): {update} hashing install files and checking against server... May 30 2026 03:37:57 trec maldet(31141): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 30 2026 03:37:57 trec maldet(31141): {update} latest version already installed. May 30 2026 03:37:57 trec maldet(32004): {sigup} performing signature update check... May 30 2026 03:37:57 trec maldet(32004): {sigup} local signature set is version 2026052490478 May 30 2026 03:37:57 trec maldet(32004): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 30 2026 03:37:58 trec maldet(32004): {sigup} latest signature set already installed May 30 2026 03:37:58 trec maldet(840): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 30 2026 03:38:06 trec maldet(840): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) May 30 2026 03:38:06 trec maldet(840): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 30 2026 03:38:06 trec maldet(840): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 30 2026 03:38:06 trec maldet(840): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 May 30 2026 04:14:28 trec maldet(840): {scan} file list completed in 2181s, found 10367 files... May 30 2026 04:14:28 trec maldet(840): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 30 2026 04:14:28 trec maldet(840): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (10367 files) in progress... May 30 2026 04:24:43 trec maldet(840): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! May 30 2026 04:24:44 trec maldet(840): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 10367, malware hits 0, cleaned hits 0, time 2805s May 30 2026 04:24:44 trec maldet(840): {scan} scan report saved, to view run: maldet --report 260530-0337.840 May 31 2026 04:30:18 trec maldet(23185): {update} checking for available updates... May 31 2026 04:30:18 trec maldet(23185): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 31 2026 04:30:18 trec maldet(23185): {update} hashing install files and checking against server... May 31 2026 04:30:19 trec maldet(23185): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 31 2026 04:30:19 trec maldet(23185): {update} latest version already installed. May 31 2026 04:30:19 trec maldet(24008): {sigup} performing signature update check... May 31 2026 04:30:19 trec maldet(24008): {sigup} local signature set is version 2026052490478 May 31 2026 04:30:20 trec maldet(24008): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 31 2026 04:30:20 trec maldet(24008): {sigup} latest signature set already installed May 31 2026 04:30:20 trec maldet(24782): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 31 2026 04:30:24 trec maldet(24782): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) May 31 2026 04:30:24 trec maldet(24782): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 31 2026 04:30:24 trec maldet(24782): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 31 2026 04:30:24 trec maldet(24782): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 May 31 2026 05:13:13 trec maldet(24782): {scan} file list completed in 2568s, found 2781 files... May 31 2026 05:13:13 trec maldet(24782): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 31 2026 05:13:13 trec maldet(24782): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2781 files) in progress... May 31 2026 05:21:08 trec maldet(24782): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2781, malware hits 0, cleaned hits 0, time 3048s May 31 2026 05:21:08 trec maldet(24782): {scan} scan report saved, to view run: maldet --report 260531-0430.24782 Jun 01 2026 04:25:04 trec maldet(574): {update} checking for available updates... Jun 01 2026 04:25:04 trec maldet(574): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 01 2026 04:25:04 trec maldet(574): {update} hashing install files and checking against server... Jun 01 2026 04:25:05 trec maldet(574): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 01 2026 04:25:05 trec maldet(574): {update} latest version already installed. Jun 01 2026 04:25:05 trec maldet(1725): {sigup} performing signature update check... Jun 01 2026 04:25:05 trec maldet(1725): {sigup} local signature set is version 2026052490478 Jun 01 2026 04:25:05 trec maldet(1725): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 01 2026 04:25:05 trec maldet(1725): {sigup} latest signature set already installed Jun 01 2026 04:25:06 trec maldet(2496): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 01 2026 04:25:08 trec maldet(2496): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 01 2026 04:25:08 trec maldet(2496): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 01 2026 04:25:08 trec maldet(2496): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 01 2026 04:25:08 trec maldet(2496): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 01 2026 04:41:08 trec maldet(2496): {scan} file list completed in 960s, found 46785 files... Jun 01 2026 04:41:08 trec maldet(2496): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 01 2026 04:41:08 trec maldet(2496): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (46785 files) in progress... Jun 01 2026 04:51:13 trec maldet(2496): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 46785, malware hits 0, cleaned hits 0, time 1567s Jun 01 2026 04:51:13 trec maldet(2496): {scan} scan report saved, to view run: maldet --report 260601-0425.2496 Jun 02 2026 03:44:14 trec maldet(25211): {update} checking for available updates... Jun 02 2026 03:44:15 trec maldet(25211): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 02 2026 03:44:15 trec maldet(25211): {update} hashing install files and checking against server... Jun 02 2026 03:44:15 trec maldet(25211): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 02 2026 03:44:15 trec maldet(25211): {update} latest version already installed. Jun 02 2026 03:44:16 trec maldet(26026): {sigup} performing signature update check... Jun 02 2026 03:44:16 trec maldet(26026): {sigup} local signature set is version 2026052490478 Jun 02 2026 03:44:16 trec maldet(26026): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 02 2026 03:44:16 trec maldet(26026): {sigup} latest signature set already installed Jun 02 2026 03:44:16 trec maldet(26791): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 02 2026 03:44:18 trec maldet(26791): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 02 2026 03:44:18 trec maldet(26791): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 02 2026 03:44:18 trec maldet(26791): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 02 2026 03:44:18 trec maldet(26791): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 02 2026 04:02:19 trec maldet(26791): {scan} file list completed in 1081s, found 51446 files... Jun 02 2026 04:02:19 trec maldet(26791): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 02 2026 04:02:19 trec maldet(26791): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (51446 files) in progress... Jun 02 2026 04:13:17 trec maldet(26791): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Jun 02 2026 04:13:17 trec maldet(26791): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 51446, malware hits 0, cleaned hits 0, time 1741s Jun 02 2026 04:13:17 trec maldet(26791): {scan} scan report saved, to view run: maldet --report 260602-0344.26791 Jun 03 2026 04:22:28 trec maldet(14063): {update} checking for available updates... Jun 03 2026 04:22:29 trec maldet(14063): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 03 2026 04:22:29 trec maldet(14063): {update} hashing install files and checking against server... Jun 03 2026 04:22:29 trec maldet(14063): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 03 2026 04:22:29 trec maldet(14063): {update} latest version already installed. Jun 03 2026 04:22:29 trec maldet(14904): {sigup} performing signature update check... Jun 03 2026 04:22:29 trec maldet(14904): {sigup} local signature set is version 2026052490478 Jun 03 2026 04:22:30 trec maldet(14904): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 03 2026 04:22:30 trec maldet(14904): {sigup} latest signature set already installed Jun 03 2026 04:22:30 trec maldet(15939): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 03 2026 04:22:31 trec maldet(15939): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 03 2026 04:22:31 trec maldet(15939): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 03 2026 04:22:31 trec maldet(15939): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 03 2026 04:22:31 trec maldet(15939): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 03 2026 04:33:06 trec maldet(15939): {scan} file list completed in 635s, found 5150 files... Jun 03 2026 04:33:06 trec maldet(15939): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 03 2026 04:33:06 trec maldet(15939): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (5150 files) in progress... Jun 03 2026 04:37:53 trec maldet(15939): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 5150, malware hits 0, cleaned hits 0, time 923s Jun 03 2026 04:37:53 trec maldet(15939): {scan} scan report saved, to view run: maldet --report 260603-0422.15939 Jun 04 2026 03:38:01 trec maldet(2085): {update} checking for available updates... Jun 04 2026 03:38:01 trec maldet(2085): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 04 2026 03:38:01 trec maldet(2085): {update} hashing install files and checking against server... Jun 04 2026 03:38:01 trec maldet(2085): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 04 2026 03:38:01 trec maldet(2085): {update} latest version already installed. Jun 04 2026 03:38:02 trec maldet(3648): {sigup} performing signature update check... Jun 04 2026 03:38:02 trec maldet(3648): {sigup} local signature set is version 2026052490478 Jun 04 2026 03:38:02 trec maldet(3648): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 04 2026 03:38:03 trec maldet(3648): {sigup} latest signature set already installed Jun 04 2026 03:38:03 trec maldet(4506): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 04 2026 03:38:05 trec maldet(4506): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 04 2026 03:38:05 trec maldet(4506): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 04 2026 03:38:05 trec maldet(4506): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 04 2026 03:38:05 trec maldet(4506): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 04 2026 04:02:34 trec maldet(4506): {scan} file list completed in 1469s, found 9910 files... Jun 04 2026 04:02:34 trec maldet(4506): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 04 2026 04:02:34 trec maldet(4506): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (9910 files) in progress... Jun 04 2026 04:12:41 trec maldet(4506): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 9910, malware hits 0, cleaned hits 0, time 2078s Jun 04 2026 04:12:41 trec maldet(4506): {scan} scan report saved, to view run: maldet --report 260604-0338.4506 Jun 04 2026 12:05:36 trec maldet(23066): {sigup} performing signature update check... Jun 04 2026 12:05:36 trec maldet(23066): {sigup} local signature set is version 2026052490478 Jun 04 2026 12:05:36 trec maldet(23066): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 04 2026 12:05:37 trec maldet(23066): {sigup} latest signature set already installed Jun 04 2026 12:05:38 trec maldet(24218): {update} checking for available updates... Jun 04 2026 12:05:38 trec maldet(24218): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 04 2026 12:05:38 trec maldet(24218): {update} hashing install files and checking against server... Jun 04 2026 12:05:39 trec maldet(24218): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 04 2026 12:05:39 trec maldet(24218): {update} latest version already installed. Jun 04 2026 12:05:50 trec maldet(26097): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 04 2026 12:05:50 trec maldet(26097): {scan} building file list for /home/pastmexi/, this might take awhile... Jun 04 2026 12:05:50 trec maldet(26097): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 04 2026 12:05:50 trec maldet(26097): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home/pastmexi/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 04 2026 12:05:50 trec maldet(26097): {scan} file list completed in 0s, found 18244 files... Jun 04 2026 12:05:50 trec maldet(26097): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 04 2026 12:05:50 trec maldet(26097): {scan} scan of /home/pastmexi/ (18244 files) in progress... Jun 04 2026 12:20:40 trec maldet(26097): {scan} scan completed on /home/pastmexi/: files 18244, malware hits 0, cleaned hits 0, time 892s Jun 04 2026 12:20:40 trec maldet(26097): {scan} scan report saved, to view run: maldet --report 260604-1205.26097 Jun 05 2026 03:41:24 trec maldet(22255): {update} checking for available updates... Jun 05 2026 03:41:24 trec maldet(22255): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 05 2026 03:41:24 trec maldet(22255): {update} hashing install files and checking against server... Jun 05 2026 03:41:24 trec maldet(22255): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 05 2026 03:41:24 trec maldet(22255): {update} latest version already installed. Jun 05 2026 03:41:25 trec maldet(23042): {sigup} performing signature update check... Jun 05 2026 03:41:25 trec maldet(23042): {sigup} local signature set is version 2026052490478 Jun 05 2026 03:41:25 trec maldet(23042): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 05 2026 03:41:25 trec maldet(23042): {sigup} latest signature set already installed Jun 05 2026 03:41:25 trec maldet(23799): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 05 2026 03:41:26 trec maldet(23799): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 05 2026 03:41:26 trec maldet(23799): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 05 2026 03:41:26 trec maldet(23799): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 05 2026 03:41:26 trec maldet(23799): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 05 2026 03:59:59 trec maldet(23799): {scan} file list completed in 1113s, found 24346 files... Jun 05 2026 03:59:59 trec maldet(23799): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 05 2026 03:59:59 trec maldet(23799): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (24346 files) in progress... Jun 05 2026 04:15:27 trec maldet(23799): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 24346, malware hits 0, cleaned hits 0, time 2042s Jun 05 2026 04:15:27 trec maldet(23799): {scan} scan report saved, to view run: maldet --report 260605-0341.23799 Jun 06 2026 03:45:07 trec maldet(1196): {update} checking for available updates... Jun 06 2026 03:45:08 trec maldet(1196): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 06 2026 03:45:08 trec maldet(1196): {update} hashing install files and checking against server... Jun 06 2026 03:45:08 trec maldet(1196): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 06 2026 03:45:08 trec maldet(1196): {update} latest version already installed. Jun 06 2026 03:45:09 trec maldet(2294): {sigup} performing signature update check... Jun 06 2026 03:45:09 trec maldet(2294): {sigup} local signature set is version 2026052490478 Jun 06 2026 03:45:09 trec maldet(2294): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 06 2026 03:45:09 trec maldet(2294): {sigup} latest signature set already installed Jun 06 2026 03:45:10 trec maldet(3105): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 06 2026 03:45:14 trec maldet(3105): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 06 2026 03:45:14 trec maldet(3105): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 06 2026 03:45:14 trec maldet(3105): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 06 2026 03:45:14 trec maldet(3105): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 06 2026 04:20:32 trec maldet(3105): {scan} file list completed in 2118s, found 6470 files... Jun 06 2026 04:20:32 trec maldet(3105): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 06 2026 04:20:32 trec maldet(3105): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (6470 files) in progress... Jun 06 2026 04:27:44 trec maldet(3105): {hit} malware hit {MD5}php.backdoor.generic.18685 found for /home/pastarterza/public_html/posycer/wlitegx/dyznljm/tesTkey.php Jun 06 2026 04:27:44 trec maldet(3105): {quar} malware quarantined from '/home/pastarterza/public_html/posycer/wlitegx/dyznljm/tesTkey.php' to '/usr/local/maldetect/quarantine/tesTkey.php.3107121210' Jun 06 2026 04:27:44 trec maldet(3105): {hit} malware hit {MD5}php.backdoor.generic.18490 found for /home/pastarterza/public_html/posycer/wlitegx/dyznljm/unzipper.php Jun 06 2026 04:27:44 trec maldet(3105): {quar} malware quarantined from '/home/pastarterza/public_html/posycer/wlitegx/dyznljm/unzipper.php' to '/usr/local/maldetect/quarantine/unzipper.php.732912701' Jun 06 2026 04:27:44 trec maldet(3105): {hit} malware hit {MD5}php.backdoor.generic.18685 found for /home/terzapas/public_html/wp-includes/rest-api/kvzqrod/s1edblh/fgbrpeq/tesTivw.php Jun 06 2026 04:27:44 trec maldet(3105): {quar} malware quarantined from '/home/terzapas/public_html/wp-includes/rest-api/kvzqrod/s1edblh/fgbrpeq/tesTivw.php' to '/usr/local/maldetect/quarantine/tesTivw.php.207685608' Jun 06 2026 04:27:44 trec maldet(3105): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 6470, malware hits 3, cleaned hits 0, time 2554s Jun 06 2026 04:27:44 trec maldet(3105): {scan} scan report saved, to view run: maldet --report 260606-0345.3105 Jun 06 2026 04:27:44 trec maldet(3105): {alert} sent scan report to carlos@trec.com.mx Jun 07 2026 04:10:35 trec maldet(16509): {update} checking for available updates... Jun 07 2026 04:10:36 trec maldet(16509): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 07 2026 04:10:36 trec maldet(16509): {update} hashing install files and checking against server... Jun 07 2026 04:10:36 trec maldet(16509): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 07 2026 04:10:36 trec maldet(16509): {update} latest version already installed. Jun 07 2026 04:10:36 trec maldet(17667): {sigup} performing signature update check... Jun 07 2026 04:10:36 trec maldet(17667): {sigup} local signature set is version 2026052490478 Jun 07 2026 04:10:37 trec maldet(17667): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 07 2026 04:10:37 trec maldet(17667): {sigup} latest signature set already installed Jun 07 2026 04:10:38 trec maldet(18594): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 07 2026 04:10:42 trec maldet(18594): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 07 2026 04:10:42 trec maldet(18594): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 07 2026 04:10:42 trec maldet(18594): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 07 2026 04:10:42 trec maldet(18594): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 07 2026 04:47:17 trec maldet(18594): {scan} file list completed in 2195s, found 429 files... Jun 07 2026 04:47:17 trec maldet(18594): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 07 2026 04:47:17 trec maldet(18594): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (429 files) in progress... Jun 07 2026 04:50:54 trec maldet(18594): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 429, malware hits 0, cleaned hits 0, time 2415s Jun 07 2026 04:50:54 trec maldet(18594): {scan} scan report saved, to view run: maldet --report 260607-0410.18594 Jun 08 2026 04:38:56 trec maldet(5654): {update} checking for available updates... Jun 08 2026 04:38:56 trec maldet(5654): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 08 2026 04:38:56 trec maldet(5654): {update} hashing install files and checking against server... Jun 08 2026 04:38:57 trec maldet(5654): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 08 2026 04:38:57 trec maldet(5654): {update} latest version already installed. Jun 08 2026 04:38:57 trec maldet(6473): {sigup} performing signature update check... Jun 08 2026 04:38:57 trec maldet(6473): {sigup} local signature set is version 2026052490478 Jun 08 2026 04:38:57 trec maldet(6473): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 08 2026 04:38:57 trec maldet(6473): {sigup} latest signature set already installed Jun 08 2026 04:38:58 trec maldet(7499): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 08 2026 04:38:59 trec maldet(7499): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 08 2026 04:38:59 trec maldet(7499): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 08 2026 04:38:59 trec maldet(7499): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 08 2026 04:38:59 trec maldet(7499): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 08 2026 04:54:47 trec maldet(7499): {scan} file list completed in 948s, found 19514 files... Jun 08 2026 04:54:47 trec maldet(7499): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 08 2026 04:54:47 trec maldet(7499): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (19514 files) in progress... Jun 08 2026 05:15:37 trec maldet(7499): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 19514, malware hits 0, cleaned hits 0, time 2199s Jun 08 2026 05:15:37 trec maldet(7499): {scan} scan report saved, to view run: maldet --report 260608-0438.7499 Jun 09 2026 04:01:21 trec maldet(12366): {update} checking for available updates... Jun 09 2026 04:01:21 trec maldet(12366): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 09 2026 04:01:21 trec maldet(12366): {update} hashing install files and checking against server... Jun 09 2026 04:01:21 trec maldet(12366): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 09 2026 04:01:21 trec maldet(12366): {update} latest version already installed. Jun 09 2026 04:01:22 trec maldet(13113): {sigup} performing signature update check... Jun 09 2026 04:01:22 trec maldet(13113): {sigup} local signature set is version 2026052490478 Jun 09 2026 04:01:22 trec maldet(13113): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 09 2026 04:01:22 trec maldet(13113): {sigup} latest signature set already installed Jun 09 2026 04:01:23 trec maldet(13843): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 09 2026 04:01:24 trec maldet(13843): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 09 2026 04:01:24 trec maldet(13843): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 09 2026 04:01:24 trec maldet(13843): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 09 2026 04:01:24 trec maldet(13843): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 09 2026 04:15:17 trec maldet(13843): {scan} file list completed in 833s, found 569 files... Jun 09 2026 04:15:17 trec maldet(13843): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 09 2026 04:15:17 trec maldet(13843): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (569 files) in progress... Jun 09 2026 04:17:46 trec maldet(13843): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 569, malware hits 0, cleaned hits 0, time 983s Jun 09 2026 04:17:46 trec maldet(13843): {scan} scan report saved, to view run: maldet --report 260609-0401.13843 Jun 10 2026 04:27:12 trec maldet(30583): {update} checking for available updates... Jun 10 2026 04:27:12 trec maldet(30583): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 10 2026 04:27:12 trec maldet(30583): {update} hashing install files and checking against server... Jun 10 2026 04:27:12 trec maldet(30583): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 10 2026 04:27:12 trec maldet(30583): {update} latest version already installed. Jun 10 2026 04:27:12 trec maldet(31455): {sigup} performing signature update check... Jun 10 2026 04:27:12 trec maldet(31455): {sigup} local signature set is version 2026052490478 Jun 10 2026 04:27:13 trec maldet(31455): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 10 2026 04:27:13 trec maldet(31455): {sigup} latest signature set already installed Jun 10 2026 04:27:13 trec maldet(32323): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 10 2026 04:27:15 trec maldet(32323): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 10 2026 04:27:15 trec maldet(32323): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 10 2026 04:27:15 trec maldet(32323): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 10 2026 04:27:15 trec maldet(32323): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 10 2026 04:34:19 trec maldet(32323): {scan} file list completed in 424s, found 149241 files... Jun 10 2026 04:34:19 trec maldet(32323): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 10 2026 04:34:19 trec maldet(32323): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (149241 files) in progress... Jun 10 2026 05:14:09 trec maldet(32323): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 149241, malware hits 0, cleaned hits 0, time 2816s Jun 10 2026 05:14:09 trec maldet(32323): {scan} scan report saved, to view run: maldet --report 260610-0427.32323 Jun 11 2026 04:23:45 trec maldet(2802): {update} checking for available updates... Jun 11 2026 04:23:46 trec maldet(2802): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 11 2026 04:23:46 trec maldet(2802): {update} hashing install files and checking against server... Jun 11 2026 04:23:46 trec maldet(2802): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 11 2026 04:23:46 trec maldet(2802): {update} latest version already installed. Jun 11 2026 04:23:46 trec maldet(3625): {sigup} performing signature update check... Jun 11 2026 04:23:46 trec maldet(3625): {sigup} local signature set is version 2026052490478 Jun 11 2026 04:23:47 trec maldet(3625): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 11 2026 04:23:47 trec maldet(3625): {sigup} latest signature set already installed Jun 11 2026 04:23:47 trec maldet(4415): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 11 2026 04:23:48 trec maldet(4415): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 11 2026 04:23:48 trec maldet(4415): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 11 2026 04:23:48 trec maldet(4415): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 11 2026 04:23:48 trec maldet(4415): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 11 2026 04:34:03 trec maldet(4415): {scan} file list completed in 615s, found 74835 files... Jun 11 2026 04:34:03 trec maldet(4415): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 11 2026 04:34:03 trec maldet(4415): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (74835 files) in progress... Jun 11 2026 04:54:02 trec maldet(4415): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 74835, malware hits 0, cleaned hits 0, time 1815s Jun 11 2026 04:54:02 trec maldet(4415): {scan} scan report saved, to view run: maldet --report 260611-0423.4415 Jun 12 2026 04:19:44 trec maldet(520): {update} checking for available updates... Jun 12 2026 04:19:45 trec maldet(520): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 12 2026 04:19:45 trec maldet(520): {update} hashing install files and checking against server... Jun 12 2026 04:19:45 trec maldet(520): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 12 2026 04:19:45 trec maldet(520): {update} latest version already installed. Jun 12 2026 04:19:45 trec maldet(1551): {sigup} performing signature update check... Jun 12 2026 04:19:45 trec maldet(1551): {sigup} local signature set is version 2026052490478 Jun 12 2026 04:19:46 trec maldet(1551): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 12 2026 04:19:46 trec maldet(1551): {sigup} latest signature set already installed Jun 12 2026 04:19:47 trec maldet(2437): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 12 2026 04:19:48 trec maldet(2437): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 12 2026 04:19:48 trec maldet(2437): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 12 2026 04:19:48 trec maldet(2437): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 12 2026 04:19:48 trec maldet(2437): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 12 2026 04:29:47 trec maldet(2437): {scan} file list completed in 599s, found 125308 files... Jun 12 2026 04:29:47 trec maldet(2437): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 12 2026 04:29:47 trec maldet(2437): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (125308 files) in progress... Jun 12 2026 04:49:00 trec maldet(2437): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 125308, malware hits 0, cleaned hits 0, time 1753s Jun 12 2026 04:49:00 trec maldet(2437): {scan} scan report saved, to view run: maldet --report 260612-0419.2437