D7net
Home
Console
Upload
information
Create File
Create Folder
About
Tools
:
/
proc
/
thread-self
/
root
/
usr
/
local
/
maldetect
/
logs
/
Filename :
event_log
back
Copy
Feb 27 2025 03:30:57 cp5 maldet(628719): {sigup} performing signature update check... Feb 27 2025 03:30:58 cp5 maldet(628719): {sigup} local signature set is version 20250225482944 Feb 27 2025 03:30:58 cp5 maldet(628719): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 27 2025 03:30:58 cp5 maldet(628719): {sigup} latest signature set already installed Feb 27 2025 03:30:58 cp5 maldet(628381): {update} completed update v1.6.6 1591f0 => v1.6.6 359d25, running signature updates... Feb 27 2025 03:30:58 cp5 maldet(628810): {sigup} performing signature update check... Feb 27 2025 03:30:58 cp5 maldet(628810): {sigup} local signature set is version 20250225482944 Feb 27 2025 03:30:59 cp5 maldet(628810): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 27 2025 03:30:59 cp5 maldet(628810): {sigup} latest signature set already installed Feb 27 2025 03:30:59 cp5 maldet(628381): {update} update and config import completed Feb 27 2025 03:30:59 cp5 maldet(628903): {sigup} performing signature update check... Feb 27 2025 03:30:59 cp5 maldet(628903): {sigup} local signature set is version 20250225482944 Feb 27 2025 03:30:59 cp5 maldet(628903): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 27 2025 03:30:59 cp5 maldet(628903): {sigup} latest signature set already installed Feb 27 2025 03:30:59 cp5 maldet(628991): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 27 2025 03:30:59 cp5 maldet(628991): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 27 2025 03:30:59 cp5 maldet(628991): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Feb 27 2025 03:30:59 cp5 maldet(628991): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 27 2025 03:30:59 cp5 maldet(628991): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 27 2025 03:31:18 cp5 maldet(628991): {scan} file list completed in 19s, found 17551 files... Feb 27 2025 03:31:18 cp5 maldet(628991): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 27 2025 03:31:18 cp5 maldet(628991): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (17551 files) in progress... Feb 27 2025 03:35:20 cp5 maldet(628991): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Feb 27 2025 03:35:20 cp5 maldet(628991): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 17551, malware hits 0, cleaned hits 0, time 261s Feb 27 2025 03:35:20 cp5 maldet(628991): {scan} scan report saved, to view run: maldet --report 250227-0330.628991 Feb 28 2025 03:20:50 cp5 maldet(1090661): {update} checking for available updates... Feb 28 2025 03:20:50 cp5 maldet(1090661): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 28 2025 03:20:50 cp5 maldet(1090661): {update} hashing install files and checking against server... Feb 28 2025 03:20:50 cp5 maldet(1090661): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 28 2025 03:20:50 cp5 maldet(1090661): {update} latest version already installed. Feb 28 2025 03:20:51 cp5 maldet(1090770): {sigup} performing signature update check... Feb 28 2025 03:20:51 cp5 maldet(1090770): {sigup} local signature set is version 20250225482944 Feb 28 2025 03:20:51 cp5 maldet(1090770): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 28 2025 03:20:51 cp5 maldet(1090770): {sigup} latest signature set already installed Feb 28 2025 03:20:51 cp5 maldet(1090858): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 28 2025 03:20:51 cp5 maldet(1090858): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 28 2025 03:20:51 cp5 maldet(1090858): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Feb 28 2025 03:20:51 cp5 maldet(1090858): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 28 2025 03:20:51 cp5 maldet(1090858): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 28 2025 03:21:05 cp5 maldet(1090858): {scan} file list completed in 14s, found 18792 files... Feb 28 2025 03:21:05 cp5 maldet(1090858): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 28 2025 03:21:05 cp5 maldet(1090858): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (18792 files) in progress... Feb 28 2025 03:26:36 cp5 maldet(1090858): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Feb 28 2025 03:26:37 cp5 maldet(1090858): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 18792, malware hits 0, cleaned hits 0, time 346s Feb 28 2025 03:26:37 cp5 maldet(1090858): {scan} scan report saved, to view run: maldet --report 250228-0320.1090858 Mar 01 2025 03:47:25 cp5 maldet(1546111): {update} checking for available updates... Mar 01 2025 03:47:25 cp5 maldet(1546111): {update} could not download https://cdn.rfxn.com/downloads/maldet.current.ver, please try again later. Mar 01 2025 03:47:25 cp5 maldet(1546111): {update} could not download version file from server, please try again later. Mar 01 2025 03:47:25 cp5 maldet(1546183): {sigup} performing signature update check... Mar 01 2025 03:47:25 cp5 maldet(1546183): {sigup} local signature set is version 20250225482944 Mar 01 2025 03:47:26 cp5 maldet(1546183): {sigup} could not download https://cdn.rfxn.com/downloads/maldet.sigs.ver, please try again later. Mar 01 2025 03:47:26 cp5 maldet(1546183): {sigup} could not download signature data from server, please try again later. Mar 01 2025 03:47:26 cp5 maldet(1546263): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 01 2025 03:47:26 cp5 maldet(1546263): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 01 2025 03:47:26 cp5 maldet(1546263): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 01 2025 03:47:26 cp5 maldet(1546263): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 01 2025 03:47:26 cp5 maldet(1546263): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 01 2025 03:47:27 cp5 maldet(1546263): {scan} scan returned empty file list; check that path exists, contains files in days range or files in scope of configuration. Mar 02 2025 03:48:05 cp5 maldet(1972844): {update} checking for available updates... Mar 02 2025 03:48:05 cp5 maldet(1972844): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 02 2025 03:48:05 cp5 maldet(1972844): {update} hashing install files and checking against server... Mar 02 2025 03:48:06 cp5 maldet(1972844): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 02 2025 03:48:06 cp5 maldet(1972844): {update} latest version already installed. Mar 02 2025 03:48:06 cp5 maldet(1972956): {sigup} performing signature update check... Mar 02 2025 03:48:06 cp5 maldet(1972956): {sigup} local signature set is version 20250225482944 Mar 02 2025 03:48:06 cp5 maldet(1972956): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 02 2025 03:48:06 cp5 maldet(1972956): {sigup} new signature set 202503011812952 available Mar 02 2025 03:48:06 cp5 maldet(1972956): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 02 2025 03:48:07 cp5 maldet(1972956): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 02 2025 03:48:08 cp5 maldet(1972956): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 02 2025 03:48:08 cp5 maldet(1972956): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 02 2025 03:48:08 cp5 maldet(1972956): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 02 2025 03:48:08 cp5 maldet(1972956): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 02 2025 03:48:08 cp5 maldet(1972956): {sigup} verified md5sum of maldet-sigpack.tgz Mar 02 2025 03:48:08 cp5 maldet(1972956): {sigup} unpacked and installed maldet-sigpack.tgz Mar 02 2025 03:48:08 cp5 maldet(1972956): {sigup} verified md5sum of maldet-clean.tgz Mar 02 2025 03:48:08 cp5 maldet(1972956): {sigup} unpacked and installed maldet-clean.tgz Mar 02 2025 03:48:08 cp5 maldet(1972956): {sigup} signature set update completed Mar 02 2025 03:48:08 cp5 maldet(1972956): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 02 2025 03:48:08 cp5 maldet(1973161): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 02 2025 03:48:08 cp5 maldet(1973161): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 02 2025 03:48:08 cp5 maldet(1973161): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 02 2025 03:48:08 cp5 maldet(1973161): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 02 2025 03:48:08 cp5 maldet(1973161): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 02 2025 03:48:21 cp5 maldet(1973161): {scan} file list completed in 13s, found 6717 files... Mar 02 2025 03:48:21 cp5 maldet(1973161): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 02 2025 03:48:21 cp5 maldet(1973161): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (6717 files) in progress... Mar 02 2025 03:50:11 cp5 maldet(1973161): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 6717, malware hits 0, cleaned hits 0, time 123s Mar 02 2025 03:50:11 cp5 maldet(1973161): {scan} scan report saved, to view run: maldet --report 250302-0348.1973161 Mar 03 2025 03:23:25 cp5 maldet(2415019): {update} checking for available updates... Mar 03 2025 03:23:25 cp5 maldet(2415019): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 03 2025 03:23:25 cp5 maldet(2415019): {update} hashing install files and checking against server... Mar 03 2025 03:23:26 cp5 maldet(2415019): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 03 2025 03:23:26 cp5 maldet(2415019): {update} latest version already installed. Mar 03 2025 03:23:26 cp5 maldet(2415129): {sigup} performing signature update check... Mar 03 2025 03:23:26 cp5 maldet(2415129): {sigup} local signature set is version 202503011812952 Mar 03 2025 03:23:26 cp5 maldet(2415129): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 03 2025 03:23:26 cp5 maldet(2415129): {sigup} latest signature set already installed Mar 03 2025 03:23:26 cp5 maldet(2415217): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 03 2025 03:23:26 cp5 maldet(2415217): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 03 2025 03:23:26 cp5 maldet(2415217): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 03 2025 03:23:26 cp5 maldet(2415217): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 03 2025 03:23:26 cp5 maldet(2415217): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 03 2025 03:23:29 cp5 maldet(2415217): {scan} file list completed in 3s, found 7920 files... Mar 03 2025 03:23:29 cp5 maldet(2415217): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 03 2025 03:23:29 cp5 maldet(2415217): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (7920 files) in progress... Mar 03 2025 03:25:13 cp5 maldet(2415217): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Mar 03 2025 03:25:13 cp5 maldet(2415217): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 7920, malware hits 0, cleaned hits 0, time 107s Mar 03 2025 03:25:13 cp5 maldet(2415217): {scan} scan report saved, to view run: maldet --report 250303-0323.2415217 Mar 04 2025 03:27:14 cp5 maldet(2846144): {update} checking for available updates... Mar 04 2025 03:27:14 cp5 maldet(2846144): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 04 2025 03:27:14 cp5 maldet(2846144): {update} hashing install files and checking against server... Mar 04 2025 03:27:14 cp5 maldet(2846144): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 04 2025 03:27:14 cp5 maldet(2846144): {update} latest version already installed. Mar 04 2025 03:27:14 cp5 maldet(2846253): {sigup} performing signature update check... Mar 04 2025 03:27:14 cp5 maldet(2846253): {sigup} local signature set is version 202503011812952 Mar 04 2025 03:27:15 cp5 maldet(2846253): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 04 2025 03:27:15 cp5 maldet(2846253): {sigup} latest signature set already installed Mar 04 2025 03:27:15 cp5 maldet(2846341): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 04 2025 03:27:15 cp5 maldet(2846341): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 04 2025 03:27:15 cp5 maldet(2846341): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 04 2025 03:27:15 cp5 maldet(2846341): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 04 2025 03:27:15 cp5 maldet(2846341): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 04 2025 03:27:18 cp5 maldet(2846341): {scan} file list completed in 3s, found 6332 files... Mar 04 2025 03:27:18 cp5 maldet(2846341): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 04 2025 03:27:18 cp5 maldet(2846341): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (6332 files) in progress... Mar 04 2025 03:28:36 cp5 maldet(2846341): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Mar 04 2025 03:28:36 cp5 maldet(2846341): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 6332, malware hits 0, cleaned hits 0, time 81s Mar 04 2025 03:28:36 cp5 maldet(2846341): {scan} scan report saved, to view run: maldet --report 250304-0327.2846341 Mar 05 2025 03:54:55 cp5 maldet(3287144): {update} checking for available updates... Mar 05 2025 03:54:55 cp5 maldet(3287144): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 05 2025 03:54:55 cp5 maldet(3287144): {update} hashing install files and checking against server... Mar 05 2025 03:54:55 cp5 maldet(3287144): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 05 2025 03:54:55 cp5 maldet(3287144): {update} latest version already installed. Mar 05 2025 03:54:55 cp5 maldet(3287253): {sigup} performing signature update check... Mar 05 2025 03:54:55 cp5 maldet(3287253): {sigup} local signature set is version 202503011812952 Mar 05 2025 03:54:56 cp5 maldet(3287253): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 05 2025 03:54:56 cp5 maldet(3287253): {sigup} new signature set 20250304486819 available Mar 05 2025 03:54:56 cp5 maldet(3287253): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 05 2025 03:54:57 cp5 maldet(3287253): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 05 2025 03:54:57 cp5 maldet(3287253): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 05 2025 03:54:57 cp5 maldet(3287253): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 05 2025 03:54:57 cp5 maldet(3287253): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 05 2025 03:54:58 cp5 maldet(3287253): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 05 2025 03:54:58 cp5 maldet(3287253): {sigup} verified md5sum of maldet-sigpack.tgz Mar 05 2025 03:54:58 cp5 maldet(3287253): {sigup} unpacked and installed maldet-sigpack.tgz Mar 05 2025 03:54:58 cp5 maldet(3287253): {sigup} verified md5sum of maldet-clean.tgz Mar 05 2025 03:54:58 cp5 maldet(3287253): {sigup} unpacked and installed maldet-clean.tgz Mar 05 2025 03:54:58 cp5 maldet(3287253): {sigup} signature set update completed Mar 05 2025 03:54:58 cp5 maldet(3287253): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 05 2025 03:54:58 cp5 maldet(3287461): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 05 2025 03:54:58 cp5 maldet(3287461): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 05 2025 03:54:58 cp5 maldet(3287461): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 05 2025 03:54:58 cp5 maldet(3287461): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 05 2025 03:54:58 cp5 maldet(3287461): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 05 2025 03:55:01 cp5 maldet(3287461): {scan} file list completed in 3s, found 7640 files... Mar 05 2025 03:55:01 cp5 maldet(3287461): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 05 2025 03:55:01 cp5 maldet(3287461): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (7640 files) in progress... Mar 05 2025 03:56:41 cp5 maldet(3287461): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Mar 05 2025 03:56:41 cp5 maldet(3287461): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 7640, malware hits 0, cleaned hits 0, time 103s Mar 05 2025 03:56:41 cp5 maldet(3287461): {scan} scan report saved, to view run: maldet --report 250305-0354.3287461 Mar 06 2025 03:20:23 cp5 maldet(3706064): {update} checking for available updates... Mar 06 2025 03:20:24 cp5 maldet(3706064): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 06 2025 03:20:24 cp5 maldet(3706064): {update} hashing install files and checking against server... Mar 06 2025 03:20:24 cp5 maldet(3706064): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 06 2025 03:20:24 cp5 maldet(3706064): {update} latest version already installed. Mar 06 2025 03:20:24 cp5 maldet(3706175): {sigup} performing signature update check... Mar 06 2025 03:20:24 cp5 maldet(3706175): {sigup} local signature set is version 20250304486819 Mar 06 2025 03:20:25 cp5 maldet(3706175): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 06 2025 03:20:25 cp5 maldet(3706175): {sigup} latest signature set already installed Mar 06 2025 03:20:25 cp5 maldet(3706263): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 06 2025 03:20:25 cp5 maldet(3706263): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 06 2025 03:20:25 cp5 maldet(3706263): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 06 2025 03:20:25 cp5 maldet(3706263): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 06 2025 03:20:25 cp5 maldet(3706263): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 06 2025 03:20:27 cp5 maldet(3706263): {scan} file list completed in 2s, found 3962 files... Mar 06 2025 03:20:27 cp5 maldet(3706263): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 06 2025 03:20:27 cp5 maldet(3706263): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (3962 files) in progress... Mar 06 2025 03:21:17 cp5 maldet(3706263): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 3962, malware hits 0, cleaned hits 0, time 52s Mar 06 2025 03:21:17 cp5 maldet(3706263): {scan} scan report saved, to view run: maldet --report 250306-0320.3706263 Mar 07 2025 03:39:28 cp5 maldet(4138475): {update} checking for available updates... Mar 07 2025 03:39:28 cp5 maldet(4138475): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 07 2025 03:39:28 cp5 maldet(4138475): {update} hashing install files and checking against server... Mar 07 2025 03:39:29 cp5 maldet(4138475): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 07 2025 03:39:29 cp5 maldet(4138475): {update} latest version already installed. Mar 07 2025 03:39:29 cp5 maldet(4138589): {sigup} performing signature update check... Mar 07 2025 03:39:29 cp5 maldet(4138589): {sigup} local signature set is version 20250304486819 Mar 07 2025 03:39:29 cp5 maldet(4138589): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 07 2025 03:39:29 cp5 maldet(4138589): {sigup} latest signature set already installed Mar 07 2025 03:39:29 cp5 maldet(4138677): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 07 2025 03:39:29 cp5 maldet(4138677): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 07 2025 03:39:29 cp5 maldet(4138677): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 07 2025 03:39:29 cp5 maldet(4138677): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 07 2025 03:39:29 cp5 maldet(4138677): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 07 2025 03:39:34 cp5 maldet(4138677): {scan} file list completed in 5s, found 4765 files... Mar 07 2025 03:39:34 cp5 maldet(4138677): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 07 2025 03:39:34 cp5 maldet(4138677): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (4765 files) in progress... Mar 07 2025 03:40:36 cp5 maldet(4138677): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 4765, malware hits 0, cleaned hits 0, time 67s Mar 07 2025 03:40:36 cp5 maldet(4138677): {scan} scan report saved, to view run: maldet --report 250307-0339.4138677 Mar 08 2025 03:46:46 cp5 maldet(411508): {update} checking for available updates... Mar 08 2025 03:46:46 cp5 maldet(411508): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 08 2025 03:46:46 cp5 maldet(411508): {update} hashing install files and checking against server... Mar 08 2025 03:46:47 cp5 maldet(411508): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 08 2025 03:46:47 cp5 maldet(411508): {update} latest version already installed. Mar 08 2025 03:46:47 cp5 maldet(411617): {sigup} performing signature update check... Mar 08 2025 03:46:47 cp5 maldet(411617): {sigup} local signature set is version 20250304486819 Mar 08 2025 03:46:47 cp5 maldet(411617): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 08 2025 03:46:47 cp5 maldet(411617): {sigup} new signature set 202503071159774 available Mar 08 2025 03:46:47 cp5 maldet(411617): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 08 2025 03:46:48 cp5 maldet(411617): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 08 2025 03:46:48 cp5 maldet(411617): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 08 2025 03:46:48 cp5 maldet(411617): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 08 2025 03:46:49 cp5 maldet(411617): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 08 2025 03:46:49 cp5 maldet(411617): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 08 2025 03:46:49 cp5 maldet(411617): {sigup} verified md5sum of maldet-sigpack.tgz Mar 08 2025 03:46:49 cp5 maldet(411617): {sigup} unpacked and installed maldet-sigpack.tgz Mar 08 2025 03:46:49 cp5 maldet(411617): {sigup} verified md5sum of maldet-clean.tgz Mar 08 2025 03:46:49 cp5 maldet(411617): {sigup} unpacked and installed maldet-clean.tgz Mar 08 2025 03:46:49 cp5 maldet(411617): {sigup} signature set update completed Mar 08 2025 03:46:49 cp5 maldet(411617): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 08 2025 03:46:49 cp5 maldet(411821): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 08 2025 03:46:49 cp5 maldet(411821): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 08 2025 03:46:49 cp5 maldet(411821): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 08 2025 03:46:49 cp5 maldet(411821): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 08 2025 03:46:49 cp5 maldet(411821): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 08 2025 03:46:56 cp5 maldet(411821): {scan} file list completed in 7s, found 1501 files... Mar 08 2025 03:46:56 cp5 maldet(411821): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 08 2025 03:46:56 cp5 maldet(411821): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1501 files) in progress... Mar 08 2025 03:47:19 cp5 maldet(411821): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1501, malware hits 0, cleaned hits 0, time 30s Mar 08 2025 03:47:19 cp5 maldet(411821): {scan} scan report saved, to view run: maldet --report 250308-0346.411821 Mar 09 2025 03:49:42 cp5 maldet(844258): {update} checking for available updates... Mar 09 2025 03:49:42 cp5 maldet(844258): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 09 2025 03:49:42 cp5 maldet(844258): {update} hashing install files and checking against server... Mar 09 2025 03:49:43 cp5 maldet(844258): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 09 2025 03:49:43 cp5 maldet(844258): {update} latest version already installed. Mar 09 2025 03:49:43 cp5 maldet(844367): {sigup} performing signature update check... Mar 09 2025 03:49:43 cp5 maldet(844367): {sigup} local signature set is version 202503071159774 Mar 09 2025 03:49:43 cp5 maldet(844367): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 09 2025 03:49:43 cp5 maldet(844367): {sigup} latest signature set already installed Mar 09 2025 03:49:43 cp5 maldet(844456): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 09 2025 03:49:43 cp5 maldet(844456): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 09 2025 03:49:43 cp5 maldet(844456): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 09 2025 03:49:43 cp5 maldet(844456): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 09 2025 03:49:43 cp5 maldet(844456): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 09 2025 03:49:47 cp5 maldet(844456): {scan} file list completed in 4s, found 4216 files... Mar 09 2025 03:49:47 cp5 maldet(844456): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 09 2025 03:49:47 cp5 maldet(844456): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (4216 files) in progress... Mar 09 2025 03:50:39 cp5 maldet(844456): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 4216, malware hits 0, cleaned hits 0, time 56s Mar 09 2025 03:50:39 cp5 maldet(844456): {scan} scan report saved, to view run: maldet --report 250309-0349.844456 Mar 10 2025 03:11:04 cp5 maldet(1257908): {update} checking for available updates... Mar 10 2025 03:11:04 cp5 maldet(1257908): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 10 2025 03:11:04 cp5 maldet(1257908): {update} hashing install files and checking against server... Mar 10 2025 03:11:05 cp5 maldet(1257908): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 10 2025 03:11:05 cp5 maldet(1257908): {update} latest version already installed. Mar 10 2025 03:11:05 cp5 maldet(1258018): {sigup} performing signature update check... Mar 10 2025 03:11:05 cp5 maldet(1258018): {sigup} local signature set is version 202503071159774 Mar 10 2025 03:11:05 cp5 maldet(1258018): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 10 2025 03:11:05 cp5 maldet(1258018): {sigup} latest signature set already installed Mar 10 2025 03:11:05 cp5 maldet(1258106): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 10 2025 03:11:05 cp5 maldet(1258106): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 10 2025 03:11:05 cp5 maldet(1258106): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 10 2025 03:11:05 cp5 maldet(1258106): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 10 2025 03:11:06 cp5 maldet(1258106): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 10 2025 03:11:08 cp5 maldet(1258106): {scan} file list completed in 3s, found 4522 files... Mar 10 2025 03:11:08 cp5 maldet(1258106): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 10 2025 03:11:08 cp5 maldet(1258106): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (4522 files) in progress... Mar 10 2025 03:12:09 cp5 maldet(1258106): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 4522, malware hits 0, cleaned hits 0, time 64s Mar 10 2025 03:12:09 cp5 maldet(1258106): {scan} scan report saved, to view run: maldet --report 250310-0311.1258106 Mar 11 2025 03:34:30 cp5 maldet(1713774): {update} checking for available updates... Mar 11 2025 03:34:30 cp5 maldet(1713774): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 11 2025 03:34:30 cp5 maldet(1713774): {update} hashing install files and checking against server... Mar 11 2025 03:34:31 cp5 maldet(1713774): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 11 2025 03:34:31 cp5 maldet(1713774): {update} latest version already installed. Mar 11 2025 03:34:31 cp5 maldet(1713909): {sigup} performing signature update check... Mar 11 2025 03:34:31 cp5 maldet(1713909): {sigup} local signature set is version 202503071159774 Mar 11 2025 03:34:31 cp5 maldet(1713909): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 11 2025 03:34:31 cp5 maldet(1713909): {sigup} latest signature set already installed Mar 11 2025 03:34:31 cp5 maldet(1713997): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 11 2025 03:34:31 cp5 maldet(1713997): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 11 2025 03:34:32 cp5 maldet(1713997): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 11 2025 03:34:32 cp5 maldet(1713997): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 11 2025 03:34:32 cp5 maldet(1713997): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 11 2025 03:34:46 cp5 maldet(1713997): {scan} file list completed in 14s, found 8726 files... Mar 11 2025 03:34:46 cp5 maldet(1713997): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 11 2025 03:34:46 cp5 maldet(1713997): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (8726 files) in progress... Mar 11 2025 03:37:19 cp5 maldet(1713997): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Mar 11 2025 03:37:19 cp5 maldet(1713997): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 8726, malware hits 0, cleaned hits 0, time 168s Mar 11 2025 03:37:19 cp5 maldet(1713997): {scan} scan report saved, to view run: maldet --report 250311-0334.1713997 Mar 12 2025 03:14:03 cp5 maldet(2177152): {update} checking for available updates... Mar 12 2025 03:14:04 cp5 maldet(2177152): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 12 2025 03:14:04 cp5 maldet(2177152): {update} hashing install files and checking against server... Mar 12 2025 03:14:04 cp5 maldet(2177152): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 12 2025 03:14:04 cp5 maldet(2177152): {update} latest version already installed. Mar 12 2025 03:14:04 cp5 maldet(2177261): {sigup} performing signature update check... Mar 12 2025 03:14:04 cp5 maldet(2177261): {sigup} local signature set is version 202503071159774 Mar 12 2025 03:14:04 cp5 maldet(2177261): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 12 2025 03:14:04 cp5 maldet(2177261): {sigup} latest signature set already installed Mar 12 2025 03:14:04 cp5 maldet(2177351): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 12 2025 03:14:05 cp5 maldet(2177351): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 12 2025 03:14:05 cp5 maldet(2177351): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 12 2025 03:14:05 cp5 maldet(2177351): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 12 2025 03:14:05 cp5 maldet(2177351): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 12 2025 03:14:15 cp5 maldet(2177351): {scan} file list completed in 10s, found 6872 files... Mar 12 2025 03:14:15 cp5 maldet(2177351): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 12 2025 03:14:15 cp5 maldet(2177351): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (6872 files) in progress... Mar 12 2025 03:15:33 cp5 maldet(2177351): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Mar 12 2025 03:15:33 cp5 maldet(2177351): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 6872, malware hits 0, cleaned hits 0, time 89s Mar 12 2025 03:15:33 cp5 maldet(2177351): {scan} scan report saved, to view run: maldet --report 250312-0314.2177351 Mar 13 2025 03:30:08 cp5 maldet(2610725): {update} checking for available updates... Mar 13 2025 03:30:08 cp5 maldet(2610725): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 13 2025 03:30:08 cp5 maldet(2610725): {update} hashing install files and checking against server... Mar 13 2025 03:30:08 cp5 maldet(2610725): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 13 2025 03:30:08 cp5 maldet(2610725): {update} latest version already installed. Mar 13 2025 03:30:08 cp5 maldet(2610834): {sigup} performing signature update check... Mar 13 2025 03:30:08 cp5 maldet(2610834): {sigup} local signature set is version 202503071159774 Mar 13 2025 03:30:09 cp5 maldet(2610834): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 13 2025 03:30:09 cp5 maldet(2610834): {sigup} latest signature set already installed Mar 13 2025 03:30:09 cp5 maldet(2610922): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 13 2025 03:30:09 cp5 maldet(2610922): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 13 2025 03:30:09 cp5 maldet(2610922): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 13 2025 03:30:09 cp5 maldet(2610922): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 13 2025 03:30:09 cp5 maldet(2610922): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 13 2025 03:30:19 cp5 maldet(2610922): {scan} file list completed in 10s, found 5559 files... Mar 13 2025 03:30:19 cp5 maldet(2610922): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 13 2025 03:30:19 cp5 maldet(2610922): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (5559 files) in progress... Mar 13 2025 03:31:23 cp5 maldet(2610922): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 5559, malware hits 0, cleaned hits 0, time 74s Mar 13 2025 03:31:23 cp5 maldet(2610922): {scan} scan report saved, to view run: maldet --report 250313-0330.2610922 Mar 14 2025 03:21:57 cp5 maldet(3019077): {update} checking for available updates... Mar 14 2025 03:21:57 cp5 maldet(3019077): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 14 2025 03:21:57 cp5 maldet(3019077): {update} hashing install files and checking against server... Mar 14 2025 03:21:58 cp5 maldet(3019077): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 14 2025 03:21:58 cp5 maldet(3019077): {update} latest version already installed. Mar 14 2025 03:21:58 cp5 maldet(3019191): {sigup} performing signature update check... Mar 14 2025 03:21:58 cp5 maldet(3019191): {sigup} local signature set is version 202503071159774 Mar 14 2025 03:21:58 cp5 maldet(3019191): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 14 2025 03:21:58 cp5 maldet(3019191): {sigup} new signature set 20250313525494 available Mar 14 2025 03:21:58 cp5 maldet(3019191): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 14 2025 03:21:59 cp5 maldet(3019191): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 14 2025 03:21:59 cp5 maldet(3019191): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 14 2025 03:21:59 cp5 maldet(3019191): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 14 2025 03:22:00 cp5 maldet(3019191): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 14 2025 03:22:00 cp5 maldet(3019191): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 14 2025 03:22:00 cp5 maldet(3019191): {sigup} verified md5sum of maldet-sigpack.tgz Mar 14 2025 03:22:00 cp5 maldet(3019191): {sigup} unpacked and installed maldet-sigpack.tgz Mar 14 2025 03:22:00 cp5 maldet(3019191): {sigup} verified md5sum of maldet-clean.tgz Mar 14 2025 03:22:00 cp5 maldet(3019191): {sigup} unpacked and installed maldet-clean.tgz Mar 14 2025 03:22:00 cp5 maldet(3019191): {sigup} signature set update completed Mar 14 2025 03:22:01 cp5 maldet(3019191): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 14 2025 03:22:01 cp5 maldet(3019393): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 14 2025 03:22:01 cp5 maldet(3019393): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 14 2025 03:22:01 cp5 maldet(3019393): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 14 2025 03:22:01 cp5 maldet(3019393): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 14 2025 03:22:01 cp5 maldet(3019393): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 14 2025 03:22:03 cp5 maldet(3019393): {scan} file list completed in 2s, found 3557 files... Mar 14 2025 03:22:03 cp5 maldet(3019393): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 14 2025 03:22:03 cp5 maldet(3019393): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (3557 files) in progress... Mar 14 2025 03:22:40 cp5 maldet(3019393): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Mar 14 2025 03:22:40 cp5 maldet(3019393): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 3557, malware hits 0, cleaned hits 0, time 39s Mar 14 2025 03:22:40 cp5 maldet(3019393): {scan} scan report saved, to view run: maldet --report 250314-0322.3019393 Mar 15 2025 03:18:39 cp5 maldet(3447386): {update} checking for available updates... Mar 15 2025 03:18:39 cp5 maldet(3447386): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 15 2025 03:18:39 cp5 maldet(3447386): {update} hashing install files and checking against server... Mar 15 2025 03:18:39 cp5 maldet(3447386): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 15 2025 03:18:39 cp5 maldet(3447386): {update} latest version already installed. Mar 15 2025 03:18:39 cp5 maldet(3447495): {sigup} performing signature update check... Mar 15 2025 03:18:39 cp5 maldet(3447495): {sigup} local signature set is version 20250313525494 Mar 15 2025 03:18:40 cp5 maldet(3447495): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 15 2025 03:18:40 cp5 maldet(3447495): {sigup} latest signature set already installed Mar 15 2025 03:18:40 cp5 maldet(3447586): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 15 2025 03:18:40 cp5 maldet(3447586): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 15 2025 03:18:40 cp5 maldet(3447586): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 15 2025 03:18:40 cp5 maldet(3447586): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 15 2025 03:18:40 cp5 maldet(3447586): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 15 2025 03:18:43 cp5 maldet(3447586): {scan} file list completed in 3s, found 6548 files... Mar 15 2025 03:18:43 cp5 maldet(3447586): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 15 2025 03:18:43 cp5 maldet(3447586): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (6548 files) in progress... Mar 15 2025 03:19:47 cp5 maldet(3447586): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 6548, malware hits 0, cleaned hits 0, time 67s Mar 15 2025 03:19:47 cp5 maldet(3447586): {scan} scan report saved, to view run: maldet --report 250315-0318.3447586 Mar 16 2025 03:13:04 cp5 maldet(3893031): {update} checking for available updates... Mar 16 2025 03:13:04 cp5 maldet(3893031): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 16 2025 03:13:04 cp5 maldet(3893031): {update} hashing install files and checking against server... Mar 16 2025 03:13:05 cp5 maldet(3893031): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 16 2025 03:13:05 cp5 maldet(3893031): {update} latest version already installed. Mar 16 2025 03:13:05 cp5 maldet(3893144): {sigup} performing signature update check... Mar 16 2025 03:13:05 cp5 maldet(3893144): {sigup} local signature set is version 20250313525494 Mar 16 2025 03:13:05 cp5 maldet(3893144): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 16 2025 03:13:05 cp5 maldet(3893144): {sigup} latest signature set already installed Mar 16 2025 03:13:05 cp5 maldet(3893232): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 16 2025 03:13:05 cp5 maldet(3893232): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 16 2025 03:13:05 cp5 maldet(3893232): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 16 2025 03:13:05 cp5 maldet(3893232): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 16 2025 03:13:05 cp5 maldet(3893232): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 16 2025 03:13:10 cp5 maldet(3893232): {scan} file list completed in 5s, found 6946 files... Mar 16 2025 03:13:10 cp5 maldet(3893232): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 16 2025 03:13:10 cp5 maldet(3893232): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (6946 files) in progress... Mar 16 2025 03:14:19 cp5 maldet(3893232): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Mar 16 2025 03:14:20 cp5 maldet(3893232): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 6946, malware hits 0, cleaned hits 0, time 74s Mar 16 2025 03:14:20 cp5 maldet(3893232): {scan} scan report saved, to view run: maldet --report 250316-0313.3893232 Mar 17 2025 03:53:24 cp5 maldet(140455): {update} checking for available updates... Mar 17 2025 03:53:24 cp5 maldet(140455): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 17 2025 03:53:24 cp5 maldet(140455): {update} hashing install files and checking against server... Mar 17 2025 03:53:24 cp5 maldet(140455): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 17 2025 03:53:24 cp5 maldet(140455): {update} latest version already installed. Mar 17 2025 03:53:24 cp5 maldet(140564): {sigup} performing signature update check... Mar 17 2025 03:53:24 cp5 maldet(140564): {sigup} local signature set is version 20250313525494 Mar 17 2025 03:53:24 cp5 maldet(140564): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 17 2025 03:53:24 cp5 maldet(140564): {sigup} new signature set 20250316483998 available Mar 17 2025 03:53:24 cp5 maldet(140564): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 17 2025 03:53:25 cp5 maldet(140564): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 17 2025 03:53:26 cp5 maldet(140564): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 17 2025 03:53:26 cp5 maldet(140564): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 17 2025 03:53:26 cp5 maldet(140564): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 17 2025 03:53:26 cp5 maldet(140564): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 17 2025 03:53:26 cp5 maldet(140564): {sigup} verified md5sum of maldet-sigpack.tgz Mar 17 2025 03:53:26 cp5 maldet(140564): {sigup} unpacked and installed maldet-sigpack.tgz Mar 17 2025 03:53:26 cp5 maldet(140564): {sigup} verified md5sum of maldet-clean.tgz Mar 17 2025 03:53:26 cp5 maldet(140564): {sigup} unpacked and installed maldet-clean.tgz Mar 17 2025 03:53:26 cp5 maldet(140564): {sigup} signature set update completed Mar 17 2025 03:53:26 cp5 maldet(140564): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 17 2025 03:53:26 cp5 maldet(140770): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 17 2025 03:53:27 cp5 maldet(140770): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 17 2025 03:53:27 cp5 maldet(140770): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 17 2025 03:53:27 cp5 maldet(140770): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 17 2025 03:53:27 cp5 maldet(140770): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 17 2025 03:53:36 cp5 maldet(140770): {scan} file list completed in 9s, found 3939 files... Mar 17 2025 03:53:36 cp5 maldet(140770): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 17 2025 03:53:36 cp5 maldet(140770): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (3939 files) in progress... Mar 17 2025 03:54:21 cp5 maldet(140770): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 3939, malware hits 0, cleaned hits 0, time 55s Mar 17 2025 03:54:21 cp5 maldet(140770): {scan} scan report saved, to view run: maldet --report 250317-0353.140770 Mar 18 2025 03:33:45 cp5 maldet(558875): {update} checking for available updates... Mar 18 2025 03:33:45 cp5 maldet(558875): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 18 2025 03:33:45 cp5 maldet(558875): {update} hashing install files and checking against server... Mar 18 2025 03:33:46 cp5 maldet(558875): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 18 2025 03:33:46 cp5 maldet(558875): {update} latest version already installed. Mar 18 2025 03:33:46 cp5 maldet(558984): {sigup} performing signature update check... Mar 18 2025 03:33:46 cp5 maldet(558984): {sigup} local signature set is version 20250316483998 Mar 18 2025 03:33:46 cp5 maldet(558984): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 18 2025 03:33:46 cp5 maldet(558984): {sigup} latest signature set already installed Mar 18 2025 03:33:46 cp5 maldet(559072): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 18 2025 03:33:46 cp5 maldet(559072): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 18 2025 03:33:46 cp5 maldet(559072): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 18 2025 03:33:46 cp5 maldet(559072): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 18 2025 03:33:46 cp5 maldet(559072): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 18 2025 03:33:49 cp5 maldet(559072): {scan} file list completed in 3s, found 8465 files... Mar 18 2025 03:33:49 cp5 maldet(559072): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 18 2025 03:33:49 cp5 maldet(559072): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (8465 files) in progress... Mar 18 2025 03:35:17 cp5 maldet(559072): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Mar 18 2025 03:35:17 cp5 maldet(559072): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 8465, malware hits 0, cleaned hits 0, time 91s Mar 18 2025 03:35:17 cp5 maldet(559072): {scan} scan report saved, to view run: maldet --report 250318-0333.559072 Mar 19 2025 03:50:17 cp5 maldet(993424): {update} checking for available updates... Mar 19 2025 03:50:17 cp5 maldet(993424): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 19 2025 03:50:17 cp5 maldet(993424): {update} hashing install files and checking against server... Mar 19 2025 03:50:18 cp5 maldet(993424): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 19 2025 03:50:18 cp5 maldet(993424): {update} latest version already installed. Mar 19 2025 03:50:18 cp5 maldet(993562): {sigup} performing signature update check... Mar 19 2025 03:50:18 cp5 maldet(993562): {sigup} local signature set is version 20250316483998 Mar 19 2025 03:50:18 cp5 maldet(993562): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 19 2025 03:50:18 cp5 maldet(993562): {sigup} latest signature set already installed Mar 19 2025 03:50:18 cp5 maldet(993651): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 19 2025 03:50:18 cp5 maldet(993651): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 19 2025 03:50:18 cp5 maldet(993651): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 19 2025 03:50:18 cp5 maldet(993651): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 19 2025 03:50:18 cp5 maldet(993651): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 19 2025 03:50:21 cp5 maldet(993651): {scan} file list completed in 3s, found 5073 files... Mar 19 2025 03:50:21 cp5 maldet(993651): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 19 2025 03:50:21 cp5 maldet(993651): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (5073 files) in progress... Mar 19 2025 03:51:18 cp5 maldet(993651): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 5073, malware hits 0, cleaned hits 0, time 60s Mar 19 2025 03:51:18 cp5 maldet(993651): {scan} scan report saved, to view run: maldet --report 250319-0350.993651 Mar 20 2025 03:48:42 cp5 maldet(1404394): {update} checking for available updates... Mar 20 2025 03:48:42 cp5 maldet(1404394): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 20 2025 03:48:42 cp5 maldet(1404394): {update} hashing install files and checking against server... Mar 20 2025 03:48:42 cp5 maldet(1404394): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 20 2025 03:48:42 cp5 maldet(1404394): {update} latest version already installed. Mar 20 2025 03:48:43 cp5 maldet(1404503): {sigup} performing signature update check... Mar 20 2025 03:48:43 cp5 maldet(1404503): {sigup} local signature set is version 20250316483998 Mar 20 2025 03:48:43 cp5 maldet(1404503): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 20 2025 03:48:43 cp5 maldet(1404503): {sigup} new signature set 20250319514026 available Mar 20 2025 03:48:43 cp5 maldet(1404503): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 20 2025 03:48:44 cp5 maldet(1404503): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 20 2025 03:48:44 cp5 maldet(1404503): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 20 2025 03:48:44 cp5 maldet(1404503): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 20 2025 03:48:44 cp5 maldet(1404503): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 20 2025 03:48:45 cp5 maldet(1404503): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 20 2025 03:48:45 cp5 maldet(1404503): {sigup} verified md5sum of maldet-sigpack.tgz Mar 20 2025 03:48:45 cp5 maldet(1404503): {sigup} unpacked and installed maldet-sigpack.tgz Mar 20 2025 03:48:45 cp5 maldet(1404503): {sigup} verified md5sum of maldet-clean.tgz Mar 20 2025 03:48:45 cp5 maldet(1404503): {sigup} unpacked and installed maldet-clean.tgz Mar 20 2025 03:48:45 cp5 maldet(1404503): {sigup} signature set update completed Mar 20 2025 03:48:45 cp5 maldet(1404503): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 20 2025 03:48:45 cp5 maldet(1404706): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 20 2025 03:48:45 cp5 maldet(1404706): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 20 2025 03:48:45 cp5 maldet(1404706): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 20 2025 03:48:45 cp5 maldet(1404706): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 20 2025 03:48:45 cp5 maldet(1404706): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 20 2025 03:48:47 cp5 maldet(1404706): {scan} file list completed in 2s, found 5639 files... Mar 20 2025 03:48:47 cp5 maldet(1404706): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 20 2025 03:48:47 cp5 maldet(1404706): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (5639 files) in progress... Mar 20 2025 03:49:47 cp5 maldet(1404706): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Mar 20 2025 03:49:47 cp5 maldet(1404706): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 5639, malware hits 0, cleaned hits 0, time 62s Mar 20 2025 03:49:47 cp5 maldet(1404706): {scan} scan report saved, to view run: maldet --report 250320-0348.1404706 Mar 21 2025 03:27:53 cp5 maldet(1821699): {update} checking for available updates... Mar 21 2025 03:27:55 cp5 maldet(1821699): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 21 2025 03:27:55 cp5 maldet(1821699): {update} hashing install files and checking against server... Mar 21 2025 03:27:56 cp5 maldet(1821699): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 21 2025 03:27:56 cp5 maldet(1821699): {update} latest version already installed. Mar 21 2025 03:27:56 cp5 maldet(1821810): {sigup} performing signature update check... Mar 21 2025 03:27:56 cp5 maldet(1821810): {sigup} local signature set is version 20250319514026 Mar 21 2025 03:27:56 cp5 maldet(1821810): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 21 2025 03:27:56 cp5 maldet(1821810): {sigup} latest signature set already installed Mar 21 2025 03:27:56 cp5 maldet(1821898): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 21 2025 03:27:56 cp5 maldet(1821898): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 21 2025 03:27:56 cp5 maldet(1821898): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 21 2025 03:27:56 cp5 maldet(1821898): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 21 2025 03:27:56 cp5 maldet(1821898): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 21 2025 03:27:59 cp5 maldet(1821898): {scan} file list completed in 3s, found 4358 files... Mar 21 2025 03:27:59 cp5 maldet(1821898): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 21 2025 03:27:59 cp5 maldet(1821898): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (4358 files) in progress... Mar 21 2025 03:28:39 cp5 maldet(1821898): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Mar 21 2025 03:28:39 cp5 maldet(1821898): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 4358, malware hits 0, cleaned hits 0, time 43s Mar 21 2025 03:28:39 cp5 maldet(1821898): {scan} scan report saved, to view run: maldet --report 250321-0327.1821898 Mar 22 2025 03:50:02 cp5 maldet(2285508): {update} checking for available updates... Mar 22 2025 03:50:02 cp5 maldet(2285508): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 22 2025 03:50:02 cp5 maldet(2285508): {update} hashing install files and checking against server... Mar 22 2025 03:50:03 cp5 maldet(2285508): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 22 2025 03:50:03 cp5 maldet(2285508): {update} latest version already installed. Mar 22 2025 03:50:03 cp5 maldet(2285640): {sigup} performing signature update check... Mar 22 2025 03:50:03 cp5 maldet(2285640): {sigup} local signature set is version 20250319514026 Mar 22 2025 03:50:03 cp5 maldet(2285640): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 22 2025 03:50:03 cp5 maldet(2285640): {sigup} latest signature set already installed Mar 22 2025 03:50:03 cp5 maldet(2285728): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 22 2025 03:50:03 cp5 maldet(2285728): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 22 2025 03:50:03 cp5 maldet(2285728): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 22 2025 03:50:03 cp5 maldet(2285728): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 22 2025 03:50:03 cp5 maldet(2285728): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 22 2025 03:50:07 cp5 maldet(2285728): {scan} file list completed in 4s, found 4257 files... Mar 22 2025 03:50:07 cp5 maldet(2285728): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 22 2025 03:50:07 cp5 maldet(2285728): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (4257 files) in progress... Mar 22 2025 03:50:48 cp5 maldet(2285728): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Mar 22 2025 03:50:48 cp5 maldet(2285728): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 4257, malware hits 0, cleaned hits 0, time 45s Mar 22 2025 03:50:48 cp5 maldet(2285728): {scan} scan report saved, to view run: maldet --report 250322-0350.2285728 Mar 23 2025 03:20:20 cp5 maldet(2704560): {update} checking for available updates... Mar 23 2025 03:20:20 cp5 maldet(2704560): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 23 2025 03:20:20 cp5 maldet(2704560): {update} hashing install files and checking against server... Mar 23 2025 03:20:21 cp5 maldet(2704560): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 23 2025 03:20:21 cp5 maldet(2704560): {update} latest version already installed. Mar 23 2025 03:20:21 cp5 maldet(2704670): {sigup} performing signature update check... Mar 23 2025 03:20:21 cp5 maldet(2704670): {sigup} local signature set is version 20250319514026 Mar 23 2025 03:20:21 cp5 maldet(2704670): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 23 2025 03:20:21 cp5 maldet(2704670): {sigup} new signature set 202503221188379 available Mar 23 2025 03:20:21 cp5 maldet(2704670): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 23 2025 03:20:22 cp5 maldet(2704670): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 23 2025 03:20:22 cp5 maldet(2704670): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 23 2025 03:20:22 cp5 maldet(2704670): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 23 2025 03:20:23 cp5 maldet(2704670): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 23 2025 03:20:23 cp5 maldet(2704670): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 23 2025 03:20:23 cp5 maldet(2704670): {sigup} verified md5sum of maldet-sigpack.tgz Mar 23 2025 03:20:23 cp5 maldet(2704670): {sigup} unpacked and installed maldet-sigpack.tgz Mar 23 2025 03:20:23 cp5 maldet(2704670): {sigup} verified md5sum of maldet-clean.tgz Mar 23 2025 03:20:23 cp5 maldet(2704670): {sigup} unpacked and installed maldet-clean.tgz Mar 23 2025 03:20:23 cp5 maldet(2704670): {sigup} signature set update completed Mar 23 2025 03:20:23 cp5 maldet(2704670): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 23 2025 03:20:23 cp5 maldet(2704872): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 23 2025 03:20:23 cp5 maldet(2704872): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 23 2025 03:20:23 cp5 maldet(2704872): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 23 2025 03:20:23 cp5 maldet(2704872): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 23 2025 03:20:23 cp5 maldet(2704872): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 23 2025 03:20:25 cp5 maldet(2704872): {scan} file list completed in 2s, found 14590 files... Mar 23 2025 03:20:25 cp5 maldet(2704872): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 23 2025 03:20:25 cp5 maldet(2704872): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (14590 files) in progress... Mar 23 2025 03:23:32 cp5 maldet(2704872): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 14590, malware hits 0, cleaned hits 0, time 189s Mar 23 2025 03:23:32 cp5 maldet(2704872): {scan} scan report saved, to view run: maldet --report 250323-0320.2704872 Mar 24 2025 03:34:01 cp5 maldet(3098104): {update} checking for available updates... Mar 24 2025 03:34:01 cp5 maldet(3098104): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 24 2025 03:34:01 cp5 maldet(3098104): {update} hashing install files and checking against server... Mar 24 2025 03:34:02 cp5 maldet(3098104): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 24 2025 03:34:02 cp5 maldet(3098104): {update} latest version already installed. Mar 24 2025 03:34:02 cp5 maldet(3098304): {sigup} performing signature update check... Mar 24 2025 03:34:02 cp5 maldet(3098304): {sigup} local signature set is version 202503221188379 Mar 24 2025 03:34:02 cp5 maldet(3098304): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 24 2025 03:34:02 cp5 maldet(3098304): {sigup} latest signature set already installed Mar 24 2025 03:34:02 cp5 maldet(3098392): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 24 2025 03:34:02 cp5 maldet(3098392): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 24 2025 03:34:02 cp5 maldet(3098392): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 24 2025 03:34:02 cp5 maldet(3098392): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 24 2025 03:34:02 cp5 maldet(3098392): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 24 2025 03:34:05 cp5 maldet(3098392): {scan} file list completed in 3s, found 1227 files... Mar 24 2025 03:34:05 cp5 maldet(3098392): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 24 2025 03:34:05 cp5 maldet(3098392): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1227 files) in progress... Mar 24 2025 03:34:21 cp5 maldet(3098392): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1227, malware hits 0, cleaned hits 0, time 19s Mar 24 2025 03:34:21 cp5 maldet(3098392): {scan} scan report saved, to view run: maldet --report 250324-0334.3098392 Mar 25 2025 03:11:53 cp5 maldet(3479578): {update} checking for available updates... Mar 25 2025 03:11:54 cp5 maldet(3479578): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 25 2025 03:11:54 cp5 maldet(3479578): {update} hashing install files and checking against server... Mar 25 2025 03:11:55 cp5 maldet(3479578): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 25 2025 03:11:55 cp5 maldet(3479578): {update} latest version already installed. Mar 25 2025 03:11:55 cp5 maldet(3479687): {sigup} performing signature update check... Mar 25 2025 03:11:55 cp5 maldet(3479687): {sigup} local signature set is version 202503221188379 Mar 25 2025 03:11:56 cp5 maldet(3479687): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 25 2025 03:11:56 cp5 maldet(3479687): {sigup} latest signature set already installed Mar 25 2025 03:11:56 cp5 maldet(3479775): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 25 2025 03:11:56 cp5 maldet(3479775): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 25 2025 03:11:56 cp5 maldet(3479775): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 25 2025 03:11:56 cp5 maldet(3479775): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 25 2025 03:11:56 cp5 maldet(3479775): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 25 2025 03:12:04 cp5 maldet(3479775): {scan} file list completed in 8s, found 933 files... Mar 25 2025 03:12:04 cp5 maldet(3479775): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 25 2025 03:12:04 cp5 maldet(3479775): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (933 files) in progress... Mar 25 2025 03:12:17 cp5 maldet(3479775): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 933, malware hits 0, cleaned hits 0, time 21s Mar 25 2025 03:12:18 cp5 maldet(3479775): {scan} scan report saved, to view run: maldet --report 250325-0311.3479775 Mar 26 2025 03:24:08 cp5 maldet(3915643): {update} checking for available updates... Mar 26 2025 03:24:08 cp5 maldet(3915643): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 26 2025 03:24:08 cp5 maldet(3915643): {update} hashing install files and checking against server... Mar 26 2025 03:24:09 cp5 maldet(3915643): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 26 2025 03:24:09 cp5 maldet(3915643): {update} latest version already installed. Mar 26 2025 03:24:09 cp5 maldet(3915752): {sigup} performing signature update check... Mar 26 2025 03:24:09 cp5 maldet(3915752): {sigup} local signature set is version 202503221188379 Mar 26 2025 03:24:10 cp5 maldet(3915752): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 26 2025 03:24:10 cp5 maldet(3915752): {sigup} new signature set 202503251862979 available Mar 26 2025 03:24:10 cp5 maldet(3915752): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 26 2025 03:24:11 cp5 maldet(3915752): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 26 2025 03:24:11 cp5 maldet(3915752): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 26 2025 03:24:11 cp5 maldet(3915752): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 26 2025 03:24:11 cp5 maldet(3915752): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 26 2025 03:24:12 cp5 maldet(3915752): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 26 2025 03:24:12 cp5 maldet(3915752): {sigup} verified md5sum of maldet-sigpack.tgz Mar 26 2025 03:24:12 cp5 maldet(3915752): {sigup} unpacked and installed maldet-sigpack.tgz Mar 26 2025 03:24:12 cp5 maldet(3915752): {sigup} verified md5sum of maldet-clean.tgz Mar 26 2025 03:24:12 cp5 maldet(3915752): {sigup} unpacked and installed maldet-clean.tgz Mar 26 2025 03:24:12 cp5 maldet(3915752): {sigup} signature set update completed Mar 26 2025 03:24:12 cp5 maldet(3915752): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 26 2025 03:24:12 cp5 maldet(3915958): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 26 2025 03:24:12 cp5 maldet(3915958): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 26 2025 03:24:12 cp5 maldet(3915958): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 26 2025 03:24:12 cp5 maldet(3915958): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 26 2025 03:24:12 cp5 maldet(3915958): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 26 2025 03:24:15 cp5 maldet(3915958): {scan} file list completed in 3s, found 1166 files... Mar 26 2025 03:24:15 cp5 maldet(3915958): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 26 2025 03:24:15 cp5 maldet(3915958): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1166 files) in progress... Mar 26 2025 03:24:32 cp5 maldet(3915958): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1166, malware hits 0, cleaned hits 0, time 20s Mar 26 2025 03:24:32 cp5 maldet(3915958): {scan} scan report saved, to view run: maldet --report 250326-0324.3915958 Mar 27 2025 03:24:24 cp5 maldet(110689): {update} checking for available updates... Mar 27 2025 03:24:25 cp5 maldet(110689): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 27 2025 03:24:25 cp5 maldet(110689): {update} hashing install files and checking against server... Mar 27 2025 03:24:25 cp5 maldet(110689): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 27 2025 03:24:25 cp5 maldet(110689): {update} latest version already installed. Mar 27 2025 03:24:25 cp5 maldet(110798): {sigup} performing signature update check... Mar 27 2025 03:24:25 cp5 maldet(110798): {sigup} local signature set is version 202503251862979 Mar 27 2025 03:24:25 cp5 maldet(110798): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 27 2025 03:24:25 cp5 maldet(110798): {sigup} latest signature set already installed Mar 27 2025 03:24:25 cp5 maldet(110887): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 27 2025 03:24:26 cp5 maldet(110887): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 27 2025 03:24:26 cp5 maldet(110887): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 27 2025 03:24:26 cp5 maldet(110887): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 27 2025 03:24:26 cp5 maldet(110887): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 27 2025 03:24:32 cp5 maldet(110887): {scan} file list completed in 6s, found 2299 files... Mar 27 2025 03:24:32 cp5 maldet(110887): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 27 2025 03:24:32 cp5 maldet(110887): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2299 files) in progress... Mar 27 2025 03:25:01 cp5 maldet(110887): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2299, malware hits 0, cleaned hits 0, time 35s Mar 27 2025 03:25:01 cp5 maldet(110887): {scan} scan report saved, to view run: maldet --report 250327-0324.110887 Mar 28 2025 03:46:13 cp5 maldet(508591): {update} checking for available updates... Mar 28 2025 03:46:13 cp5 maldet(508591): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 28 2025 03:46:13 cp5 maldet(508591): {update} hashing install files and checking against server... Mar 28 2025 03:46:14 cp5 maldet(508591): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 28 2025 03:46:14 cp5 maldet(508591): {update} latest version already installed. Mar 28 2025 03:46:14 cp5 maldet(508700): {sigup} performing signature update check... Mar 28 2025 03:46:14 cp5 maldet(508700): {sigup} local signature set is version 202503251862979 Mar 28 2025 03:46:14 cp5 maldet(508700): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 28 2025 03:46:14 cp5 maldet(508700): {sigup} latest signature set already installed Mar 28 2025 03:46:14 cp5 maldet(508791): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 28 2025 03:46:14 cp5 maldet(508791): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 28 2025 03:46:14 cp5 maldet(508791): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 28 2025 03:46:14 cp5 maldet(508791): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 28 2025 03:46:14 cp5 maldet(508791): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 28 2025 03:46:18 cp5 maldet(508791): {scan} file list completed in 4s, found 1399 files... Mar 28 2025 03:46:18 cp5 maldet(508791): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 28 2025 03:46:18 cp5 maldet(508791): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1399 files) in progress... Mar 28 2025 03:46:36 cp5 maldet(508791): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1399, malware hits 0, cleaned hits 0, time 22s Mar 28 2025 03:46:36 cp5 maldet(508791): {scan} scan report saved, to view run: maldet --report 250328-0346.508791 Mar 29 2025 03:51:39 cp5 maldet(897796): {update} checking for available updates... Mar 29 2025 03:51:40 cp5 maldet(897796): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 29 2025 03:51:40 cp5 maldet(897796): {update} hashing install files and checking against server... Mar 29 2025 03:51:40 cp5 maldet(897796): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 29 2025 03:51:40 cp5 maldet(897796): {update} latest version already installed. Mar 29 2025 03:51:40 cp5 maldet(897905): {sigup} performing signature update check... Mar 29 2025 03:51:40 cp5 maldet(897905): {sigup} local signature set is version 202503251862979 Mar 29 2025 03:51:40 cp5 maldet(897905): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 29 2025 03:51:40 cp5 maldet(897905): {sigup} new signature set 202503282537907 available Mar 29 2025 03:51:40 cp5 maldet(897905): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 29 2025 03:51:41 cp5 maldet(897905): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 29 2025 03:51:42 cp5 maldet(897905): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 29 2025 03:51:42 cp5 maldet(897905): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 29 2025 03:51:42 cp5 maldet(897905): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 29 2025 03:51:42 cp5 maldet(897905): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 29 2025 03:51:42 cp5 maldet(897905): {sigup} verified md5sum of maldet-sigpack.tgz Mar 29 2025 03:51:42 cp5 maldet(897905): {sigup} unpacked and installed maldet-sigpack.tgz Mar 29 2025 03:51:42 cp5 maldet(897905): {sigup} verified md5sum of maldet-clean.tgz Mar 29 2025 03:51:42 cp5 maldet(897905): {sigup} unpacked and installed maldet-clean.tgz Mar 29 2025 03:51:42 cp5 maldet(897905): {sigup} signature set update completed Mar 29 2025 03:51:42 cp5 maldet(897905): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 29 2025 03:51:43 cp5 maldet(898110): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 29 2025 03:51:43 cp5 maldet(898110): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 29 2025 03:51:43 cp5 maldet(898110): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 29 2025 03:51:43 cp5 maldet(898110): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 29 2025 03:51:43 cp5 maldet(898110): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 29 2025 03:51:46 cp5 maldet(898110): {scan} file list completed in 3s, found 1169 files... Mar 29 2025 03:51:46 cp5 maldet(898110): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 29 2025 03:51:46 cp5 maldet(898110): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1169 files) in progress... Mar 29 2025 03:52:11 cp5 maldet(898110): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1169, malware hits 0, cleaned hits 0, time 28s Mar 29 2025 03:52:11 cp5 maldet(898110): {scan} scan report saved, to view run: maldet --report 250329-0351.898110 Mar 30 2025 03:41:23 cp5 maldet(1287482): {update} checking for available updates... Mar 30 2025 03:41:24 cp5 maldet(1287482): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 30 2025 03:41:24 cp5 maldet(1287482): {update} hashing install files and checking against server... Mar 30 2025 03:41:24 cp5 maldet(1287482): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 30 2025 03:41:24 cp5 maldet(1287482): {update} latest version already installed. Mar 30 2025 03:41:24 cp5 maldet(1287591): {sigup} performing signature update check... Mar 30 2025 03:41:24 cp5 maldet(1287591): {sigup} local signature set is version 202503282537907 Mar 30 2025 03:41:24 cp5 maldet(1287591): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 30 2025 03:41:24 cp5 maldet(1287591): {sigup} latest signature set already installed Mar 30 2025 03:41:25 cp5 maldet(1287679): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 30 2025 03:41:25 cp5 maldet(1287679): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 30 2025 03:41:25 cp5 maldet(1287679): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 30 2025 03:41:25 cp5 maldet(1287679): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 30 2025 03:41:25 cp5 maldet(1287679): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 30 2025 03:41:28 cp5 maldet(1287679): {scan} file list completed in 3s, found 1871 files... Mar 30 2025 03:41:28 cp5 maldet(1287679): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 30 2025 03:41:28 cp5 maldet(1287679): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1871 files) in progress... Mar 30 2025 03:41:54 cp5 maldet(1287679): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1871, malware hits 0, cleaned hits 0, time 29s Mar 30 2025 03:41:54 cp5 maldet(1287679): {scan} scan report saved, to view run: maldet --report 250330-0341.1287679 Mar 31 2025 03:18:16 cp5 maldet(1669918): {update} checking for available updates... Mar 31 2025 03:18:16 cp5 maldet(1669918): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 31 2025 03:18:16 cp5 maldet(1669918): {update} hashing install files and checking against server... Mar 31 2025 03:18:17 cp5 maldet(1669918): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 31 2025 03:18:17 cp5 maldet(1669918): {update} latest version already installed. Mar 31 2025 03:18:17 cp5 maldet(1670028): {sigup} performing signature update check... Mar 31 2025 03:18:17 cp5 maldet(1670028): {sigup} local signature set is version 202503282537907 Mar 31 2025 03:18:17 cp5 maldet(1670028): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 31 2025 03:18:17 cp5 maldet(1670028): {sigup} latest signature set already installed Mar 31 2025 03:18:17 cp5 maldet(1670118): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 31 2025 03:18:17 cp5 maldet(1670118): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 31 2025 03:18:17 cp5 maldet(1670118): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 31 2025 03:18:17 cp5 maldet(1670118): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 31 2025 03:18:17 cp5 maldet(1670118): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 31 2025 03:18:23 cp5 maldet(1670118): {scan} file list completed in 6s, found 1560 files... Mar 31 2025 03:18:23 cp5 maldet(1670118): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 31 2025 03:18:23 cp5 maldet(1670118): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1560 files) in progress... Mar 31 2025 03:18:45 cp5 maldet(1670118): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1560, malware hits 0, cleaned hits 0, time 28s Mar 31 2025 03:18:45 cp5 maldet(1670118): {scan} scan report saved, to view run: maldet --report 250331-0318.1670118 Apr 01 2025 03:18:36 cp5 maldet(2055005): {update} checking for available updates... Apr 01 2025 03:18:37 cp5 maldet(2055005): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 01 2025 03:18:37 cp5 maldet(2055005): {update} hashing install files and checking against server... Apr 01 2025 03:18:37 cp5 maldet(2055005): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 01 2025 03:18:37 cp5 maldet(2055005): {update} latest version already installed. Apr 01 2025 03:18:37 cp5 maldet(2055114): {sigup} performing signature update check... Apr 01 2025 03:18:37 cp5 maldet(2055114): {sigup} local signature set is version 202503282537907 Apr 01 2025 03:18:37 cp5 maldet(2055114): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 01 2025 03:18:37 cp5 maldet(2055114): {sigup} new signature set 202503313275323 available Apr 01 2025 03:18:37 cp5 maldet(2055114): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 01 2025 03:18:38 cp5 maldet(2055114): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 01 2025 03:18:38 cp5 maldet(2055114): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 01 2025 03:18:38 cp5 maldet(2055114): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 01 2025 03:18:39 cp5 maldet(2055114): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 01 2025 03:18:39 cp5 maldet(2055114): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 01 2025 03:18:39 cp5 maldet(2055114): {sigup} verified md5sum of maldet-sigpack.tgz Apr 01 2025 03:18:39 cp5 maldet(2055114): {sigup} unpacked and installed maldet-sigpack.tgz Apr 01 2025 03:18:39 cp5 maldet(2055114): {sigup} verified md5sum of maldet-clean.tgz Apr 01 2025 03:18:39 cp5 maldet(2055114): {sigup} unpacked and installed maldet-clean.tgz Apr 01 2025 03:18:39 cp5 maldet(2055114): {sigup} signature set update completed Apr 01 2025 03:18:39 cp5 maldet(2055114): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 01 2025 03:18:39 cp5 maldet(2055319): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 01 2025 03:18:40 cp5 maldet(2055319): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 01 2025 03:18:40 cp5 maldet(2055319): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 01 2025 03:18:40 cp5 maldet(2055319): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 01 2025 03:18:40 cp5 maldet(2055319): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 01 2025 03:18:52 cp5 maldet(2055319): {scan} file list completed in 12s, found 17910 files... Apr 01 2025 03:18:52 cp5 maldet(2055319): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 01 2025 03:18:52 cp5 maldet(2055319): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (17910 files) in progress... Apr 01 2025 03:22:51 cp5 maldet(2055319): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 17910, malware hits 0, cleaned hits 0, time 252s Apr 01 2025 03:22:51 cp5 maldet(2055319): {scan} scan report saved, to view run: maldet --report 250401-0318.2055319 Apr 02 2025 03:28:31 cp5 maldet(2532288): {update} checking for available updates... Apr 02 2025 03:28:31 cp5 maldet(2532288): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 02 2025 03:28:31 cp5 maldet(2532288): {update} hashing install files and checking against server... Apr 02 2025 03:28:31 cp5 maldet(2532288): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 02 2025 03:28:31 cp5 maldet(2532288): {update} latest version already installed. Apr 02 2025 03:28:32 cp5 maldet(2532397): {sigup} performing signature update check... Apr 02 2025 03:28:32 cp5 maldet(2532397): {sigup} local signature set is version 202503313275323 Apr 02 2025 03:28:32 cp5 maldet(2532397): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 02 2025 03:28:32 cp5 maldet(2532397): {sigup} new signature set 202504013916532 available Apr 02 2025 03:28:32 cp5 maldet(2532397): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 02 2025 03:28:35 cp5 maldet(2532397): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 02 2025 03:28:36 cp5 maldet(2532397): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 02 2025 03:28:36 cp5 maldet(2532397): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 02 2025 03:28:36 cp5 maldet(2532397): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 02 2025 03:28:36 cp5 maldet(2532397): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 02 2025 03:28:36 cp5 maldet(2532397): {sigup} verified md5sum of maldet-sigpack.tgz Apr 02 2025 03:28:36 cp5 maldet(2532397): {sigup} unpacked and installed maldet-sigpack.tgz Apr 02 2025 03:28:36 cp5 maldet(2532397): {sigup} verified md5sum of maldet-clean.tgz Apr 02 2025 03:28:36 cp5 maldet(2532397): {sigup} unpacked and installed maldet-clean.tgz Apr 02 2025 03:28:36 cp5 maldet(2532397): {sigup} signature set update completed Apr 02 2025 03:28:36 cp5 maldet(2532397): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 02 2025 03:28:36 cp5 maldet(2532602): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 02 2025 03:28:37 cp5 maldet(2532602): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 02 2025 03:28:37 cp5 maldet(2532602): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 02 2025 03:28:37 cp5 maldet(2532602): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 02 2025 03:28:37 cp5 maldet(2532602): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 02 2025 03:28:45 cp5 maldet(2532602): {scan} file list completed in 8s, found 3211 files... Apr 02 2025 03:28:45 cp5 maldet(2532602): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 02 2025 03:28:45 cp5 maldet(2532602): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (3211 files) in progress... Apr 02 2025 03:29:23 cp5 maldet(2532602): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 3211, malware hits 0, cleaned hits 0, time 47s Apr 02 2025 03:29:23 cp5 maldet(2532602): {scan} scan report saved, to view run: maldet --report 250402-0328.2532602 Apr 03 2025 03:10:33 cp5 maldet(2934304): {update} checking for available updates... Apr 03 2025 03:10:33 cp5 maldet(2934304): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 03 2025 03:10:33 cp5 maldet(2934304): {update} hashing install files and checking against server... Apr 03 2025 03:10:34 cp5 maldet(2934304): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 03 2025 03:10:34 cp5 maldet(2934304): {update} latest version already installed. Apr 03 2025 03:10:34 cp5 maldet(2934413): {sigup} performing signature update check... Apr 03 2025 03:10:34 cp5 maldet(2934413): {sigup} local signature set is version 202504013916532 Apr 03 2025 03:10:34 cp5 maldet(2934413): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 03 2025 03:10:34 cp5 maldet(2934413): {sigup} latest signature set already installed Apr 03 2025 03:10:34 cp5 maldet(2934501): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 03 2025 03:10:34 cp5 maldet(2934501): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 03 2025 03:10:34 cp5 maldet(2934501): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 03 2025 03:10:34 cp5 maldet(2934501): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 03 2025 03:10:34 cp5 maldet(2934501): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 03 2025 03:10:37 cp5 maldet(2934501): {scan} file list completed in 3s, found 1603 files... Apr 03 2025 03:10:37 cp5 maldet(2934501): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 03 2025 03:10:37 cp5 maldet(2934501): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1603 files) in progress... Apr 03 2025 03:10:55 cp5 maldet(2934501): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1603, malware hits 0, cleaned hits 0, time 21s Apr 03 2025 03:10:55 cp5 maldet(2934501): {scan} scan report saved, to view run: maldet --report 250403-0310.2934501 Apr 04 2025 03:41:15 cp5 maldet(3361331): {update} checking for available updates... Apr 04 2025 03:41:15 cp5 maldet(3361331): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 04 2025 03:41:15 cp5 maldet(3361331): {update} hashing install files and checking against server... Apr 04 2025 03:41:15 cp5 maldet(3361331): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 04 2025 03:41:16 cp5 maldet(3361331): {update} latest version already installed. Apr 04 2025 03:41:16 cp5 maldet(3361440): {sigup} performing signature update check... Apr 04 2025 03:41:16 cp5 maldet(3361440): {sigup} local signature set is version 202504013916532 Apr 04 2025 03:41:16 cp5 maldet(3361440): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 04 2025 03:41:16 cp5 maldet(3361440): {sigup} latest signature set already installed Apr 04 2025 03:41:16 cp5 maldet(3361528): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 04 2025 03:41:16 cp5 maldet(3361528): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 04 2025 03:41:16 cp5 maldet(3361528): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 04 2025 03:41:16 cp5 maldet(3361528): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 04 2025 03:41:16 cp5 maldet(3361528): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 04 2025 03:41:19 cp5 maldet(3361528): {scan} file list completed in 3s, found 2038 files... Apr 04 2025 03:41:19 cp5 maldet(3361528): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 04 2025 03:41:19 cp5 maldet(3361528): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2038 files) in progress... Apr 04 2025 03:41:40 cp5 maldet(3361528): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2038, malware hits 0, cleaned hits 0, time 24s Apr 04 2025 03:41:40 cp5 maldet(3361528): {scan} scan report saved, to view run: maldet --report 250404-0341.3361528 Apr 05 2025 03:39:28 cp5 maldet(3744315): {update} checking for available updates... Apr 05 2025 03:39:28 cp5 maldet(3744315): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 05 2025 03:39:28 cp5 maldet(3744315): {update} hashing install files and checking against server... Apr 05 2025 03:39:29 cp5 maldet(3744315): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 05 2025 03:39:29 cp5 maldet(3744315): {update} latest version already installed. Apr 05 2025 03:39:29 cp5 maldet(3744424): {sigup} performing signature update check... Apr 05 2025 03:39:29 cp5 maldet(3744424): {sigup} local signature set is version 202504013916532 Apr 05 2025 03:39:29 cp5 maldet(3744424): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 05 2025 03:39:29 cp5 maldet(3744424): {sigup} new signature set 20250404517655 available Apr 05 2025 03:39:29 cp5 maldet(3744424): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 05 2025 03:39:31 cp5 maldet(3744424): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 05 2025 03:39:31 cp5 maldet(3744424): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 05 2025 03:39:31 cp5 maldet(3744424): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 05 2025 03:39:31 cp5 maldet(3744424): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 05 2025 03:39:32 cp5 maldet(3744424): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 05 2025 03:39:32 cp5 maldet(3744424): {sigup} verified md5sum of maldet-sigpack.tgz Apr 05 2025 03:39:32 cp5 maldet(3744424): {sigup} unpacked and installed maldet-sigpack.tgz Apr 05 2025 03:39:32 cp5 maldet(3744424): {sigup} verified md5sum of maldet-clean.tgz Apr 05 2025 03:39:32 cp5 maldet(3744424): {sigup} unpacked and installed maldet-clean.tgz Apr 05 2025 03:39:32 cp5 maldet(3744424): {sigup} signature set update completed Apr 05 2025 03:39:32 cp5 maldet(3744424): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 05 2025 03:39:32 cp5 maldet(3744627): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 05 2025 03:39:32 cp5 maldet(3744627): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 05 2025 03:39:32 cp5 maldet(3744627): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 05 2025 03:39:32 cp5 maldet(3744627): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 05 2025 03:39:32 cp5 maldet(3744627): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 05 2025 03:39:34 cp5 maldet(3744627): {scan} file list completed in 2s, found 2233 files... Apr 05 2025 03:39:34 cp5 maldet(3744627): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 05 2025 03:39:34 cp5 maldet(3744627): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2233 files) in progress... Apr 05 2025 03:40:04 cp5 maldet(3744627): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2233, malware hits 0, cleaned hits 0, time 32s Apr 05 2025 03:40:04 cp5 maldet(3744627): {scan} scan report saved, to view run: maldet --report 250405-0339.3744627 Apr 06 2025 03:39:23 cp5 maldet(4124877): {update} checking for available updates... Apr 06 2025 03:39:24 cp5 maldet(4124877): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 06 2025 03:39:24 cp5 maldet(4124877): {update} hashing install files and checking against server... Apr 06 2025 03:39:24 cp5 maldet(4124877): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 06 2025 03:39:24 cp5 maldet(4124877): {update} latest version already installed. Apr 06 2025 03:39:24 cp5 maldet(4124986): {sigup} performing signature update check... Apr 06 2025 03:39:24 cp5 maldet(4124986): {sigup} local signature set is version 20250404517655 Apr 06 2025 03:39:24 cp5 maldet(4124986): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 06 2025 03:39:24 cp5 maldet(4124986): {sigup} latest signature set already installed Apr 06 2025 03:39:24 cp5 maldet(4125074): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 06 2025 03:39:24 cp5 maldet(4125074): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 06 2025 03:39:24 cp5 maldet(4125074): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 06 2025 03:39:24 cp5 maldet(4125074): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 06 2025 03:39:24 cp5 maldet(4125074): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 06 2025 03:39:27 cp5 maldet(4125074): {scan} file list completed in 3s, found 2906 files... Apr 06 2025 03:39:27 cp5 maldet(4125074): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 06 2025 03:39:27 cp5 maldet(4125074): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2906 files) in progress... Apr 06 2025 03:39:59 cp5 maldet(4125074): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2906, malware hits 0, cleaned hits 0, time 35s Apr 06 2025 03:39:59 cp5 maldet(4125074): {scan} scan report saved, to view run: maldet --report 250406-0339.4125074 Apr 07 2025 03:54:09 cp5 maldet(314109): {update} checking for available updates... Apr 07 2025 03:54:09 cp5 maldet(314109): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 07 2025 03:54:09 cp5 maldet(314109): {update} hashing install files and checking against server... Apr 07 2025 03:54:09 cp5 maldet(314109): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 07 2025 03:54:09 cp5 maldet(314109): {update} latest version already installed. Apr 07 2025 03:54:09 cp5 maldet(314219): {sigup} performing signature update check... Apr 07 2025 03:54:09 cp5 maldet(314219): {sigup} local signature set is version 20250404517655 Apr 07 2025 03:54:10 cp5 maldet(314219): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 07 2025 03:54:10 cp5 maldet(314219): {sigup} latest signature set already installed Apr 07 2025 03:54:10 cp5 maldet(314307): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 07 2025 03:54:10 cp5 maldet(314307): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 07 2025 03:54:10 cp5 maldet(314307): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 07 2025 03:54:10 cp5 maldet(314307): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 07 2025 03:54:10 cp5 maldet(314307): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 07 2025 03:54:14 cp5 maldet(314307): {scan} file list completed in 4s, found 2000 files... Apr 07 2025 03:54:14 cp5 maldet(314307): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 07 2025 03:54:14 cp5 maldet(314307): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2000 files) in progress... Apr 07 2025 03:54:37 cp5 maldet(314307): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Apr 07 2025 03:54:37 cp5 maldet(314307): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2000, malware hits 0, cleaned hits 0, time 27s Apr 07 2025 03:54:37 cp5 maldet(314307): {scan} scan report saved, to view run: maldet --report 250407-0354.314307 Apr 08 2025 03:26:08 cp5 maldet(689172): {update} checking for available updates... Apr 08 2025 03:26:09 cp5 maldet(689172): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 08 2025 03:26:09 cp5 maldet(689172): {update} hashing install files and checking against server... Apr 08 2025 03:26:09 cp5 maldet(689172): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 08 2025 03:26:09 cp5 maldet(689172): {update} latest version already installed. Apr 08 2025 03:26:09 cp5 maldet(689281): {sigup} performing signature update check... Apr 08 2025 03:26:09 cp5 maldet(689281): {sigup} local signature set is version 20250404517655 Apr 08 2025 03:26:09 cp5 maldet(689281): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 08 2025 03:26:09 cp5 maldet(689281): {sigup} new signature set 202504071198007 available Apr 08 2025 03:26:09 cp5 maldet(689281): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 08 2025 03:26:10 cp5 maldet(689281): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 08 2025 03:26:11 cp5 maldet(689281): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 08 2025 03:26:11 cp5 maldet(689281): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 08 2025 03:26:11 cp5 maldet(689281): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 08 2025 03:26:12 cp5 maldet(689281): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 08 2025 03:26:12 cp5 maldet(689281): {sigup} verified md5sum of maldet-sigpack.tgz Apr 08 2025 03:26:12 cp5 maldet(689281): {sigup} unpacked and installed maldet-sigpack.tgz Apr 08 2025 03:26:12 cp5 maldet(689281): {sigup} verified md5sum of maldet-clean.tgz Apr 08 2025 03:26:12 cp5 maldet(689281): {sigup} unpacked and installed maldet-clean.tgz Apr 08 2025 03:26:12 cp5 maldet(689281): {sigup} signature set update completed Apr 08 2025 03:26:12 cp5 maldet(689281): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 08 2025 03:26:12 cp5 maldet(689486): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 08 2025 03:26:12 cp5 maldet(689486): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 08 2025 03:26:12 cp5 maldet(689486): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 08 2025 03:26:12 cp5 maldet(689486): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 08 2025 03:26:12 cp5 maldet(689486): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 08 2025 03:26:17 cp5 maldet(689486): {scan} file list completed in 5s, found 2064 files... Apr 08 2025 03:26:17 cp5 maldet(689486): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 08 2025 03:26:17 cp5 maldet(689486): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2064 files) in progress... Apr 08 2025 03:26:43 cp5 maldet(689486): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2064, malware hits 0, cleaned hits 0, time 31s Apr 08 2025 03:26:43 cp5 maldet(689486): {scan} scan report saved, to view run: maldet --report 250408-0326.689486 Apr 09 2025 03:43:15 cp5 maldet(1073706): {update} checking for available updates... Apr 09 2025 03:43:16 cp5 maldet(1073706): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 09 2025 03:43:16 cp5 maldet(1073706): {update} hashing install files and checking against server... Apr 09 2025 03:43:16 cp5 maldet(1073706): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 09 2025 03:43:16 cp5 maldet(1073706): {update} latest version already installed. Apr 09 2025 03:43:16 cp5 maldet(1073815): {sigup} performing signature update check... Apr 09 2025 03:43:16 cp5 maldet(1073815): {sigup} local signature set is version 202504071198007 Apr 09 2025 03:43:16 cp5 maldet(1073815): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 09 2025 03:43:17 cp5 maldet(1073815): {sigup} latest signature set already installed Apr 09 2025 03:43:17 cp5 maldet(1073903): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 09 2025 03:43:17 cp5 maldet(1073903): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 09 2025 03:43:17 cp5 maldet(1073903): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 09 2025 03:43:17 cp5 maldet(1073903): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 09 2025 03:43:17 cp5 maldet(1073903): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 09 2025 03:43:20 cp5 maldet(1073903): {scan} file list completed in 3s, found 2296 files... Apr 09 2025 03:43:20 cp5 maldet(1073903): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 09 2025 03:43:20 cp5 maldet(1073903): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2296 files) in progress... Apr 09 2025 03:43:45 cp5 maldet(1073903): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2296, malware hits 0, cleaned hits 0, time 28s Apr 09 2025 03:43:45 cp5 maldet(1073903): {scan} scan report saved, to view run: maldet --report 250409-0343.1073903 Apr 10 2025 03:44:21 cp5 maldet(1454405): {update} checking for available updates... Apr 10 2025 03:44:21 cp5 maldet(1454405): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 10 2025 03:44:21 cp5 maldet(1454405): {update} hashing install files and checking against server... Apr 10 2025 03:44:21 cp5 maldet(1454405): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 10 2025 03:44:21 cp5 maldet(1454405): {update} latest version already installed. Apr 10 2025 03:44:22 cp5 maldet(1454514): {sigup} performing signature update check... Apr 10 2025 03:44:22 cp5 maldet(1454514): {sigup} local signature set is version 202504071198007 Apr 10 2025 03:44:22 cp5 maldet(1454514): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 10 2025 03:44:22 cp5 maldet(1454514): {sigup} latest signature set already installed Apr 10 2025 03:44:22 cp5 maldet(1454602): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 10 2025 03:44:22 cp5 maldet(1454602): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 10 2025 03:44:22 cp5 maldet(1454602): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 10 2025 03:44:22 cp5 maldet(1454602): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 10 2025 03:44:22 cp5 maldet(1454602): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 10 2025 03:44:27 cp5 maldet(1454602): {scan} file list completed in 5s, found 3162 files... Apr 10 2025 03:44:27 cp5 maldet(1454602): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 10 2025 03:44:27 cp5 maldet(1454602): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (3162 files) in progress... Apr 10 2025 03:45:05 cp5 maldet(1454602): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 3162, malware hits 0, cleaned hits 0, time 42s Apr 10 2025 03:45:05 cp5 maldet(1454602): {scan} scan report saved, to view run: maldet --report 250410-0344.1454602 Apr 11 2025 03:53:51 cp5 maldet(1843825): {update} checking for available updates... Apr 11 2025 03:53:51 cp5 maldet(1843825): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 11 2025 03:53:51 cp5 maldet(1843825): {update} hashing install files and checking against server... Apr 11 2025 03:53:52 cp5 maldet(1843825): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 11 2025 03:53:52 cp5 maldet(1843825): {update} latest version already installed. Apr 11 2025 03:53:52 cp5 maldet(1843934): {sigup} performing signature update check... Apr 11 2025 03:53:52 cp5 maldet(1843934): {sigup} local signature set is version 202504071198007 Apr 11 2025 03:53:52 cp5 maldet(1843934): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 11 2025 03:53:52 cp5 maldet(1843934): {sigup} new signature set 202504101870578 available Apr 11 2025 03:53:52 cp5 maldet(1843934): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 11 2025 03:53:53 cp5 maldet(1843934): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 11 2025 03:53:53 cp5 maldet(1843934): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 11 2025 03:53:53 cp5 maldet(1843934): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 11 2025 03:53:53 cp5 maldet(1843934): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 11 2025 03:53:54 cp5 maldet(1843934): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 11 2025 03:53:54 cp5 maldet(1843934): {sigup} verified md5sum of maldet-sigpack.tgz Apr 11 2025 03:53:54 cp5 maldet(1843934): {sigup} unpacked and installed maldet-sigpack.tgz Apr 11 2025 03:53:54 cp5 maldet(1843934): {sigup} verified md5sum of maldet-clean.tgz Apr 11 2025 03:53:54 cp5 maldet(1843934): {sigup} unpacked and installed maldet-clean.tgz Apr 11 2025 03:53:54 cp5 maldet(1843934): {sigup} signature set update completed Apr 11 2025 03:53:54 cp5 maldet(1843934): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 11 2025 03:53:54 cp5 maldet(1844136): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 11 2025 03:53:55 cp5 maldet(1844136): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 11 2025 03:53:55 cp5 maldet(1844136): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 11 2025 03:53:55 cp5 maldet(1844136): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 11 2025 03:53:55 cp5 maldet(1844136): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 11 2025 03:53:57 cp5 maldet(1844136): {scan} file list completed in 2s, found 5401 files... Apr 11 2025 03:53:57 cp5 maldet(1844136): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 11 2025 03:53:57 cp5 maldet(1844136): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (5401 files) in progress... Apr 11 2025 03:55:11 cp5 maldet(1844136): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Apr 11 2025 03:55:11 cp5 maldet(1844136): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 5401, malware hits 0, cleaned hits 0, time 77s Apr 11 2025 03:55:11 cp5 maldet(1844136): {scan} scan report saved, to view run: maldet --report 250411-0353.1844136 Apr 12 2025 03:39:06 cp5 maldet(2240242): {update} checking for available updates... Apr 12 2025 03:39:07 cp5 maldet(2240242): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 12 2025 03:39:07 cp5 maldet(2240242): {update} hashing install files and checking against server... Apr 12 2025 03:39:07 cp5 maldet(2240242): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 12 2025 03:39:07 cp5 maldet(2240242): {update} latest version already installed. Apr 12 2025 03:39:07 cp5 maldet(2240351): {sigup} performing signature update check... Apr 12 2025 03:39:07 cp5 maldet(2240351): {sigup} local signature set is version 202504101870578 Apr 12 2025 03:39:08 cp5 maldet(2240351): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 12 2025 03:39:08 cp5 maldet(2240351): {sigup} latest signature set already installed Apr 12 2025 03:39:08 cp5 maldet(2240439): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 12 2025 03:39:08 cp5 maldet(2240439): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 12 2025 03:39:08 cp5 maldet(2240439): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 12 2025 03:39:08 cp5 maldet(2240439): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 12 2025 03:39:08 cp5 maldet(2240439): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 12 2025 03:39:10 cp5 maldet(2240439): {scan} file list completed in 2s, found 6692 files... Apr 12 2025 03:39:10 cp5 maldet(2240439): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 12 2025 03:39:10 cp5 maldet(2240439): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (6692 files) in progress... Apr 12 2025 03:40:34 cp5 maldet(2240439): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Apr 12 2025 03:40:34 cp5 maldet(2240439): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 6692, malware hits 0, cleaned hits 0, time 86s Apr 12 2025 03:40:34 cp5 maldet(2240439): {scan} scan report saved, to view run: maldet --report 250412-0339.2240439 Apr 13 2025 03:28:22 cp5 maldet(2640641): {update} checking for available updates... Apr 13 2025 03:28:22 cp5 maldet(2640641): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 13 2025 03:28:22 cp5 maldet(2640641): {update} hashing install files and checking against server... Apr 13 2025 03:28:22 cp5 maldet(2640641): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 13 2025 03:28:22 cp5 maldet(2640641): {update} latest version already installed. Apr 13 2025 03:28:23 cp5 maldet(2640750): {sigup} performing signature update check... Apr 13 2025 03:28:23 cp5 maldet(2640750): {sigup} local signature set is version 202504101870578 Apr 13 2025 03:28:23 cp5 maldet(2640750): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 13 2025 03:28:23 cp5 maldet(2640750): {sigup} latest signature set already installed Apr 13 2025 03:28:23 cp5 maldet(2640838): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 13 2025 03:28:23 cp5 maldet(2640838): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 13 2025 03:28:23 cp5 maldet(2640838): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 13 2025 03:28:23 cp5 maldet(2640838): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 13 2025 03:28:23 cp5 maldet(2640838): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 13 2025 03:28:27 cp5 maldet(2640838): {scan} file list completed in 4s, found 3549 files... Apr 13 2025 03:28:27 cp5 maldet(2640838): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 13 2025 03:28:27 cp5 maldet(2640838): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (3549 files) in progress... Apr 13 2025 03:29:07 cp5 maldet(2640838): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Apr 13 2025 03:29:07 cp5 maldet(2640838): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 3549, malware hits 0, cleaned hits 0, time 44s Apr 13 2025 03:29:07 cp5 maldet(2640838): {scan} scan report saved, to view run: maldet --report 250413-0328.2640838 Apr 14 2025 03:38:51 cp5 maldet(3026974): {update} checking for available updates... Apr 14 2025 03:38:52 cp5 maldet(3026974): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 14 2025 03:38:52 cp5 maldet(3026974): {update} hashing install files and checking against server... Apr 14 2025 03:38:52 cp5 maldet(3026974): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 14 2025 03:38:52 cp5 maldet(3026974): {update} latest version already installed. Apr 14 2025 03:38:52 cp5 maldet(3027083): {sigup} performing signature update check... Apr 14 2025 03:38:52 cp5 maldet(3027083): {sigup} local signature set is version 202504101870578 Apr 14 2025 03:38:52 cp5 maldet(3027083): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 14 2025 03:38:53 cp5 maldet(3027083): {sigup} new signature set 202504132544993 available Apr 14 2025 03:38:53 cp5 maldet(3027083): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 14 2025 03:38:54 cp5 maldet(3027083): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 14 2025 03:38:54 cp5 maldet(3027083): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 14 2025 03:38:54 cp5 maldet(3027083): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 14 2025 03:38:54 cp5 maldet(3027083): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 14 2025 03:38:55 cp5 maldet(3027083): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 14 2025 03:38:55 cp5 maldet(3027083): {sigup} verified md5sum of maldet-sigpack.tgz Apr 14 2025 03:38:55 cp5 maldet(3027083): {sigup} unpacked and installed maldet-sigpack.tgz Apr 14 2025 03:38:55 cp5 maldet(3027083): {sigup} verified md5sum of maldet-clean.tgz Apr 14 2025 03:38:55 cp5 maldet(3027083): {sigup} unpacked and installed maldet-clean.tgz Apr 14 2025 03:38:55 cp5 maldet(3027083): {sigup} signature set update completed Apr 14 2025 03:38:55 cp5 maldet(3027083): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 14 2025 03:38:55 cp5 maldet(3027288): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 14 2025 03:38:55 cp5 maldet(3027288): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 14 2025 03:38:55 cp5 maldet(3027288): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 14 2025 03:38:55 cp5 maldet(3027288): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 14 2025 03:38:55 cp5 maldet(3027288): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 14 2025 03:38:59 cp5 maldet(3027288): {scan} file list completed in 4s, found 20109 files... Apr 14 2025 03:38:59 cp5 maldet(3027288): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 14 2025 03:38:59 cp5 maldet(3027288): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (20109 files) in progress... Apr 14 2025 03:42:46 cp5 maldet(3027288): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Apr 14 2025 03:42:46 cp5 maldet(3027288): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 20109, malware hits 0, cleaned hits 0, time 231s Apr 14 2025 03:42:46 cp5 maldet(3027288): {scan} scan report saved, to view run: maldet --report 250414-0338.3027288 Apr 15 2025 03:19:19 cp5 maldet(3407865): {update} checking for available updates... Apr 15 2025 03:19:19 cp5 maldet(3407865): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 15 2025 03:19:20 cp5 maldet(3407865): {update} hashing install files and checking against server... Apr 15 2025 03:19:20 cp5 maldet(3407865): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 15 2025 03:19:20 cp5 maldet(3407865): {update} latest version already installed. Apr 15 2025 03:19:20 cp5 maldet(3407975): {sigup} performing signature update check... Apr 15 2025 03:19:20 cp5 maldet(3407975): {sigup} local signature set is version 202504132544993 Apr 15 2025 03:19:20 cp5 maldet(3407975): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 15 2025 03:19:20 cp5 maldet(3407975): {sigup} latest signature set already installed Apr 15 2025 03:19:20 cp5 maldet(3408064): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 15 2025 03:19:20 cp5 maldet(3408064): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 15 2025 03:19:20 cp5 maldet(3408064): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 15 2025 03:19:20 cp5 maldet(3408064): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 15 2025 03:19:20 cp5 maldet(3408064): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 15 2025 03:19:24 cp5 maldet(3408064): {scan} file list completed in 4s, found 4600 files... Apr 15 2025 03:19:24 cp5 maldet(3408064): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 15 2025 03:19:24 cp5 maldet(3408064): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (4600 files) in progress... Apr 15 2025 03:20:20 cp5 maldet(3408064): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Apr 15 2025 03:20:20 cp5 maldet(3408064): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 4600, malware hits 0, cleaned hits 0, time 60s Apr 15 2025 03:20:20 cp5 maldet(3408064): {scan} scan report saved, to view run: maldet --report 250415-0319.3408064 Apr 16 2025 03:50:41 cp5 maldet(3818812): {update} checking for available updates... Apr 16 2025 03:50:42 cp5 maldet(3818812): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 16 2025 03:50:42 cp5 maldet(3818812): {update} hashing install files and checking against server... Apr 16 2025 03:50:42 cp5 maldet(3818812): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 16 2025 03:50:42 cp5 maldet(3818812): {update} latest version already installed. Apr 16 2025 03:50:42 cp5 maldet(3818921): {sigup} performing signature update check... Apr 16 2025 03:50:42 cp5 maldet(3818921): {sigup} local signature set is version 202504132544993 Apr 16 2025 03:50:42 cp5 maldet(3818921): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 16 2025 03:50:42 cp5 maldet(3818921): {sigup} latest signature set already installed Apr 16 2025 03:50:42 cp5 maldet(3819010): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 16 2025 03:50:43 cp5 maldet(3819010): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 16 2025 03:50:43 cp5 maldet(3819010): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 16 2025 03:50:43 cp5 maldet(3819010): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 16 2025 03:50:43 cp5 maldet(3819010): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 16 2025 03:50:46 cp5 maldet(3819010): {scan} file list completed in 3s, found 18435 files... Apr 16 2025 03:50:47 cp5 maldet(3819010): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 16 2025 03:50:47 cp5 maldet(3819010): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (18435 files) in progress... Apr 16 2025 03:55:05 cp5 maldet(3819010): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Apr 16 2025 03:55:05 cp5 maldet(3819010): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 18435, malware hits 0, cleaned hits 0, time 263s Apr 16 2025 03:55:05 cp5 maldet(3819010): {scan} scan report saved, to view run: maldet --report 250416-0350.3819010 Apr 17 2025 03:46:34 cp5 maldet(87388): {update} checking for available updates... Apr 17 2025 03:46:34 cp5 maldet(87388): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 17 2025 03:46:34 cp5 maldet(87388): {update} hashing install files and checking against server... Apr 17 2025 03:46:34 cp5 maldet(87388): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 17 2025 03:46:34 cp5 maldet(87388): {update} latest version already installed. Apr 17 2025 03:46:34 cp5 maldet(87499): {sigup} performing signature update check... Apr 17 2025 03:46:34 cp5 maldet(87499): {sigup} local signature set is version 202504132544993 Apr 17 2025 03:46:35 cp5 maldet(87499): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 17 2025 03:46:35 cp5 maldet(87499): {sigup} new signature set 202504163218957 available Apr 17 2025 03:46:35 cp5 maldet(87499): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 17 2025 03:46:36 cp5 maldet(87499): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 17 2025 03:46:36 cp5 maldet(87499): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 17 2025 03:46:36 cp5 maldet(87499): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 17 2025 03:46:36 cp5 maldet(87499): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 17 2025 03:46:37 cp5 maldet(87499): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 17 2025 03:46:37 cp5 maldet(87499): {sigup} verified md5sum of maldet-sigpack.tgz Apr 17 2025 03:46:37 cp5 maldet(87499): {sigup} unpacked and installed maldet-sigpack.tgz Apr 17 2025 03:46:37 cp5 maldet(87499): {sigup} verified md5sum of maldet-clean.tgz Apr 17 2025 03:46:37 cp5 maldet(87499): {sigup} unpacked and installed maldet-clean.tgz Apr 17 2025 03:46:37 cp5 maldet(87499): {sigup} signature set update completed Apr 17 2025 03:46:37 cp5 maldet(87499): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 17 2025 03:46:37 cp5 maldet(87702): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 17 2025 03:46:37 cp5 maldet(87702): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 17 2025 03:46:37 cp5 maldet(87702): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 17 2025 03:46:37 cp5 maldet(87702): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 17 2025 03:46:37 cp5 maldet(87702): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 17 2025 03:46:39 cp5 maldet(87702): {scan} file list completed in 2s, found 9676 files... Apr 17 2025 03:46:39 cp5 maldet(87702): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 17 2025 03:46:39 cp5 maldet(87702): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (9676 files) in progress... Apr 17 2025 03:48:50 cp5 maldet(87702): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 9676, malware hits 0, cleaned hits 0, time 133s Apr 17 2025 03:48:50 cp5 maldet(87702): {scan} scan report saved, to view run: maldet --report 250417-0346.87702 Apr 18 2025 03:34:16 cp5 maldet(482157): {update} checking for available updates... Apr 18 2025 03:34:17 cp5 maldet(482157): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 18 2025 03:34:17 cp5 maldet(482157): {update} hashing install files and checking against server... Apr 18 2025 03:34:17 cp5 maldet(482157): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 18 2025 03:34:17 cp5 maldet(482157): {update} latest version already installed. Apr 18 2025 03:34:17 cp5 maldet(482266): {sigup} performing signature update check... Apr 18 2025 03:34:17 cp5 maldet(482266): {sigup} local signature set is version 202504163218957 Apr 18 2025 03:34:18 cp5 maldet(482266): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 18 2025 03:34:18 cp5 maldet(482266): {sigup} latest signature set already installed Apr 18 2025 03:34:18 cp5 maldet(482354): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 18 2025 03:34:18 cp5 maldet(482354): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 18 2025 03:34:18 cp5 maldet(482354): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 18 2025 03:34:18 cp5 maldet(482354): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 18 2025 03:34:18 cp5 maldet(482354): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 18 2025 03:34:20 cp5 maldet(482354): {scan} file list completed in 2s, found 1029 files... Apr 18 2025 03:34:20 cp5 maldet(482354): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 18 2025 03:34:20 cp5 maldet(482354): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1029 files) in progress... Apr 18 2025 03:34:31 cp5 maldet(482354): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1029, malware hits 0, cleaned hits 0, time 13s Apr 18 2025 03:34:31 cp5 maldet(482354): {scan} scan report saved, to view run: maldet --report 250418-0334.482354 Apr 19 2025 03:43:25 cp5 maldet(858259): {update} checking for available updates... Apr 19 2025 03:43:25 cp5 maldet(858259): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 19 2025 03:43:25 cp5 maldet(858259): {update} hashing install files and checking against server... Apr 19 2025 03:43:26 cp5 maldet(858259): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 19 2025 03:43:26 cp5 maldet(858259): {update} latest version already installed. Apr 19 2025 03:43:26 cp5 maldet(858368): {sigup} performing signature update check... Apr 19 2025 03:43:26 cp5 maldet(858368): {sigup} local signature set is version 202504163218957 Apr 19 2025 03:43:26 cp5 maldet(858368): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 19 2025 03:43:26 cp5 maldet(858368): {sigup} latest signature set already installed Apr 19 2025 03:43:26 cp5 maldet(858456): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 19 2025 03:43:26 cp5 maldet(858456): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 19 2025 03:43:26 cp5 maldet(858456): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 19 2025 03:43:26 cp5 maldet(858456): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 19 2025 03:43:26 cp5 maldet(858456): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 19 2025 03:43:29 cp5 maldet(858456): {scan} file list completed in 3s, found 1022 files... Apr 19 2025 03:43:29 cp5 maldet(858456): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 19 2025 03:43:29 cp5 maldet(858456): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1022 files) in progress... Apr 19 2025 03:43:39 cp5 maldet(858456): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1022, malware hits 0, cleaned hits 0, time 13s Apr 19 2025 03:43:39 cp5 maldet(858456): {scan} scan report saved, to view run: maldet --report 250419-0343.858456 Apr 20 2025 03:43:02 cp5 maldet(1227362): {update} checking for available updates... Apr 20 2025 03:43:03 cp5 maldet(1227362): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 20 2025 03:43:03 cp5 maldet(1227362): {update} hashing install files and checking against server... Apr 20 2025 03:43:03 cp5 maldet(1227362): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 20 2025 03:43:03 cp5 maldet(1227362): {update} latest version already installed. Apr 20 2025 03:43:03 cp5 maldet(1227471): {sigup} performing signature update check... Apr 20 2025 03:43:03 cp5 maldet(1227471): {sigup} local signature set is version 202504163218957 Apr 20 2025 03:43:03 cp5 maldet(1227471): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 20 2025 03:43:03 cp5 maldet(1227471): {sigup} new signature set 20250419480331 available Apr 20 2025 03:43:03 cp5 maldet(1227471): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 20 2025 03:43:04 cp5 maldet(1227471): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 20 2025 03:43:04 cp5 maldet(1227471): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 20 2025 03:43:04 cp5 maldet(1227471): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 20 2025 03:43:05 cp5 maldet(1227471): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 20 2025 03:43:05 cp5 maldet(1227471): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 20 2025 03:43:05 cp5 maldet(1227471): {sigup} verified md5sum of maldet-sigpack.tgz Apr 20 2025 03:43:05 cp5 maldet(1227471): {sigup} unpacked and installed maldet-sigpack.tgz Apr 20 2025 03:43:05 cp5 maldet(1227471): {sigup} verified md5sum of maldet-clean.tgz Apr 20 2025 03:43:05 cp5 maldet(1227471): {sigup} unpacked and installed maldet-clean.tgz Apr 20 2025 03:43:05 cp5 maldet(1227471): {sigup} signature set update completed Apr 20 2025 03:43:05 cp5 maldet(1227471): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 20 2025 03:43:05 cp5 maldet(1227675): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 20 2025 03:43:05 cp5 maldet(1227675): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 20 2025 03:43:05 cp5 maldet(1227675): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 20 2025 03:43:05 cp5 maldet(1227675): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 20 2025 03:43:05 cp5 maldet(1227675): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 20 2025 03:43:07 cp5 maldet(1227675): {scan} file list completed in 2s, found 1096 files... Apr 20 2025 03:43:07 cp5 maldet(1227675): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 20 2025 03:43:07 cp5 maldet(1227675): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1096 files) in progress... Apr 20 2025 03:43:19 cp5 maldet(1227675): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1096, malware hits 0, cleaned hits 0, time 14s Apr 20 2025 03:43:19 cp5 maldet(1227675): {scan} scan report saved, to view run: maldet --report 250420-0343.1227675 Apr 21 2025 03:48:16 cp5 maldet(1598351): {update} checking for available updates... Apr 21 2025 03:48:16 cp5 maldet(1598351): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 21 2025 03:48:16 cp5 maldet(1598351): {update} hashing install files and checking against server... Apr 21 2025 03:48:17 cp5 maldet(1598351): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 21 2025 03:48:17 cp5 maldet(1598351): {update} latest version already installed. Apr 21 2025 03:48:17 cp5 maldet(1598462): {sigup} performing signature update check... Apr 21 2025 03:48:17 cp5 maldet(1598462): {sigup} local signature set is version 20250419480331 Apr 21 2025 03:48:17 cp5 maldet(1598462): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 21 2025 03:48:17 cp5 maldet(1598462): {sigup} latest signature set already installed Apr 21 2025 03:48:17 cp5 maldet(1598550): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 21 2025 03:48:17 cp5 maldet(1598550): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 21 2025 03:48:17 cp5 maldet(1598550): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 21 2025 03:48:17 cp5 maldet(1598550): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 21 2025 03:48:17 cp5 maldet(1598550): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 21 2025 03:48:23 cp5 maldet(1598550): {scan} file list completed in 6s, found 959 files... Apr 21 2025 03:48:23 cp5 maldet(1598550): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 21 2025 03:48:23 cp5 maldet(1598550): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (959 files) in progress... Apr 21 2025 03:48:35 cp5 maldet(1598550): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 959, malware hits 0, cleaned hits 0, time 18s Apr 21 2025 03:48:35 cp5 maldet(1598550): {scan} scan report saved, to view run: maldet --report 250421-0348.1598550 Apr 22 2025 03:26:28 cp5 maldet(1961293): {update} checking for available updates... Apr 22 2025 03:26:28 cp5 maldet(1961293): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 22 2025 03:26:28 cp5 maldet(1961293): {update} hashing install files and checking against server... Apr 22 2025 03:26:28 cp5 maldet(1961293): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 22 2025 03:26:28 cp5 maldet(1961293): {update} latest version already installed. Apr 22 2025 03:26:29 cp5 maldet(1961402): {sigup} performing signature update check... Apr 22 2025 03:26:29 cp5 maldet(1961402): {sigup} local signature set is version 20250419480331 Apr 22 2025 03:26:29 cp5 maldet(1961402): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 22 2025 03:26:29 cp5 maldet(1961402): {sigup} latest signature set already installed Apr 22 2025 03:26:29 cp5 maldet(1961490): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 22 2025 03:26:29 cp5 maldet(1961490): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 22 2025 03:26:29 cp5 maldet(1961490): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 22 2025 03:26:29 cp5 maldet(1961490): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 22 2025 03:26:29 cp5 maldet(1961490): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 22 2025 03:26:32 cp5 maldet(1961490): {scan} file list completed in 3s, found 961 files... Apr 22 2025 03:26:32 cp5 maldet(1961490): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 22 2025 03:26:32 cp5 maldet(1961490): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (961 files) in progress... Apr 22 2025 03:26:42 cp5 maldet(1961490): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 961, malware hits 0, cleaned hits 0, time 13s Apr 22 2025 03:26:42 cp5 maldet(1961490): {scan} scan report saved, to view run: maldet --report 250422-0326.1961490 Apr 23 2025 03:44:01 cp5 maldet(2334818): {update} checking for available updates... Apr 23 2025 03:44:02 cp5 maldet(2334818): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 23 2025 03:44:02 cp5 maldet(2334818): {update} hashing install files and checking against server... Apr 23 2025 03:44:02 cp5 maldet(2334818): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 23 2025 03:44:02 cp5 maldet(2334818): {update} latest version already installed. Apr 23 2025 03:44:02 cp5 maldet(2334953): {sigup} performing signature update check... Apr 23 2025 03:44:02 cp5 maldet(2334953): {sigup} local signature set is version 20250419480331 Apr 23 2025 03:44:02 cp5 maldet(2334953): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 23 2025 03:44:02 cp5 maldet(2334953): {sigup} new signature set 202504221155028 available Apr 23 2025 03:44:02 cp5 maldet(2334953): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 23 2025 03:44:03 cp5 maldet(2334953): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 23 2025 03:44:04 cp5 maldet(2334953): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 23 2025 03:44:04 cp5 maldet(2334953): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 23 2025 03:44:04 cp5 maldet(2334953): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 23 2025 03:44:04 cp5 maldet(2334953): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 23 2025 03:44:04 cp5 maldet(2334953): {sigup} verified md5sum of maldet-sigpack.tgz Apr 23 2025 03:44:04 cp5 maldet(2334953): {sigup} unpacked and installed maldet-sigpack.tgz Apr 23 2025 03:44:04 cp5 maldet(2334953): {sigup} verified md5sum of maldet-clean.tgz Apr 23 2025 03:44:04 cp5 maldet(2334953): {sigup} unpacked and installed maldet-clean.tgz Apr 23 2025 03:44:04 cp5 maldet(2334953): {sigup} signature set update completed Apr 23 2025 03:44:04 cp5 maldet(2334953): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 23 2025 03:44:04 cp5 maldet(2335157): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 23 2025 03:44:05 cp5 maldet(2335157): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 23 2025 03:44:05 cp5 maldet(2335157): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 23 2025 03:44:05 cp5 maldet(2335157): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 23 2025 03:44:05 cp5 maldet(2335157): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 23 2025 03:44:08 cp5 maldet(2335157): {scan} file list completed in 3s, found 907 files... Apr 23 2025 03:44:09 cp5 maldet(2335157): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 23 2025 03:44:09 cp5 maldet(2335157): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (907 files) in progress... Apr 23 2025 03:44:24 cp5 maldet(2335157): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 907, malware hits 0, cleaned hits 0, time 20s Apr 23 2025 03:44:24 cp5 maldet(2335157): {scan} scan report saved, to view run: maldet --report 250423-0344.2335157 Apr 24 2025 03:30:08 cp5 maldet(2712960): {update} checking for available updates... Apr 24 2025 03:30:08 cp5 maldet(2712960): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 24 2025 03:30:08 cp5 maldet(2712960): {update} hashing install files and checking against server... Apr 24 2025 03:30:09 cp5 maldet(2712960): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 24 2025 03:30:09 cp5 maldet(2712960): {update} latest version already installed. Apr 24 2025 03:30:09 cp5 maldet(2713071): {sigup} performing signature update check... Apr 24 2025 03:30:09 cp5 maldet(2713071): {sigup} local signature set is version 202504221155028 Apr 24 2025 03:30:09 cp5 maldet(2713071): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 24 2025 03:30:09 cp5 maldet(2713071): {sigup} latest signature set already installed Apr 24 2025 03:30:09 cp5 maldet(2713159): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 24 2025 03:30:09 cp5 maldet(2713159): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 24 2025 03:30:09 cp5 maldet(2713159): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 24 2025 03:30:09 cp5 maldet(2713159): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 24 2025 03:30:09 cp5 maldet(2713159): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 24 2025 03:30:15 cp5 maldet(2713159): {scan} file list completed in 6s, found 780 files... Apr 24 2025 03:30:15 cp5 maldet(2713159): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 24 2025 03:30:15 cp5 maldet(2713159): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (780 files) in progress... Apr 24 2025 03:30:25 cp5 maldet(2713159): {hit} malware hit {HEX}php.cmdshell.egyspider.244 found for /tmp/systemd-private-87d12354d3a84031aa8261ac94235710-ea-php83-php-fpm.service-Z3x01n/tmp/sesss_60572299ebd87ec0d30e454ed626520e.php Apr 24 2025 03:30:25 cp5 maldet(2713159): {quar} malware quarantined from '/tmp/systemd-private-87d12354d3a84031aa8261ac94235710-ea-php83-php-fpm.service-Z3x01n/tmp/sesss_60572299ebd87ec0d30e454ed626520e.php' to '/usr/local/maldetect/quarantine/sesss_60572299ebd87ec0d30e454ed626520e.php.663226548' Apr 24 2025 03:30:25 cp5 maldet(2713159): {clean} could not find clean rule for hit php.cmdshell.egyspider or file /usr/local/maldetect/quarantine/sesss_60572299ebd87ec0d30e454ed626520e.php.663226548 no longer exists. Apr 24 2025 03:30:25 cp5 maldet(2713159): {quar} fatal error handling '/var/tmp/systemd-private-87d12354d3a84031aa8261ac94235710-ea-php83-php-fpm.service-Z3x01n/tmp/sesss_60572299ebd87ec0d30e454ed626520e.php' Apr 24 2025 03:30:25 cp5 maldet(2713159): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 780, malware hits 1, cleaned hits 0, time 16s Apr 24 2025 03:30:25 cp5 maldet(2713159): {scan} scan report saved, to view run: maldet --report 250424-0330.2713159 Apr 25 2025 03:14:22 cp5 maldet(3123456): {update} checking for available updates... Apr 25 2025 03:14:23 cp5 maldet(3123456): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 25 2025 03:14:23 cp5 maldet(3123456): {update} hashing install files and checking against server... Apr 25 2025 03:14:23 cp5 maldet(3123456): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 25 2025 03:14:23 cp5 maldet(3123456): {update} latest version already installed. Apr 25 2025 03:14:23 cp5 maldet(3123565): {sigup} performing signature update check... Apr 25 2025 03:14:23 cp5 maldet(3123565): {sigup} local signature set is version 202504221155028 Apr 25 2025 03:14:23 cp5 maldet(3123565): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 25 2025 03:14:23 cp5 maldet(3123565): {sigup} latest signature set already installed Apr 25 2025 03:14:23 cp5 maldet(3123653): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 25 2025 03:14:23 cp5 maldet(3123653): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 25 2025 03:14:23 cp5 maldet(3123653): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 25 2025 03:14:23 cp5 maldet(3123653): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 25 2025 03:14:23 cp5 maldet(3123653): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 25 2025 03:14:30 cp5 maldet(3123653): {scan} file list completed in 7s, found 340 files... Apr 25 2025 03:14:30 cp5 maldet(3123653): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 25 2025 03:14:30 cp5 maldet(3123653): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (340 files) in progress... Apr 25 2025 03:14:40 cp5 maldet(3123653): {hit} malware hit {HEX}php.cmdshell.egyspider.244 found for /tmp/systemd-private-87d12354d3a84031aa8261ac94235710-ea-php83-php-fpm.service-1AK8DR/tmp/sesss_60572299ebd87ec0d30e454ed626520e.php Apr 25 2025 03:14:40 cp5 maldet(3123653): {quar} malware quarantined from '/tmp/systemd-private-87d12354d3a84031aa8261ac94235710-ea-php83-php-fpm.service-1AK8DR/tmp/sesss_60572299ebd87ec0d30e454ed626520e.php' to '/usr/local/maldetect/quarantine/sesss_60572299ebd87ec0d30e454ed626520e.php.46795196' Apr 25 2025 03:14:40 cp5 maldet(3123653): {clean} could not find clean rule for hit php.cmdshell.egyspider or file /usr/local/maldetect/quarantine/sesss_60572299ebd87ec0d30e454ed626520e.php.46795196 no longer exists. Apr 25 2025 03:14:40 cp5 maldet(3123653): {quar} fatal error handling '/var/tmp/systemd-private-87d12354d3a84031aa8261ac94235710-ea-php83-php-fpm.service-1AK8DR/tmp/sesss_60572299ebd87ec0d30e454ed626520e.php' Apr 25 2025 03:14:40 cp5 maldet(3123653): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 340, malware hits 1, cleaned hits 0, time 17s Apr 25 2025 03:14:40 cp5 maldet(3123653): {scan} scan report saved, to view run: maldet --report 250425-0314.3123653 Apr 26 2025 03:49:29 cp5 maldet(3570292): {update} checking for available updates... Apr 26 2025 03:49:29 cp5 maldet(3570292): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 26 2025 03:49:29 cp5 maldet(3570292): {update} hashing install files and checking against server... Apr 26 2025 03:49:30 cp5 maldet(3570292): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 26 2025 03:49:30 cp5 maldet(3570292): {update} latest version already installed. Apr 26 2025 03:49:30 cp5 maldet(3570402): {sigup} performing signature update check... Apr 26 2025 03:49:30 cp5 maldet(3570402): {sigup} local signature set is version 202504221155028 Apr 26 2025 03:49:30 cp5 maldet(3570402): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 26 2025 03:49:30 cp5 maldet(3570402): {sigup} new signature set 202504251845085 available Apr 26 2025 03:49:30 cp5 maldet(3570402): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 26 2025 03:49:31 cp5 maldet(3570402): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 26 2025 03:49:31 cp5 maldet(3570402): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 26 2025 03:49:31 cp5 maldet(3570402): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 26 2025 03:49:32 cp5 maldet(3570402): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 26 2025 03:49:32 cp5 maldet(3570402): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 26 2025 03:49:32 cp5 maldet(3570402): {sigup} verified md5sum of maldet-sigpack.tgz Apr 26 2025 03:49:32 cp5 maldet(3570402): {sigup} unpacked and installed maldet-sigpack.tgz Apr 26 2025 03:49:32 cp5 maldet(3570402): {sigup} verified md5sum of maldet-clean.tgz Apr 26 2025 03:49:32 cp5 maldet(3570402): {sigup} unpacked and installed maldet-clean.tgz Apr 26 2025 03:49:32 cp5 maldet(3570402): {sigup} signature set update completed Apr 26 2025 03:49:32 cp5 maldet(3570402): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 26 2025 03:49:32 cp5 maldet(3570605): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 26 2025 03:49:32 cp5 maldet(3570605): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 26 2025 03:49:32 cp5 maldet(3570605): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 26 2025 03:49:32 cp5 maldet(3570605): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 26 2025 03:49:32 cp5 maldet(3570605): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 26 2025 03:49:42 cp5 maldet(3570605): {scan} file list completed in 10s, found 430 files... Apr 26 2025 03:49:42 cp5 maldet(3570605): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 26 2025 03:49:42 cp5 maldet(3570605): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (430 files) in progress... Apr 26 2025 03:49:51 cp5 maldet(3570605): {hit} malware hit {HEX}php.cmdshell.egyspider.244 found for /tmp/systemd-private-87d12354d3a84031aa8261ac94235710-ea-php83-php-fpm.service-1AK8DR/tmp/sesss_60572299ebd87ec0d30e454ed626520e.php Apr 26 2025 03:49:51 cp5 maldet(3570605): {quar} malware quarantined from '/tmp/systemd-private-87d12354d3a84031aa8261ac94235710-ea-php83-php-fpm.service-1AK8DR/tmp/sesss_60572299ebd87ec0d30e454ed626520e.php' to '/usr/local/maldetect/quarantine/sesss_60572299ebd87ec0d30e454ed626520e.php.2131331150' Apr 26 2025 03:49:51 cp5 maldet(3570605): {clean} could not find clean rule for hit php.cmdshell.egyspider or file /usr/local/maldetect/quarantine/sesss_60572299ebd87ec0d30e454ed626520e.php.2131331150 no longer exists. Apr 26 2025 03:49:51 cp5 maldet(3570605): {quar} fatal error handling '/var/tmp/systemd-private-87d12354d3a84031aa8261ac94235710-ea-php83-php-fpm.service-1AK8DR/tmp/sesss_60572299ebd87ec0d30e454ed626520e.php' Apr 26 2025 03:49:51 cp5 maldet(3570605): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 430, malware hits 1, cleaned hits 0, time 19s Apr 26 2025 03:49:51 cp5 maldet(3570605): {scan} scan report saved, to view run: maldet --report 250426-0349.3570605 Apr 27 2025 03:19:36 cp5 maldet(4047408): {update} checking for available updates... Apr 27 2025 03:19:36 cp5 maldet(4047408): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 27 2025 03:19:36 cp5 maldet(4047408): {update} hashing install files and checking against server... Apr 27 2025 03:19:36 cp5 maldet(4047408): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 27 2025 03:19:36 cp5 maldet(4047408): {update} latest version already installed. Apr 27 2025 03:19:36 cp5 maldet(4047517): {sigup} performing signature update check... Apr 27 2025 03:19:36 cp5 maldet(4047517): {sigup} local signature set is version 202504251845085 Apr 27 2025 03:19:37 cp5 maldet(4047517): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 27 2025 03:19:37 cp5 maldet(4047517): {sigup} latest signature set already installed Apr 27 2025 03:19:37 cp5 maldet(4047605): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 27 2025 03:19:37 cp5 maldet(4047605): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 27 2025 03:19:37 cp5 maldet(4047605): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 27 2025 03:19:37 cp5 maldet(4047605): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 27 2025 03:19:37 cp5 maldet(4047605): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 27 2025 03:19:43 cp5 maldet(4047605): {scan} file list completed in 6s, found 623 files... Apr 27 2025 03:19:43 cp5 maldet(4047605): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 27 2025 03:19:43 cp5 maldet(4047605): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (623 files) in progress... Apr 27 2025 03:19:52 cp5 maldet(4047605): {hit} malware hit {HEX}php.cmdshell.egyspider.244 found for /tmp/systemd-private-87d12354d3a84031aa8261ac94235710-ea-php83-php-fpm.service-1AK8DR/tmp/sesss_60572299ebd87ec0d30e454ed626520e.php Apr 27 2025 03:19:52 cp5 maldet(4047605): {quar} malware quarantined from '/tmp/systemd-private-87d12354d3a84031aa8261ac94235710-ea-php83-php-fpm.service-1AK8DR/tmp/sesss_60572299ebd87ec0d30e454ed626520e.php' to '/usr/local/maldetect/quarantine/sesss_60572299ebd87ec0d30e454ed626520e.php.3258019849' Apr 27 2025 03:19:52 cp5 maldet(4047605): {clean} could not find clean rule for hit php.cmdshell.egyspider or file /usr/local/maldetect/quarantine/sesss_60572299ebd87ec0d30e454ed626520e.php.3258019849 no longer exists. Apr 27 2025 03:19:52 cp5 maldet(4047605): {quar} fatal error handling '/var/tmp/systemd-private-87d12354d3a84031aa8261ac94235710-ea-php83-php-fpm.service-1AK8DR/tmp/sesss_60572299ebd87ec0d30e454ed626520e.php' Apr 27 2025 03:19:52 cp5 maldet(4047605): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 623, malware hits 1, cleaned hits 0, time 15s Apr 27 2025 03:19:52 cp5 maldet(4047605): {scan} scan report saved, to view run: maldet --report 250427-0319.4047605
Name
Size
Last Modified
Owner
Permissions
Actions
clamscan_log
338.366
KB
April 26 2025 9:49:52
root
0640
event_log
177.563
KB
April 26 2025 9:49:52
root
0644
2017 © D7net | D704T team