----------- SCAN REPORT ----------- TimeStamp: Tue, 7 May 2024 00:16:06 -0400 (/usr/sbin/cxs --background --clamdsock /var/clamd --dbreport --defapache nobody --doptions Mv --exploitscan --nofallback --filemax 50000 --noforce --html --ignore /etc/cxs/cxs.ignore.manual --options mMOLfSGchexdnwZDRru --noprobability --qoptions Mv --report /home/mpararhp/scanreport-mpararhp-May072024_00h16m.txt --sizemax 1000000 --ssl --summary --sversionscan --timemax 30 --nounofficial --user mpararhp --virusscan --vmrssmax 2000000 --waitscan 0 --xtra /etc/cxs/cxs.xtra.manual) Scanning /home/mpararhp: '/home/mpararhp/access-logs' # Symlink to [/etc/apache2/logs/domlogs/mpararhp] '/home/mpararhp/.cpanel/ea-php-cli/www.turmericindianeatery.ca' # Suspicious directory '/home/mpararhp/.nc_plugin/hidden' # World writeable directory # Scan Timeout (30 secs) while processing: '/home/mpararhp/11queensfamilydentistry.ca/old.zip' # Scan Timeout (30 secs) while processing: '/home/mpararhp/11queensfamilydentistry.ca/wordpress.zip' '/home/mpararhp/11queensfamilydentistry.ca/wp-content/.htaccess' # Known exploit = [Fingerprint Match (sha256)] '/home/mpararhp/11queensfamilydentistry.ca/wp-content/plugins/akismet/akismet.php' # Script version check [OLD] [Akismet Anti-Spam v4.1.8 < v5.3] '/home/mpararhp/11queensfamilydentistry.ca/wp-content/plugins/all-in-one-wp-migration/all-in-one-wp-migration.php' # Script version check [OLD] [All-in-One WP Migration v7.34 < v7.79] '/home/mpararhp/11queensfamilydentistry.ca/wp-content/plugins/coming-soon/app/routes.php' # Universal decode regex match = [universal decoder] '/home/mpararhp/11queensfamilydentistry.ca/wp-content/plugins/contact-form-7/wp-contact-form-7.php' # Script version check [OLD] [Contact Form 7 v5.3.2 < v5.8.6] '/home/mpararhp/11queensfamilydentistry.ca/wp-content/plugins/duplicate-page/duplicatepage.php' # Script version check [OLD] [Duplicate Page v4.3 < v4.5.3] '/home/mpararhp/11queensfamilydentistry.ca/wp-content/plugins/duplicator/duplicator.php' # Script version check [OLD] [Duplicator v1.3.40.1 < v1.5.8] # Universal decode regex match = [universal decoder] '/home/mpararhp/11queensfamilydentistry.ca/wp-content/plugins/fusion-builder/templates/content/content-templates.php' # Universal decode regex match = [universal decoder] '/home/mpararhp/11queensfamilydentistry.ca/wp-content/plugins/fusion-builder/templates/forms/form-templates.php' # Universal decode regex match = [universal decoder] '/home/mpararhp/11queensfamilydentistry.ca/wp-content/plugins/instagram-feed/instagram-feed.php' # Script version check [OLD] [Smash Balloon Instagram Feed v2.7 < v6.2.7] '/home/mpararhp/11queensfamilydentistry.ca/wp-content/plugins/litespeed-cache/litespeed-cache.php' # Script version check [OLD] [LiteSpeed Cache v5.2 < v6.0.0.1] '/home/mpararhp/11queensfamilydentistry.ca/wp-content/plugins/popup-maker/popup-maker.php' # Script version check [OLD] [Popup Maker v1.15.0 < v1.18.2] '/home/mpararhp/11queensfamilydentistry.ca/wp-content/plugins/really-simple-ssl/rlrsssl-really-simple-ssl.php' # Script version check [OLD] [Really Simple SSL v4.0.7 < v7.2.1] '/home/mpararhp/11queensfamilydentistry.ca/wp-content/plugins/updraftplus/updraftplus.php' # Script version check [OLD] [UpdraftPlus - Backup/Restore v1.16.47 < v1.23.16] '/home/mpararhp/11queensfamilydentistry.ca/wp-content/plugins/wordfence/wordfence.php' # Script version check [OLD] [Wordfence Security v7.4.14 < v7.11.1] '/home/mpararhp/11queensfamilydentistry.ca/wp-content/plugins/wordpress-seo/wp-seo.php' # Script version check [OLD] [Yoast SEO v15.7 < v21.8] '/home/mpararhp/11queensfamilydentistry.ca/wp-content/plugins/wp-maintenance-mode/wp-maintenance-mode.php' # Script version check [OLD] [WP Maintenance Mode v2.3.0 < v2.6.9] # Scan Timeout (30 secs) while processing: '/home/mpararhp/11queensfamilydentistry.ca/wp-content/updraft/backup_2021-01-20-0040_Queens_Family_Dentistry_c8fd49cdfeef-themes.zip' '/home/mpararhp/11queensfamilydentistry.ca/wp-includes/version.php' # Script version check [OLD] [Wordpress v5.6.1 < v6.5.2] '/home/mpararhp/etc/mparkaraonline.ca/@pwcache/mac' # Suspected exploit file '/home/mpararhp/hachiai.mparkara.com/wp-content/uploads' # World writeable directory '/home/mpararhp/hachiai.mparkara.com/wp-content/uploads/2024' # World writeable directory '/home/mpararhp/hachiai.mparkara.com/wp-content/uploads/2024/03' # World writeable directory '/home/mpararhp/hachiai.mparkara.com/wp-content/uploads/2024/04' # World writeable directory '/home/mpararhp/hachiai.mparkara.com/wp-content/uploads/2024/05' # World writeable directory '/home/mpararhp/hachiai.mparkara.com/wp-content/uploads/fusion-icons' # World writeable directory '/home/mpararhp/hachiai.mparkara.com/wp-content/uploads/fusion-icons/accountant-pro-icon-set' # World writeable directory '/home/mpararhp/hachiai.mparkara.com/wp-content/uploads/fusionredux' # World writeable directory '/home/mpararhp/hcc.mparkara.com/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php' # Universal decode regex match = [universal decoder] '/home/mpararhp/hcc.mparkara.com/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php' # Universal decode regex match = [universal decoder] '/home/mpararhp/hcc.mparkara.com/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c' # Suspicious file type [application/x-c] '/home/mpararhp/hcc.mparkara.com/wp-content/plugins/woocommerce-payments/includes/admin/class-wc-payments-admin.php' # Universal decode regex match = [universal decoder] '/home/mpararhp/hcc.mparkara.com/wp-content/plugins/wp-simple-pay-pro-3/includes/core/functions/shared.php' # Universal decode regex match = [universal decoder] '/home/mpararhp/hcc.mparkara.com/wp-content/uploads' # World writeable directory '/home/mpararhp/hcc.mparkara.com/wp-content/uploads/2023' # World writeable directory '/home/mpararhp/hcc.mparkara.com/wp-content/uploads/2023/04' # World writeable directory '/home/mpararhp/hcc.mparkara.com/wp-content/uploads/2023/05' # World writeable directory '/home/mpararhp/hcc.mparkara.com/wp-content/uploads/2023/08' # World writeable directory '/home/mpararhp/hcc.mparkara.com/wp-content/uploads/2023/09' # World writeable directory '/home/mpararhp/hcc.mparkara.com/wp-content/uploads/2023/10' # World writeable directory '/home/mpararhp/hcc.mparkara.com/wp-content/uploads/2023/11' # World writeable directory '/home/mpararhp/hcc.mparkara.com/wp-content/uploads/2023/12' # World writeable directory '/home/mpararhp/hcc.mparkara.com/wp-content/uploads/2024' # World writeable directory '/home/mpararhp/hcc.mparkara.com/wp-content/uploads/2024/01' # World writeable directory '/home/mpararhp/hcc.mparkara.com/wp-content/uploads/2024/02' # World writeable directory '/home/mpararhp/hcc.mparkara.com/wp-content/uploads/2024/03' # World writeable directory '/home/mpararhp/hcc.mparkara.com/wp-content/uploads/2024/04' # World writeable directory '/home/mpararhp/hcc.mparkara.com/wp-content/uploads/2024/05' # World writeable directory '/home/mpararhp/hcc.mparkara.com/wp-content/uploads/fusion-icons' # World writeable directory '/home/mpararhp/hcc.mparkara.com/wp-content/uploads/fusion-icons/ebike-v1.2' # World writeable directory '/home/mpararhp/hcc.mparkara.com/wp-content/uploads/fusionredux' # World writeable directory '/home/mpararhp/hcc.mparkara.com/wp-content/uploads/wc-logs' # World writeable directory '/home/mpararhp/hcc.mparkara.com/wp-content/uploads/woocommerce_uploads' # World writeable directory '/home/mpararhp/hcc.mparkara.com/wp-content/uploads/wpcf7_uploads' # World writeable directory # Scan Timeout (30 secs) while processing: '/home/mpararhp/mail/queensfamilydentistry.ca/info/cur/1645626992.M45337P2461999.premium49.web-hosting.com,S=9763105,W=9890114:2,S' # Scan Timeout (30 secs) while processing: '/home/mpararhp/mail/queensfamilydentistry.ca/info/cur/1677790490.M790516P2945988.business41.web-hosting.com,S=12783134,W=12949305:2,S' # Scan Timeout (30 secs) while processing: '/home/mpararhp/mail/queensfamilydentistry.ca/info/cur/1681848988.M740563P2152343.business41.web-hosting.com,S=12599450,W=12763220:2,S' # Scan Timeout (30 secs) while processing: '/home/mpararhp/mail/queensfamilydentistry.ca/info/cur/1688586628.M377240P3917352.business41.web-hosting.com,S=19906308,W=20232764:2,S' # Scan Timeout (30 secs) while processing: '/home/mpararhp/mail/queensfamilydentistry.ca/info/cur/1700070719.M292379P4048550.business41.web-hosting.com,S=16792412,W=17067849:2,S' # Scan Timeout (30 secs) while processing: '/home/mpararhp/mail/queensfamilydentistry.ca/info/cur/1706733021.M503933P614475.business41.web-hosting.com,S=10681058,W=10819904:2,S' '/home/mpararhp/mydanini.com/wp-includes/.htaccess' # Known exploit = [Fingerprint Match (sha256)] '/home/mpararhp/myjackdanni.com/.well-known/.htaccess' # Known exploit = [Fingerprint Match (sha256)] '/home/mpararhp/myjackdanni.com/wp-admin/.htaccess' # Known exploit = [Fingerprint Match (sha256)] '/home/mpararhp/myjackdanni.com/wp-includes/.htaccess' # Known exploit = [Fingerprint Match (sha256)] '/home/mpararhp/ottlo.mparkara.com/wp-content/plugins/cf7-google-sheets-connector/lib/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php' # Universal decode regex match = [universal decoder] '/home/mpararhp/ottlo.mparkara.com/wp-content/plugins/cf7-google-sheets-connector/lib/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php' # Universal decode regex match = [universal decoder] '/home/mpararhp/ottlo.mparkara.com/wp-content/plugins/forminator/addons/pro/hubspot/class-forminator-addon-hubspot-form-hooks.php' # Universal decode regex match = [universal decoder] '/home/mpararhp/ottlo.mparkara.com/wp-content/plugins/forminator/addons/pro/hubspot/class-forminator-addon-hubspot-quiz-hooks.php' # Universal decode regex match = [universal decoder] '/home/mpararhp/ottlo.mparkara.com/wp-content/plugins/updraftplus/vendor/phpseclib/phpseclib/travis/setup-secure-shell.sh' # Regular expression match = [\n(?!\s*(//|\#|\*)).*\.ssh/] '/home/mpararhp/ottlo.mparkara.com/wp-content/uploads' # World writeable directory '/home/mpararhp/ottlo.mparkara.com/wp-content/uploads/2023' # World writeable directory '/home/mpararhp/ottlo.mparkara.com/wp-content/uploads/2023/01' # World writeable directory '/home/mpararhp/ottlo.mparkara.com/wp-content/uploads/2023/02' # World writeable directory '/home/mpararhp/ottlo.mparkara.com/wp-content/uploads/2023/03' # World writeable directory '/home/mpararhp/ottlo.mparkara.com/wp-content/uploads/2023/04' # World writeable directory '/home/mpararhp/ottlo.mparkara.com/wp-content/uploads/2023/05' # World writeable directory '/home/mpararhp/ottlo.mparkara.com/wp-content/uploads/2023/06' # World writeable directory '/home/mpararhp/ottlo.mparkara.com/wp-content/uploads/2023/07' # World writeable directory '/home/mpararhp/ottlo.mparkara.com/wp-content/uploads/2023/08' # World writeable directory '/home/mpararhp/ottlo.mparkara.com/wp-content/uploads/2023/09' # World writeable directory '/home/mpararhp/ottlo.mparkara.com/wp-content/uploads/2023/10' # World writeable directory '/home/mpararhp/ottlo.mparkara.com/wp-content/uploads/2023/11' # World writeable directory '/home/mpararhp/ottlo.mparkara.com/wp-content/uploads/2023/12' # World writeable directory '/home/mpararhp/ottlo.mparkara.com/wp-content/uploads/2024' # World writeable directory '/home/mpararhp/ottlo.mparkara.com/wp-content/uploads/2024/01' # World writeable directory '/home/mpararhp/ottlo.mparkara.com/wp-content/uploads/2024/02' # World writeable directory '/home/mpararhp/ottlo.mparkara.com/wp-content/uploads/2024/03' # World writeable directory '/home/mpararhp/ottlo.mparkara.com/wp-content/uploads/2024/04' # World writeable directory '/home/mpararhp/ottlo.mparkara.com/wp-content/uploads/2024/05' # World writeable directory '/home/mpararhp/ottlo.mparkara.com/wp-content/uploads/fusionredux' # World writeable directory '/home/mpararhp/ottlo.mparkara.com/wp-content/uploads/revslider' # World writeable directory '/home/mpararhp/ottlo.mparkara.com/wp-content/uploads/revslider/templates' # World writeable directory '/home/mpararhp/ottlo.mparkara.com/wp-content/uploads/wpcf7_uploads' # World writeable directory '/home/mpararhp/ottlo.mparkara.com/wp-content/uploads/wpcode' # World writeable directory '/home/mpararhp/ottlo.mparkara.com/wp-content/uploads/wpcode/cache' # World writeable directory '/home/mpararhp/ottlo.mparkara.com/wp-content/uploads/wpcode/cache/library' # World writeable directory # Scan Timeout (30 secs) while processing: '/home/mpararhp/public_html/wordpress.zip' '/home/mpararhp/public_html/wp-content/plugins/ai-engine/common/admin.php' # Universal decode regex match = [universal decoder] '/home/mpararhp/public_html/wp-content/plugins/cf7-google-sheets-connector/lib/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php' # Universal decode regex match = [universal decoder] '/home/mpararhp/public_html/wp-content/plugins/cf7-google-sheets-connector/lib/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php' # Universal decode regex match = [universal decoder] '/home/mpararhp/public_html/wp-content/plugins/google-calendar-events/includes/post-types.php' # Universal decode regex match = [universal decoder] '/home/mpararhp/public_html/wp-content/plugins/updraftplus/vendor/phpseclib/phpseclib/travis/setup-secure-shell.sh' # Regular expression match = [\n(?!\s*(//|\#|\*)).*\.ssh/] '/home/mpararhp/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php' # Universal decode regex match = [universal decoder] '/home/mpararhp/public_html/wp-content/plugins/woocommerce/packages/woocommerce-admin/src/Features/WcPayWelcomePage.php' # Universal decode regex match = [universal decoder] '/home/mpararhp/public_html/wp-content/plugins/woocommerce/packages/woocommerce-admin/src-internal/Admin/WcPayWelcomePage.php' # Universal decode regex match = [universal decoder] '/home/mpararhp/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php' # Universal decode regex match = [universal decoder] '/home/mpararhp/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c' # Suspicious file type [application/x-c] '/home/mpararhp/public_html/wp-content/updraft/uploads-old/fusion-builder-avada-pages/data.zip' # (compressed file: takeout.php [depth: 1]) Universal decode regex match = [universal decoder] # (compressed file: fitness.php [depth: 1]) Universal decode regex match = [universal decoder] '/home/mpararhp/public_html/wp-content/updraft/uploads-old/fusion-builder-avada-pages/fitness.php' # Universal decode regex match = [universal decoder] '/home/mpararhp/public_html/wp-content/updraft/uploads-old/fusion-builder-avada-pages/lifestyle.php' # Universal decode regex match = [universal decoder] '/home/mpararhp/public_html/wp-content/updraft/uploads-old/fusion-builder-avada-pages/music.php' # Universal decode regex match = [universal decoder] '/home/mpararhp/public_html/wp-content/updraft/uploads-old/fusion-builder-avada-pages/takeout.php' # Universal decode regex match = [universal decoder] '/home/mpararhp/public_html/wp-content/uploads/js_composer' # World writeable directory # Scan Timeout (30 secs) while processing: '/home/mpararhp/queensfamilydentistry.ca_fresh/old.zip' # Scan Timeout (30 secs) while processing: '/home/mpararhp/queensfamilydentistry.ca_fresh/wordpress.zip' '/home/mpararhp/queensfamilydentistry.ca_fresh/wp-content/.htaccess' # Known exploit = [Fingerprint Match (sha256)] '/home/mpararhp/queensfamilydentistry.ca_fresh/wp-content/plugins/coming-soon/app/routes.php' # Universal decode regex match = [universal decoder] '/home/mpararhp/queensfamilydentistry.ca_fresh/wp-content/plugins/duplicator/classes/class.constants.php' # Universal decode regex match = [universal decoder] # Scan Timeout (30 secs) while processing: '/home/mpararhp/queensfamilydentistry.ca_fresh/wp-content/updraft/backup_2022-02-15-1554_Queens_Family_Dentistry_388ff7e79569-themes.zip' # Scan Timeout (30 secs) while processing: '/home/mpararhp/queensfamilydentistry.ca_fresh/wp-content/updraft/backup_2022-03-09-0002_Queens_Family_Dentistry_bc325e12b176-themes.zip' '/home/mpararhp/queensfamilydentistry.ca_fresh/wp-content/uploads/fusion-builder-avada-pages/avada_builder.php' # Universal decode regex match = [universal decoder] '/home/mpararhp/queensfamilydentistry.ca_fresh/wp-content/uploads/fusion-builder-avada-pages/country_butcher.php' # Universal decode regex match = [universal decoder] '/home/mpararhp/queensfamilydentistry.ca_fresh/wp-content/uploads/fusion-builder-avada-pages/digital_agency.php' # Universal decode regex match = [universal decoder] '/home/mpararhp/queensfamilydentistry.ca_fresh/wp-content/uploads/fusion-builder-avada-pages/hotel.php' # Universal decode regex match = [universal decoder] '/home/mpararhp/queensfamilydentistry.ca_fresh/wp-content/uploads/fusion-builder-avada-pages/music.php' # Universal decode regex match = [universal decoder] '/home/mpararhp/queensfamilydentistry.ca_fresh/wp-content/uploads/fusion-builder-avada-pages/plumber.php' # Universal decode regex match = [universal decoder] '/home/mpararhp/queensfamilydentistry.ca_fresh/wp-content/uploads/fusion-builder-avada-pages/retail.php' # Universal decode regex match = [universal decoder] '/home/mpararhp/queensfamilydentistry.ca_fresh/wp-content/uploads/fusion-builder-avada-pages/takeout.php' # Universal decode regex match = [universal decoder] '/home/mpararhp/sewa.mparkara.com/wp-content/plugins/give/includes/misc-functions.php' # Universal decode regex match = [universal decoder] '/home/mpararhp/sewa.mparkara.com/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php' # Universal decode regex match = [universal decoder] '/home/mpararhp/sewa.mparkara.com/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php' # Universal decode regex match = [universal decoder] '/home/mpararhp/sewa.mparkara.com/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c' # Suspicious file type [application/x-c] '/home/mpararhp/sewa.mparkara.com/wp-content/uploads' # World writeable directory '/home/mpararhp/sewa.mparkara.com/wp-content/uploads/2024' # World writeable directory '/home/mpararhp/sewa.mparkara.com/wp-content/uploads/2024/03' # World writeable directory '/home/mpararhp/sewa.mparkara.com/wp-content/uploads/2024/04' # World writeable directory '/home/mpararhp/sewa.mparkara.com/wp-content/uploads/2024/05' # World writeable directory '/home/mpararhp/sewa.mparkara.com/wp-content/uploads/bears-backup' # World writeable directory '/home/mpararhp/sewa.mparkara.com/wp-includes/version.php' # Script version check [OLD] [Wordpress v6.4.4 < v6.5.2] '/home/mpararhp/sikhheritagelondon.ca/wp-content/plugins/give/includes/misc-functions.php' # Universal decode regex match = [universal decoder] '/home/mpararhp/sikhheritagelondon.ca/wp-content/plugins/w3-total-cache/CdnEngine_Ftp.php' # Regular expression match = [\n(?!\s*(//|\#|\*)).*\.ssh/] # Scan Timeout (30 secs) while processing: '/home/mpararhp/sikhheritagelondon.ca/wp-content/updraft/backup_2022-04-07-0153_Sikh_Heritage_London_842b0330193b-themes.zip' # Scan Timeout (30 secs) while processing: '/home/mpararhp/sikhheritagelondon.ca/wp-content/updraft/backup_2023-05-02-0441_Sikh_Heritage_London_926607a72a9a-themes.zip' '/home/mpararhp/srishticanada.mparkara.com/wp-content/plugins/wp-optimize/includes/class-wp-optimize-admin.php' # Universal decode regex match = [universal decoder] '/home/mpararhp/srishticanada.mparkara.com/wp-content/uploads' # World writeable directory '/home/mpararhp/srishticanada.mparkara.com/wp-content/uploads/2023' # World writeable directory '/home/mpararhp/srishticanada.mparkara.com/wp-content/uploads/2023/01' # World writeable directory '/home/mpararhp/srishticanada.mparkara.com/wp-content/uploads/2023/02' # World writeable directory '/home/mpararhp/srishticanada.mparkara.com/wp-content/uploads/2023/03' # World writeable directory '/home/mpararhp/srishticanada.mparkara.com/wp-content/uploads/2023/04' # World writeable directory '/home/mpararhp/srishticanada.mparkara.com/wp-content/uploads/2023/05' # World writeable directory '/home/mpararhp/srishticanada.mparkara.com/wp-content/uploads/2023/06' # World writeable directory '/home/mpararhp/srishticanada.mparkara.com/wp-content/uploads/2023/07' # World writeable directory '/home/mpararhp/srishticanada.mparkara.com/wp-content/uploads/2023/08' # World writeable directory '/home/mpararhp/srishticanada.mparkara.com/wp-content/uploads/2023/09' # World writeable directory '/home/mpararhp/srishticanada.mparkara.com/wp-content/uploads/2023/10' # World writeable directory '/home/mpararhp/srishticanada.mparkara.com/wp-content/uploads/2023/11' # World writeable directory '/home/mpararhp/srishticanada.mparkara.com/wp-content/uploads/2023/12' # World writeable directory '/home/mpararhp/srishticanada.mparkara.com/wp-content/uploads/2024' # World writeable directory '/home/mpararhp/srishticanada.mparkara.com/wp-content/uploads/2024/01' # World writeable directory '/home/mpararhp/srishticanada.mparkara.com/wp-content/uploads/2024/02' # World writeable directory '/home/mpararhp/srishticanada.mparkara.com/wp-content/uploads/2024/03' # World writeable directory '/home/mpararhp/srishticanada.mparkara.com/wp-content/uploads/2024/04' # World writeable directory '/home/mpararhp/srishticanada.mparkara.com/wp-content/uploads/2024/05' # World writeable directory '/home/mpararhp/srishticanada.mparkara.com/wp-content/uploads/fusionredux' # World writeable directory '/home/mpararhp/srishticanada.mparkara.com/wp-content/uploads/layerslider' # World writeable directory '/home/mpararhp/srishticanada.mparkara.com/wp-content/uploads/layerslider/modules' # World writeable directory '/home/mpararhp/srishticanada.mparkara.com/wp-content/uploads/layerslider/projects' # World writeable directory '/home/mpararhp/srishticanada.mparkara.com/wp-content/uploads/revslider' # World writeable directory '/home/mpararhp/srishticanada.mparkara.com/wp-content/uploads/revslider/templates' # World writeable directory '/home/mpararhp/srishticanada.mparkara.com/wp-content/uploads/sb-instagram-feed-images' # World writeable directory '/home/mpararhp/srishticanada.mparkara.com/wp-content/uploads/wpcf7_uploads' # World writeable directory '/home/mpararhp/www.queensfamilydentistry.ca' # Suspicious directory '/home/mpararhp/www.turmericindianeatery.ca' # Suspicious directory '/home/mpararhp/www.turmericindianeatery.ca/wp-content/plugins/advanced-nocaptcha-recaptcha/advanced-nocaptcha-recaptcha.php' # Script version check [OLD] [CAPTCHA 4WP v7.2.3 < v7.4.0] '/home/mpararhp/www.turmericindianeatery.ca/wp-content/plugins/fusion-builder/templates/content/content-templates.php' # Universal decode regex match = [universal decoder] '/home/mpararhp/www.turmericindianeatery.ca/wp-content/plugins/fusion-builder/templates/forms/form-templates.php' # Universal decode regex match = [universal decoder] '/home/mpararhp/www.turmericindianeatery.ca/wp-content/plugins/fusion-builder/templates/post-cards/post-card-templates.php' # Universal decode regex match = [universal decoder] '/home/mpararhp/www.turmericindianeatery.ca/wp-content/plugins/insert-headers-and-footers/ihaf.php' # Script version check [OLD] [WPCode Lite v2.0.13 < v2.1.7] '/home/mpararhp/www.turmericindianeatery.ca/wp-content/plugins/litespeed-cache/litespeed-cache.php' # Script version check [OLD] [LiteSpeed Cache v5.5 < v6.0.0.1] '/home/mpararhp/www.turmericindianeatery.ca/wp-includes/version.php' # Script version check [OLD] [Wordpress v6.2.5 < v6.5.2] ----------- SCAN SUMMARY ----------- Scanned directories: 41222 Scanned files: 386221 Ignored items: 1396 Suspicious matches: 172 Viruses found: 0 Fingerprint matches: 6 Data scanned: 22604.31 MB Scan peak memory: 419492 kB Scan time/item: 0.063 sec Scan time: 26761.430 sec
| Name | Type | Size | Permission | Actions |
|---|---|---|---|---|
| .cagefs | Folder | 0771 |
|
|
| .caldav | Folder | 0755 |
|
|
| .cl.selector | Folder | 0755 |
|
|
| .clwpos | Folder | 0700 |
|
|
| .cpanel | Folder | 0700 |
|
|
| .cphorde | Folder | 0700 |
|
|
| .ftp-scan | Folder | 0775 |
|
|
| .htpasswds | Folder | 0750 |
|
|
| .nc_plugin | Folder | 0711 |
|
|
| .pki | Folder | 0740 |
|
|
| .razor | Folder | 0755 |
|
|
| .softaculous | Folder | 0711 |
|
|
| .spamassassin | Folder | 0700 |
|
|
| .sqmailattach | Folder | 0700 |
|
|
| .sqmaildata | Folder | 0700 |
|
|
| .subaccounts | Folder | 0700 |
|
|
| .system-php | Folder | 0755 |
|
|
| .trash | Folder | 0700 |
|
|
| .wp-cli | Folder | 0775 |
|
|
| 11queensfamilydentistry.ca | Folder | 0755 |
|
|
| Domains | Folder | 0755 |
|
|
| access-logs | Folder | 0750 |
|
|
| bin | Folder | 0755 |
|
|
| cache | Folder | 0755 |
|
|
| cgi-bin | Folder | 0755 |
|
|
| etc | Folder | 0750 |
|
|
| gbiproperties.ca | Folder | 0750 |
|
|
| hachiai.mparkara.com | Folder | 0750 |
|
|
| hccold.mparkara.com | Folder | 0750 |
|
|
| invisalign.queensfamilydentistry.ca | Folder | 0750 |
|
|
| ishitexinc.com | Folder | 0750 |
|
|
| lifebuild.mparkara.com | Folder | 0750 |
|
|
| logs | Folder | 0700 |
|
|
| lscache | Folder | 2770 |
|
|
| lscmData | Folder | 0700 |
|
|
| Folder | 0751 |
|
||
| milind.mparkara.com | Folder | 0750 |
|
|
| mobileanesthesia.mparkara.com | Folder | 0750 |
|
|
| mparkaraonline.ca | Folder | 0750 |
|
|
| myjackdanni.com | Folder | 0750 |
|
|
| newpatient.queensfamilydentistry.ca | Folder | 0750 |
|
|
| ottlo.mparkara.com | Folder | 0750 |
|
|
| perl5 | Folder | 0775 |
|
|
| php | Folder | 0755 |
|
|
| public_ftp | Folder | 0750 |
|
|
| public_html | Folder | 0750 |
|
|
| quarantine_clamavconnector | Folder | 0700 |
|
|
| queensfamilydentistry.ca | Folder | 0755 |
|
|
| queensfamilydentistry.ca_fresh | Folder | 0750 |
|
|
| rajaniskinclinic | Folder | 0755 |
|
|
| sikhheritagelondon.ca | Folder | 0777 |
|
|
| softaculous_backups | Folder | 0711 |
|
|
| ssl | Folder | 0755 |
|
|
| tmp | Folder | 0755 |
|
|
| transfer | Folder | 0755 |
|
|
| vardan.mparkara.com | Folder | 0750 |
|
|
| vardandentalstudio.com | Folder | 0750 |
|
|
| vardandentalstudio.in | Folder | 0750 |
|
|
| world.mparkara.com | Folder | 0750 |
|
|
| www | Folder | 0750 |
|
|
| www.queensfamilydentistry.ca | Folder | 0750 |
|
|
| www.turmericindianeatery.ca | Folder | 0750 |
|
|
| .bash_history | File | 637 B | 0600 |
|
| .bash_logout | File | 18 B | 0644 |
|
| .bash_profile | File | 176 B | 0644 |
|
| .bashrc | File | 124 B | 0644 |
|
| .clamavconnector.pid | File | 7 B | 0644 |
|
| .clamavconnector.status | File | 173 B | 0644 |
|
| .contactemail | File | 19 B | 0600 |
|
| .dns | File | 12 B | 0664 |
|
| .ftpquota | File | 19 B | 0600 |
|
| .gemrc | File | 140 B | 0644 |
|
| .htaccess1 | File | 76 B | 0644 |
|
| .imunify_patch_id | File | 106 B | 0660 |
|
| .last.inodes | File | 12.26 KB | 0644 |
|
| .lastlogin | File | 573 B | 0600 |
|
| .myimunify_id | File | 102 B | 0660 |
|
| .pearrc | File | 607 B | 0644 |
|
| .spamassassinboxenable | File | 0 B | 0644 |
|
| .spamassassinenable | File | 0 B | 0644 |
|
| .viminfo | File | 578 B | 0600 |
|
| .wget-hsts | File | 172 B | 0644 |
|
| .zshrc | File | 658 B | 0644 |
|
| anniversaryReminder | File | 645.45 KB | 0644 |
|
| anniversaryReminder.1 | File | 651.55 KB | 0644 |
|
| anniversaryReminder.10 | File | 651.79 KB | 0644 |
|
| anniversaryReminder.11 | File | 651.8 KB | 0644 |
|
| anniversaryReminder.12 | File | 651.63 KB | 0644 |
|
| anniversaryReminder.13 | File | 651.63 KB | 0644 |
|
| anniversaryReminder.14 | File | 651.81 KB | 0644 |
|
| anniversaryReminder.15 | File | 651.52 KB | 0644 |
|
| anniversaryReminder.16 | File | 651.36 KB | 0644 |
|
| anniversaryReminder.17 | File | 651.35 KB | 0644 |
|
| anniversaryReminder.18 | File | 651.36 KB | 0644 |
|
| anniversaryReminder.19 | File | 651.37 KB | 0644 |
|
| anniversaryReminder.2 | File | 651.55 KB | 0644 |
|
| anniversaryReminder.20 | File | 651.38 KB | 0644 |
|
| anniversaryReminder.21 | File | 651.53 KB | 0644 |
|
| anniversaryReminder.22 | File | 651.54 KB | 0644 |
|
| anniversaryReminder.23 | File | 651.36 KB | 0644 |
|
| anniversaryReminder.24 | File | 651.37 KB | 0644 |
|
| anniversaryReminder.25 | File | 651.18 KB | 0644 |
|
| anniversaryReminder.26 | File | 651.2 KB | 0644 |
|
| anniversaryReminder.27 | File | 651.18 KB | 0644 |
|
| anniversaryReminder.28 | File | 651.19 KB | 0644 |
|
| anniversaryReminder.29 | File | 651.35 KB | 0644 |
|
| anniversaryReminder.3 | File | 651.38 KB | 0644 |
|
| anniversaryReminder.30 | File | 651.35 KB | 0644 |
|
| anniversaryReminder.31 | File | 651.34 KB | 0644 |
|
| anniversaryReminder.32 | File | 651.34 KB | 0644 |
|
| anniversaryReminder.33 | File | 651.35 KB | 0644 |
|
| anniversaryReminder.34 | File | 651.37 KB | 0644 |
|
| anniversaryReminder.35 | File | 651.36 KB | 0644 |
|
| anniversaryReminder.36 | File | 651.75 KB | 0644 |
|
| anniversaryReminder.37 | File | 651.6 KB | 0644 |
|
| anniversaryReminder.38 | File | 651.58 KB | 0644 |
|
| anniversaryReminder.39 | File | 651.75 KB | 0644 |
|
| anniversaryReminder.4 | File | 651.55 KB | 0644 |
|
| anniversaryReminder.40 | File | 651.77 KB | 0644 |
|
| anniversaryReminder.41 | File | 651.75 KB | 0644 |
|
| anniversaryReminder.5 | File | 651.54 KB | 0644 |
|
| anniversaryReminder.6 | File | 651.54 KB | 0644 |
|
| anniversaryReminder.7 | File | 651.53 KB | 0644 |
|
| anniversaryReminder.8 | File | 651.79 KB | 0644 |
|
| anniversaryReminder.9 | File | 651.65 KB | 0644 |
|
| birthdayReminder | File | 645.44 KB | 0644 |
|
| birthdayReminder.1 | File | 651.55 KB | 0644 |
|
| birthdayReminder.10 | File | 651.82 KB | 0644 |
|
| birthdayReminder.11 | File | 651.8 KB | 0644 |
|
| birthdayReminder.12 | File | 651.65 KB | 0644 |
|
| birthdayReminder.13 | File | 651.63 KB | 0644 |
|
| birthdayReminder.14 | File | 651.8 KB | 0644 |
|
| birthdayReminder.15 | File | 651.52 KB | 0644 |
|
| birthdayReminder.16 | File | 651.36 KB | 0644 |
|
| birthdayReminder.17 | File | 651.36 KB | 0644 |
|
| birthdayReminder.18 | File | 651.37 KB | 0644 |
|
| birthdayReminder.19 | File | 651.37 KB | 0644 |
|
| birthdayReminder.2 | File | 651.55 KB | 0644 |
|
| birthdayReminder.20 | File | 651.37 KB | 0644 |
|
| birthdayReminder.21 | File | 651.53 KB | 0644 |
|
| birthdayReminder.22 | File | 651.54 KB | 0644 |
|
| birthdayReminder.23 | File | 651.37 KB | 0644 |
|
| birthdayReminder.24 | File | 651.38 KB | 0644 |
|
| birthdayReminder.25 | File | 651.18 KB | 0644 |
|
| birthdayReminder.26 | File | 651.18 KB | 0644 |
|
| birthdayReminder.27 | File | 651.18 KB | 0644 |
|
| birthdayReminder.28 | File | 651.19 KB | 0644 |
|
| birthdayReminder.29 | File | 651.37 KB | 0644 |
|
| birthdayReminder.3 | File | 651.38 KB | 0644 |
|
| birthdayReminder.30 | File | 651.36 KB | 0644 |
|
| birthdayReminder.31 | File | 651.34 KB | 0644 |
|
| birthdayReminder.32 | File | 651.35 KB | 0644 |
|
| birthdayReminder.33 | File | 651.35 KB | 0644 |
|
| birthdayReminder.34 | File | 651.37 KB | 0644 |
|
| birthdayReminder.35 | File | 651.34 KB | 0644 |
|
| birthdayReminder.36 | File | 651.75 KB | 0644 |
|
| birthdayReminder.37 | File | 651.61 KB | 0644 |
|
| birthdayReminder.38 | File | 651.6 KB | 0644 |
|
| birthdayReminder.39 | File | 651.75 KB | 0644 |
|
| birthdayReminder.4 | File | 651.55 KB | 0644 |
|
| birthdayReminder.40 | File | 651.76 KB | 0644 |
|
| birthdayReminder.41 | File | 651.75 KB | 0644 |
|
| birthdayReminder.5 | File | 651.54 KB | 0644 |
|
| birthdayReminder.6 | File | 651.54 KB | 0644 |
|
| birthdayReminder.7 | File | 651.53 KB | 0644 |
|
| birthdayReminder.8 | File | 651.79 KB | 0644 |
|
| birthdayReminder.9 | File | 651.63 KB | 0644 |
|
| cpbackup-exclude.conf | File | 1 B | 0640 |
|
| scanreport--Feb_06_2021_07h31m.txt | File | 5.33 KB | 0644 |
|
| scanreport-mpararhp-Feb_06_2021_08h22m.txt | File | 3.17 KB | 0644 |
|
| scanreport-mpararhp-May072024_00h16m.txt | File | 23.57 KB | 0644 |
|
| scanreport-mpararhp-May_28_2024_14h35m.txt | File | 25.49 KB | 0644 |
|
| scanreport-mytophpk-Feb_03_2021_08h31m.txt | File | 58.52 KB | 0644 |
|