xqkqfjdlqsjdqs odsqqlkdjqmsjd onelmlksqdjmlsqjd  ----------- SCAN REPORT ----------- TimeStamp: Sun, 30 Mar 2025 22:42:57 +0000 (/usr/sbin/cxs --background --clamdsock /var/run/clamd.scan/clamd.sock --defapache apache --doptions Mv --exploitscan --nofallback --filemax 100000 --noforce --html --options mMOLfSGchexdnwZDRru --noprobability --qoptions Mvh --report /mnt/nc-ph-1832-41/cxs/scan_31.03.2025.txt --sizemax 1000000 --ssl --summary --sversionscan --timemax 30 --nounofficial --virusscan --vmrssmax 2000000 /mnt/nc-ph-1832-41/golfneqc/) Scanning /mnt/nc-ph-1832-41/golfneqc: '/mnt/nc-ph-1832-41/golfneqc/access-logs' # Symlink to [/etc/apache2/logs/domlogs/golfneqc] '/mnt/nc-ph-1832-41/golfneqc/www' # Symlink to [public_html] '/mnt/nc-ph-1832-41/golfneqc/.cagefs/opt/alt/php52/link/conf' # Symlink to [/opt/alt/php52/etc/php.d] '/mnt/nc-ph-1832-41/golfneqc/.cagefs/opt/alt/php53/link/conf' # Symlink to [/opt/alt/php53/etc/php.d] '/mnt/nc-ph-1832-41/golfneqc/.cagefs/opt/alt/php54/link/conf' # Symlink to [/opt/alt/php54/etc/php.d] '/mnt/nc-ph-1832-41/golfneqc/.cagefs/opt/alt/php55/link/conf' # Symlink to [/opt/alt/php55/etc/php.d] '/mnt/nc-ph-1832-41/golfneqc/.cagefs/opt/alt/php56/link/conf' # Symlink to [/opt/alt/php56/etc/php.d] '/mnt/nc-ph-1832-41/golfneqc/.cagefs/opt/alt/php70/link/conf' # Symlink to [/opt/alt/php70/etc/php.d] '/mnt/nc-ph-1832-41/golfneqc/.cagefs/opt/alt/php71/link/conf' # Symlink to [/opt/alt/php71/etc/php.d] '/mnt/nc-ph-1832-41/golfneqc/.cagefs/opt/alt/php72/link/conf' # Symlink to [/opt/alt/php72/etc/php.d] '/mnt/nc-ph-1832-41/golfneqc/.cagefs/opt/alt/php73/link/conf' # Symlink to [/opt/alt/php73/etc/php.d] '/mnt/nc-ph-1832-41/golfneqc/.cagefs/opt/alt/php74/link/conf' # Symlink to [/opt/alt/php74/etc/php.d] '/mnt/nc-ph-1832-41/golfneqc/.cagefs/opt/alt/php80/link/conf' # Symlink to [/etc/cl.php.d/alt-php80] '/mnt/nc-ph-1832-41/golfneqc/.cagefs/opt/alt/php81/link/conf' # Symlink to [/opt/alt/php81/etc/php.d] '/mnt/nc-ph-1832-41/golfneqc/.cagefs/opt/alt/php82/link/conf' # Symlink to [/opt/alt/php82/etc/php.d] '/mnt/nc-ph-1832-41/golfneqc/.cagefs/opt/alt/php83/link/conf' # Symlink to [/opt/alt/php83/etc/php.d] '/mnt/nc-ph-1832-41/golfneqc/.cagefs/tmp/.s.PGSQL.5432' # Symlink to [/var/run/postgres/.s.PGSQL.5432] '/mnt/nc-ph-1832-41/golfneqc/.cagefs/tmp/magick-3zthrxxp2DEiNygvUIGNoNUp3X2Lo9cF' # Symlink to [/home/golfneqc/buyall.us/wp-content/uploads/2024/05/VID_20240518_140801_173.mp4] '/mnt/nc-ph-1832-41/golfneqc/.cagefs/tmp/mysql.sock' # Symlink to [/var/lib/mysql/mysql.sock] '/mnt/nc-ph-1832-41/golfneqc/.cagefs/var/cache' # World writeable directory '/mnt/nc-ph-1832-41/golfneqc/.cagefs/var/cache/php-eaccelerator' # World writeable directory '/mnt/nc-ph-1832-41/golfneqc/.cagefs/var/php' # World writeable directory '/mnt/nc-ph-1832-41/golfneqc/.cagefs/var/php/apm' # World writeable directory '/mnt/nc-ph-1832-41/golfneqc/.cagefs/var/php/apm/db' # World writeable directory '/mnt/nc-ph-1832-41/golfneqc/.cagefs/var/run/screen' # World writeable directory '/mnt/nc-ph-1832-41/golfneqc/.caldav/info@buyall.us/calendar/calendly-1229885140.ics' # Symlink to [/home/golfneqc/.caldav/support@buyall.us/calendar/calendly-1229885140.ics] '/mnt/nc-ph-1832-41/golfneqc/.cpanel/ea-php-cli/buyall.us/.ea-php-cli.cache' # Symlink to [ea-php81] '/mnt/nc-ph-1832-41/golfneqc/.cpanel/ea-php-cli/buyall.us/.wp-toolkit_3/.ea-php-cli.cache' # Symlink to [ea-php81] '/mnt/nc-ph-1832-41/golfneqc/.cpanel/ea-php-cli/buyall.us/.wp-toolkit_4/.ea-php-cli.cache' # Symlink to [ea-php81] '/mnt/nc-ph-1832-41/golfneqc/.cpanel/ea-php-cli/buyall.us/.wp-toolkit_7/.ea-php-cli.cache' # Symlink to [ea-php81] '/mnt/nc-ph-1832-41/golfneqc/.cpanel/ea-php-cli/buyall.us/.wp-toolkit_8/.ea-php-cli.cache' # Symlink to [ea-php81] '/mnt/nc-ph-1832-41/golfneqc/.cpanel/ea-php-cli/buyall.us/.wp-toolkit_9/.ea-php-cli.cache' # Symlink to [ea-php81] '/mnt/nc-ph-1832-41/golfneqc/.cpanel/ea-php-cli/buyall.us/.wp-toolkit_A/.ea-php-cli.cache' # Symlink to [ea-php81] '/mnt/nc-ph-1832-41/golfneqc/.cpanel/ea-php-cli/buyall.us/.wp-toolkit_N/.ea-php-cli.cache' # Symlink to [ea-php81] '/mnt/nc-ph-1832-41/golfneqc/.cpanel/ea-php-cli/buyall.us/.wp-toolkit_W/.ea-php-cli.cache' # Symlink to [ea-php81] '/mnt/nc-ph-1832-41/golfneqc/.cpanel/ea-php-cli/buyall.us/.wp-toolkit_d/.ea-php-cli.cache' # Symlink to [ea-php81] '/mnt/nc-ph-1832-41/golfneqc/.cpanel/ea-php-cli/buyall.us/.wp-toolkit_s/.ea-php-cli.cache' # Symlink to [ea-php81] '/mnt/nc-ph-1832-41/golfneqc/.cpanel/ea-php-cli/buyall.us/.wp-toolkit_t/.ea-php-cli.cache' # Symlink to [ea-php81] '/mnt/nc-ph-1832-41/golfneqc/.cpanel/ea-php-cli/buyall.us/wp-admin/.ea-php-cli.cache' # Symlink to [ea-php81] '/mnt/nc-ph-1832-41/golfneqc/.cpanel/ea-php-cli/furryfriendlypaws.com/.ea-php-cli.cache' # Symlink to [ea-php80] '/mnt/nc-ph-1832-41/golfneqc/.cpanel/ea-php-cli/furryfriendlypaws.com/wp-admin/.ea-php-cli.cache' # Symlink to [ea-php81] '/mnt/nc-ph-1832-41/golfneqc/.cpanel/ea-php-cli/logisticbusinesslimited.com/.ea-php-cli.cache' # Symlink to [ea-php81] '/mnt/nc-ph-1832-41/golfneqc/.cpanel/ea-php-cli/public_html/.ea-php-cli.cache' # Symlink to [ea-php83] '/mnt/nc-ph-1832-41/golfneqc/.cpanel/ea-php-cli/public_html/.wp-toolkit_0/.ea-php-cli.cache' # Symlink to [ea-php82] '/mnt/nc-ph-1832-41/golfneqc/.cpanel/ea-php-cli/public_html/.wp-toolkit_2/.ea-php-cli.cache' # Symlink to [ea-php82] '/mnt/nc-ph-1832-41/golfneqc/.cpanel/ea-php-cli/public_html/.wp-toolkit_5/.ea-php-cli.cache' # Symlink to [ea-php83] '/mnt/nc-ph-1832-41/golfneqc/.cpanel/ea-php-cli/public_html/.wp-toolkit_B/.ea-php-cli.cache' # Symlink to [ea-php83] '/mnt/nc-ph-1832-41/golfneqc/.cpanel/ea-php-cli/public_html/.wp-toolkit_D/.ea-php-cli.cache' # Symlink to [ea-php82] '/mnt/nc-ph-1832-41/golfneqc/.cpanel/ea-php-cli/public_html/.wp-toolkit_E/.ea-php-cli.cache' # Symlink to [ea-php83] '/mnt/nc-ph-1832-41/golfneqc/.cpanel/ea-php-cli/public_html/.wp-toolkit_F/.ea-php-cli.cache' # Symlink to [ea-php82] '/mnt/nc-ph-1832-41/golfneqc/.cpanel/ea-php-cli/public_html/.wp-toolkit_H/.ea-php-cli.cache' # Symlink to [ea-php81] '/mnt/nc-ph-1832-41/golfneqc/.cpanel/ea-php-cli/public_html/.wp-toolkit_I/.ea-php-cli.cache' # Symlink to [ea-php83] '/mnt/nc-ph-1832-41/golfneqc/.cpanel/ea-php-cli/public_html/.wp-toolkit_J/.ea-php-cli.cache' # Symlink to [ea-php81] '/mnt/nc-ph-1832-41/golfneqc/.cpanel/ea-php-cli/public_html/.wp-toolkit_K/.ea-php-cli.cache' # Symlink to [ea-php83] '/mnt/nc-ph-1832-41/golfneqc/.cpanel/ea-php-cli/public_html/.wp-toolkit_O/.ea-php-cli.cache' # Symlink to [ea-php83] '/mnt/nc-ph-1832-41/golfneqc/.cpanel/ea-php-cli/public_html/.wp-toolkit_Z/.ea-php-cli.cache' # Symlink to [ea-php82] '/mnt/nc-ph-1832-41/golfneqc/.cpanel/ea-php-cli/public_html/.wp-toolkit_d/.ea-php-cli.cache' # Symlink to [ea-php82] '/mnt/nc-ph-1832-41/golfneqc/.cpanel/ea-php-cli/public_html/.wp-toolkit_f/.ea-php-cli.cache' # Symlink to [ea-php81] '/mnt/nc-ph-1832-41/golfneqc/.cpanel/ea-php-cli/public_html/.wp-toolkit_o/.ea-php-cli.cache' # Symlink to [ea-php83] '/mnt/nc-ph-1832-41/golfneqc/.cpanel/ea-php-cli/public_html/.wp-toolkit_p/.ea-php-cli.cache' # Symlink to [ea-php82] '/mnt/nc-ph-1832-41/golfneqc/.cpanel/ea-php-cli/public_html/.wp-toolkit_v/.ea-php-cli.cache' # Symlink to [ea-php82] '/mnt/nc-ph-1832-41/golfneqc/.cpanel/ea-php-cli/public_html/.wp-toolkit_x/.ea-php-cli.cache' # Symlink to [ea-php81] '/mnt/nc-ph-1832-41/golfneqc/.cpanel/ea-php-cli/public_html/wp-admin/.ea-php-cli.cache' # Symlink to [ea-php81] '/mnt/nc-ph-1832-41/golfneqc/.cpanel/ea-php-cli/voltwheelers.org/wp-admin/.ea-php-cli.cache' # Symlink to [ea-php81] '/mnt/nc-ph-1832-41/golfneqc/.cpanel/ea-php-cli/wpt.buyall.us/.ea-php-cli.cache' # Symlink to [ea-php83] # Scan Timeout (30 secs) while processing: '/mnt/nc-ph-1832-41/golfneqc/.trash/themeforest-O3m55onz-martfury-woocommerce-marketplace-wordpress-theme.zip' '/mnt/nc-ph-1832-41/golfneqc/.wp-toolkit/backups/1/files/wp-content/cache/object/options/e00/735/e0073553b40d15ab438ac50ec85b1b24.php' # Universal decode regex match = [universal decoder] '/mnt/nc-ph-1832-41/golfneqc/.wp-toolkit/backups/1/files/wp-content/plugins/w3-total-cache/CdnEngine_Ftp.php' # Regular expression match = [\n(?!\s*(//|\#|\*)).*\.ssh/] '/mnt/nc-ph-1832-41/golfneqc/.wp-toolkit/backups/1/files/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c' # Suspicious file type [application/x-c] '/mnt/nc-ph-1832-41/golfneqc/etc/golfneqc.rcube.db.latest' # Symlink to [golfneqc.rcube.db.1742272481] '/mnt/nc-ph-1832-41/golfneqc/etc/buyall.us/admin.rcube.db.latest' # Symlink to [admin.rcube.db.1742272481] '/mnt/nc-ph-1832-41/golfneqc/etc/buyall.us/anaghogiovannimetogourodrigue.rcube.db.latest' # Symlink to [anaghogiovannimetogourodrigue.rcube.db.1742272482] '/mnt/nc-ph-1832-41/golfneqc/etc/buyall.us/ask.rcube.db.latest' # Symlink to [ask.rcube.db.1742272482] '/mnt/nc-ph-1832-41/golfneqc/etc/buyall.us/ceo.rcube.db.latest' # Symlink to [ceo.rcube.db.1742272482] '/mnt/nc-ph-1832-41/golfneqc/etc/buyall.us/checedrickrosland.rcube.db.latest' # Symlink to [checedrickrosland.rcube.db.1729214968] '/mnt/nc-ph-1832-41/golfneqc/etc/buyall.us/gpbikes.rcube.db.latest' # Symlink to [gpbikes.rcube.db.1742272482] '/mnt/nc-ph-1832-41/golfneqc/etc/buyall.us/info.rcube.db.latest' # Symlink to [info.rcube.db.1742272482] '/mnt/nc-ph-1832-41/golfneqc/etc/buyall.us/motorsportsworld.rcube.db.latest' # Symlink to [motorsportsworld.rcube.db.1742272482] '/mnt/nc-ph-1832-41/golfneqc/etc/buyall.us/robertsmith.rcube.db.latest' # Symlink to [robertsmith.rcube.db.1742272482] '/mnt/nc-ph-1832-41/golfneqc/etc/buyall.us/support.rcube.db.latest' # Symlink to [support.rcube.db.1742272482] '/mnt/nc-ph-1832-41/golfneqc/etc/buyall.us/yamahamotorsports.rcube.db.latest' # Symlink to [yamahamotorsports.rcube.db.1742272482] '/mnt/nc-ph-1832-41/golfneqc/etc/golfcart.sale/info.rcube.db.latest' # Symlink to [info.rcube.db.1727400571] '/mnt/nc-ph-1832-41/golfneqc/etc/golfcart.sale/sales.rcube.db.latest' # Symlink to [sales.rcube.db.1727400571] '/mnt/nc-ph-1832-41/golfneqc/mail/.admin@buyall_us' # Symlink to [buyall.us/admin] '/mnt/nc-ph-1832-41/golfneqc/mail/.anaghogiovannimetogourodrigue@buyall_us' # Symlink to [buyall.us/anaghogiovannimetogourodrigue] '/mnt/nc-ph-1832-41/golfneqc/mail/.ask@buyall_us' # Symlink to [buyall.us/ask] '/mnt/nc-ph-1832-41/golfneqc/mail/.ceo@buyall_us' # Symlink to [buyall.us/ceo] '/mnt/nc-ph-1832-41/golfneqc/mail/.courier@logisticbusinessline_com' # Symlink to [logisticbusinessline.com/courier] '/mnt/nc-ph-1832-41/golfneqc/mail/.gpbikes@buyall_us' # Symlink to [buyall.us/gpbikes] '/mnt/nc-ph-1832-41/golfneqc/mail/.info@buyall_us' # Symlink to [buyall.us/info] '/mnt/nc-ph-1832-41/golfneqc/mail/.jonahperkins@buyall_us' # Symlink to [buyall.us/jonahperkins] '/mnt/nc-ph-1832-41/golfneqc/mail/.mail@logisticbusinesslimited_com' # Symlink to [logisticbusinesslimited.com/mail] '/mnt/nc-ph-1832-41/golfneqc/mail/.motorsportsworld@buyall_us' # Symlink to [buyall.us/motorsportsworld] '/mnt/nc-ph-1832-41/golfneqc/mail/.robertsmith@buyall_us' # Symlink to [buyall.us/robertsmith] '/mnt/nc-ph-1832-41/golfneqc/mail/.support@buyall_us' # Symlink to [buyall.us/support] '/mnt/nc-ph-1832-41/golfneqc/mail/.yamahamotorsports@buyall_us' # Symlink to [buyall.us/yamahamotorsports]