----------- SCAN REPORT -----------
TimeStamp: Wed, 3 Feb 2021 08:31:01 -0500
(/usr/sbin/cxs --background --nobayes --clamdsock /var/clamd --dbreport --defapache nobody --doptions Mv --exploitscan --nofallback --filemax 50000 --noforce --html --ignore /etc/cxs/cxs.ignore.manual --options mMOLfSGchexdnwZDRru --qoptions Mv --report /home/mpararhp/scanreport-mytophpk-Feb_03_2021_08h31m.txt --sizemax 1000000 --ssl --summary --sversionscan --timemax 30 --unofficial --user mpararhp --virusscan --vmrssmax 2000000 --xtra /etc/cxs/cxs.xtra.manual)
Scanning /home/mpararhp:
'/home/mpararhp/access-logs'
# Symlink to [/usr/local/apache/domlogs/mpararhp]
'/home/mpararhp/.nc_plugin/hidden'
# World writeable directory
'/home/mpararhp/etc/burritoguyz.ca/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/burritoguyz.ca/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/burritoguyz.ca/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/burritoguyz.ca/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/burritoguyz.ca/@pwcache/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/burritoguyz.ca/@pwcache/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/burritoguyz.ca/@pwcache/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/burritoguyz.ca/@pwcache/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/dqfanfood.ca/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/dqfanfood.ca/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/dqfanfood.ca/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/dqfanfood.ca/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/dqfanfood.ca/@pwcache/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/dqfanfood.ca/@pwcache/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/dqfanfood.ca/@pwcache/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/dqfanfood.ca/@pwcache/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/dqfanfood.com/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/dqfanfood.com/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/dqfanfood.com/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/dqfanfood.com/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/dqfanfood.com/@pwcache/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/dqfanfood.com/@pwcache/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/dqfanfood.com/@pwcache/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/dqfanfood.com/@pwcache/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/dqlove.ca/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/dqlove.ca/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/dqlove.ca/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/dqlove.ca/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/dqlove.ca/@pwcache/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/dqlove.ca/@pwcache/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/dqlove.ca/@pwcache/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/dqlove.ca/@pwcache/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/ishitexinc.com/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/ishitexinc.com/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/ishitexinc.com/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/ishitexinc.com/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/ishitexinc.com/@pwcache/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/ishitexinc.com/@pwcache/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/ishitexinc.com/@pwcache/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/ishitexinc.com/@pwcache/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/mparkara.com/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/mparkara.com/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/mparkara.com/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/mparkara.com/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/mparkara.com/@pwcache/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/mparkara.com/@pwcache/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/mparkara.com/@pwcache/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/mparkara.com/@pwcache/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/mydanini.com/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/mydanini.com/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/mydanini.com/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/mydanini.com/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/mydanini.com/@pwcache/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/mydanini.com/@pwcache/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/mydanini.com/@pwcache/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/mydanini.com/@pwcache/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/myjackdanni.com/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/myjackdanni.com/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/myjackdanni.com/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/myjackdanni.com/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/myjackdanni.com/@pwcache/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/myjackdanni.com/@pwcache/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/myjackdanni.com/@pwcache/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/myjackdanni.com/@pwcache/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/neerjasethi.ca/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/neerjasethi.ca/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/neerjasethi.ca/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/neerjasethi.ca/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/neerjasethi.ca/@pwcache/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/neerjasethi.ca/@pwcache/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/neerjasethi.ca/@pwcache/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/neerjasethi.ca/@pwcache/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/pinkalfootcareclinic.ca/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/pinkalfootcareclinic.ca/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/pinkalfootcareclinic.ca/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/pinkalfootcareclinic.ca/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/pinkalfootcareclinic.ca/@pwcache/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/pinkalfootcareclinic.ca/@pwcache/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/pinkalfootcareclinic.ca/@pwcache/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/pinkalfootcareclinic.ca/@pwcache/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/pureglo.ca/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/pureglo.ca/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/pureglo.ca/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/pureglo.ca/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/pureglo.ca/@pwcache/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/pureglo.ca/@pwcache/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/pureglo.ca/@pwcache/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/pureglo.ca/@pwcache/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/pureglo.ca/info/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/pureglo.ca/info/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/pureglo.ca/info/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/pureglo.ca/info/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/queensfamilydentistry.ca/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/queensfamilydentistry.ca/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/queensfamilydentistry.ca/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/queensfamilydentistry.ca/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/queensfamilydentistry.ca/@pwcache/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/queensfamilydentistry.ca/@pwcache/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/queensfamilydentistry.ca/@pwcache/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/queensfamilydentistry.ca/@pwcache/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/turmericindianeatery.ca/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/turmericindianeatery.ca/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/turmericindianeatery.ca/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/turmericindianeatery.ca/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/turmericindianeatery.ca/@pwcache/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/turmericindianeatery.ca/@pwcache/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/turmericindianeatery.ca/@pwcache/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/turmericindianeatery.ca/@pwcache/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/turmericindianeatery.ca/info/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/turmericindianeatery.ca/info/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/turmericindianeatery.ca/info/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/etc/turmericindianeatery.ca/info/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/logs/gbiproperties.mparkara.com-Jan-2021.gz'
# ClamAV detected virus = [{HEX}php.malware.magento.585.UNOFFICIAL]
'/home/mpararhp/logs/ishitexinc.mparkara.com-Jan-2021.gz'
# ClamAV detected virus = [{HEX}php.malware.magento.585.UNOFFICIAL]
'/home/mpararhp/logs/myjackdanni.mparkara.com-Jan-2021.gz'
# ClamAV detected virus = [{HEX}php.malware.magento.585.UNOFFICIAL]
'/home/mpararhp/logs/sikhheritagelondon.mparkara.com-Jan-2021.gz'
# ClamAV detected virus = [{HEX}php.malware.magento.585.UNOFFICIAL]
'/home/mpararhp/mail/burritoguyz.ca/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/burritoguyz.ca/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/burritoguyz.ca/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/burritoguyz.ca/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/dqfanfood.ca/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/dqfanfood.ca/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/dqfanfood.ca/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/dqfanfood.ca/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/dqfanfood.ca/dqwellington/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/dqfanfood.ca/dqwellington/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/dqfanfood.ca/dqwellington/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/dqfanfood.ca/dqwellington/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/dqfanfood.com/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/dqfanfood.com/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/dqfanfood.com/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/dqfanfood.com/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/dqfanfood.com/dqwellington/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/dqfanfood.com/dqwellington/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/dqfanfood.com/dqwellington/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/dqfanfood.com/dqwellington/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/dqlove.ca/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/dqlove.ca/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/dqlove.ca/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/dqlove.ca/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/dqlove.ca/greetings/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/dqlove.ca/greetings/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/dqlove.ca/greetings/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/dqlove.ca/greetings/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/ishitexinc.com/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/ishitexinc.com/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/ishitexinc.com/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/ishitexinc.com/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/ishitexinc.com/info/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/ishitexinc.com/info/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/ishitexinc.com/info/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/ishitexinc.com/info/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/ishitexinc.com/jacky/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/ishitexinc.com/jacky/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/ishitexinc.com/jacky/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/ishitexinc.com/jacky/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/ishitexinc.com/larry/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/ishitexinc.com/larry/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/ishitexinc.com/larry/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/ishitexinc.com/larry/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/mparkara.com/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/mparkara.com/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/mparkara.com/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/mparkara.com/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/mparkara.com/burritoguyz/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/mparkara.com/burritoguyz/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/mparkara.com/burritoguyz/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/mparkara.com/burritoguyz/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/mparkara.com/info/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/mparkara.com/info/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/mparkara.com/info/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/mparkara.com/info/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/mparkara.com/juiceandscoop/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/mparkara.com/juiceandscoop/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/mparkara.com/juiceandscoop/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/mparkara.com/juiceandscoop/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/mydanini.com/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/mydanini.com/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/mydanini.com/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/mydanini.com/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/mydanini.com/admin/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/mydanini.com/admin/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/mydanini.com/admin/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/mydanini.com/admin/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/mydanini.com/info/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/mydanini.com/info/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/mydanini.com/info/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/mydanini.com/info/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/myjackdanni.com/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/myjackdanni.com/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/myjackdanni.com/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/myjackdanni.com/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/myjackdanni.com/admin/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/myjackdanni.com/admin/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/myjackdanni.com/admin/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/myjackdanni.com/admin/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/neerjasethi.ca/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/neerjasethi.ca/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/neerjasethi.ca/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/neerjasethi.ca/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/neerjasethi.ca/info/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/neerjasethi.ca/info/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/neerjasethi.ca/info/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/neerjasethi.ca/info/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/pinkalfootcareclinic.ca/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/pinkalfootcareclinic.ca/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/pinkalfootcareclinic.ca/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/pinkalfootcareclinic.ca/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/pinkalfootcareclinic.ca/info/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/pinkalfootcareclinic.ca/info/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/pinkalfootcareclinic.ca/info/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/pinkalfootcareclinic.ca/info/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/pureglo.ca/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/pureglo.ca/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/pureglo.ca/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/pureglo.ca/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/pureglo.ca/info/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/pureglo.ca/info/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/pureglo.ca/info/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/pureglo.ca/info/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/queensfamilydentistry.ca/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/queensfamilydentistry.ca/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/queensfamilydentistry.ca/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/queensfamilydentistry.ca/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/queensfamilydentistry.ca/admin/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/queensfamilydentistry.ca/admin/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/queensfamilydentistry.ca/admin/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/queensfamilydentistry.ca/admin/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/queensfamilydentistry.ca/drpatel/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/queensfamilydentistry.ca/drpatel/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/queensfamilydentistry.ca/drpatel/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/queensfamilydentistry.ca/drpatel/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/queensfamilydentistry.ca/info/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/queensfamilydentistry.ca/info/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/queensfamilydentistry.ca/info/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/queensfamilydentistry.ca/info/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
# Scan Timeout (30 secs) while processing:
'/home/mpararhp/mail/queensfamilydentistry.ca/info/cur/1575425911.M762663P438806.premium49.web-hosting.com,S=7211459,W=7305231:2,S'
# Scan Timeout (30 secs) while processing:
'/home/mpararhp/mail/queensfamilydentistry.ca/info/cur/1600209985.M79790P917634.premium49.web-hosting.com,S=5369219,W=5439065:2,S'
'/home/mpararhp/mail/queensfamilydentistry.ca/victoria/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/queensfamilydentistry.ca/victoria/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/queensfamilydentistry.ca/victoria/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/queensfamilydentistry.ca/victoria/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/turmericindianeatery.ca/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/turmericindianeatery.ca/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/turmericindianeatery.ca/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/turmericindianeatery.ca/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/turmericindianeatery.ca/bg/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/turmericindianeatery.ca/bg/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/turmericindianeatery.ca/bg/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/turmericindianeatery.ca/bg/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/turmericindianeatery.ca/info/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/turmericindianeatery.ca/info/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/turmericindianeatery.ca/info/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/turmericindianeatery.ca/info/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/turmericindianeatery.ca/office/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/turmericindianeatery.ca/office/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/turmericindianeatery.ca/office/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mail/turmericindianeatery.ca/office/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/mydanini.com/wp-content/ewww/gifsicle'
# Linux Binary/Executable [application/x-executable]
'/home/mpararhp/mydanini.com/wp-content/ewww/jpegtran'
# Linux Binary/Executable [application/x-executable]
'/home/mpararhp/mydanini.com/wp-content/ewww/optipng'
# Linux Binary/Executable [application/x-executable]
'/home/mpararhp/mydanini.com/wp-content/ewww-old/gifsicle'
# Linux Binary/Executable [application/x-executable]
'/home/mpararhp/mydanini.com/wp-content/ewww-old/jpegtran'
# Linux Binary/Executable [application/x-executable]
'/home/mpararhp/mydanini.com/wp-content/ewww-old/optipng'
# Linux Binary/Executable [application/x-executable]
'/home/mpararhp/mydanini.com/wp-content/plugins/ewww-image-optimizer/binaries/cwebp-fbsd'
# Linux Binary/Executable [application/x-executable]
'/home/mpararhp/mydanini.com/wp-content/plugins/ewww-image-optimizer/binaries/cwebp-linux'
# Linux Binary/Executable [application/x-executable]
'/home/mpararhp/mydanini.com/wp-content/plugins/ewww-image-optimizer/binaries/cwebp-sol'
# Linux Binary/Executable [application/x-executable]
'/home/mpararhp/mydanini.com/wp-content/plugins/ewww-image-optimizer/binaries/cwebp.exe'
# MS Windows Binary/Executable [application/x-winexec]
'/home/mpararhp/mydanini.com/wp-content/plugins/ewww-image-optimizer/binaries/gifsicle-fbsd'
# Linux Binary/Executable [application/x-executable]
'/home/mpararhp/mydanini.com/wp-content/plugins/ewww-image-optimizer/binaries/gifsicle-linux'
# Linux Binary/Executable [application/x-executable]
'/home/mpararhp/mydanini.com/wp-content/plugins/ewww-image-optimizer/binaries/gifsicle-sol'
# Linux Binary/Executable [application/x-executable]
'/home/mpararhp/mydanini.com/wp-content/plugins/ewww-image-optimizer/binaries/gifsicle.exe'
# MS Windows Binary/Executable [application/x-winexec]
'/home/mpararhp/mydanini.com/wp-content/plugins/ewww-image-optimizer/binaries/jpegtran-fbsd'
# Linux Binary/Executable [application/x-executable]
'/home/mpararhp/mydanini.com/wp-content/plugins/ewww-image-optimizer/binaries/jpegtran-linux'
# Linux Binary/Executable [application/x-executable]
'/home/mpararhp/mydanini.com/wp-content/plugins/ewww-image-optimizer/binaries/jpegtran-sol'
# Linux Binary/Executable [application/x-executable]
'/home/mpararhp/mydanini.com/wp-content/plugins/ewww-image-optimizer/binaries/jpegtran.exe'
# MS Windows Binary/Executable [application/x-winexec]
'/home/mpararhp/mydanini.com/wp-content/plugins/ewww-image-optimizer/binaries/optipng-fbsd'
# Linux Binary/Executable [application/x-executable]
'/home/mpararhp/mydanini.com/wp-content/plugins/ewww-image-optimizer/binaries/optipng-linux'
# Linux Binary/Executable [application/x-executable]
'/home/mpararhp/mydanini.com/wp-content/plugins/ewww-image-optimizer/binaries/optipng-sol'
# Linux Binary/Executable [application/x-executable]
'/home/mpararhp/mydanini.com/wp-content/plugins/ewww-image-optimizer/binaries/optipng.exe'
# MS Windows Binary/Executable [application/x-winexec]
'/home/mpararhp/mydanini.com/wp-content/plugins/ewww-image-optimizer/binaries/pngquant-fbsd'
# Linux Binary/Executable [application/x-executable]
'/home/mpararhp/mydanini.com/wp-content/plugins/ewww-image-optimizer/binaries/pngquant-linux'
# Linux Binary/Executable [application/x-executable]
'/home/mpararhp/mydanini.com/wp-content/plugins/ewww-image-optimizer/binaries/pngquant-sol'
# Linux Binary/Executable [application/x-executable]
'/home/mpararhp/mydanini.com/wp-content/plugins/ewww-image-optimizer/binaries/pngquant.exe'
# MS Windows Binary/Executable [application/x-winexec]
'/home/mpararhp/mydanini.com/wp-content/plugins/fusion-builder/templates/content/content-templates.php'
# Universal decode regex match = [universal decoder]
'/home/mpararhp/mydanini.com/wp-content/plugins/woo-multi-currency/frontend/price.php'
# Regular expression match = [\*[A-Za-z0-9]{12,130}\*]
'/home/mpararhp/mydanini.com/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'
# Suspicious file type [application/x-c]
'/home/mpararhp/mydanini.com/wp-content/updraft/plugins-old/ewww-image-optimizer/binaries/cwebp-fbsd'
# Linux Binary/Executable [application/x-executable]
'/home/mpararhp/mydanini.com/wp-content/updraft/plugins-old/ewww-image-optimizer/binaries/cwebp-linux'
# Linux Binary/Executable [application/x-executable]
'/home/mpararhp/mydanini.com/wp-content/updraft/plugins-old/ewww-image-optimizer/binaries/cwebp-sol'
# Linux Binary/Executable [application/x-executable]
'/home/mpararhp/mydanini.com/wp-content/updraft/plugins-old/ewww-image-optimizer/binaries/cwebp.exe'
# MS Windows Binary/Executable [application/x-winexec]
'/home/mpararhp/mydanini.com/wp-content/updraft/plugins-old/ewww-image-optimizer/binaries/gifsicle-fbsd'
# Linux Binary/Executable [application/x-executable]
'/home/mpararhp/mydanini.com/wp-content/updraft/plugins-old/ewww-image-optimizer/binaries/gifsicle-linux'
# Linux Binary/Executable [application/x-executable]
'/home/mpararhp/mydanini.com/wp-content/updraft/plugins-old/ewww-image-optimizer/binaries/gifsicle-sol'
# Linux Binary/Executable [application/x-executable]
'/home/mpararhp/mydanini.com/wp-content/updraft/plugins-old/ewww-image-optimizer/binaries/gifsicle.exe'
# MS Windows Binary/Executable [application/x-winexec]
'/home/mpararhp/mydanini.com/wp-content/updraft/plugins-old/ewww-image-optimizer/binaries/jpegtran-fbsd'
# Linux Binary/Executable [application/x-executable]
'/home/mpararhp/mydanini.com/wp-content/updraft/plugins-old/ewww-image-optimizer/binaries/jpegtran-linux'
# Linux Binary/Executable [application/x-executable]
'/home/mpararhp/mydanini.com/wp-content/updraft/plugins-old/ewww-image-optimizer/binaries/jpegtran-sol'
# Linux Binary/Executable [application/x-executable]
'/home/mpararhp/mydanini.com/wp-content/updraft/plugins-old/ewww-image-optimizer/binaries/jpegtran.exe'
# MS Windows Binary/Executable [application/x-winexec]
'/home/mpararhp/mydanini.com/wp-content/updraft/plugins-old/ewww-image-optimizer/binaries/optipng-fbsd'
# Linux Binary/Executable [application/x-executable]
'/home/mpararhp/mydanini.com/wp-content/updraft/plugins-old/ewww-image-optimizer/binaries/optipng-linux'
# Linux Binary/Executable [application/x-executable]
'/home/mpararhp/mydanini.com/wp-content/updraft/plugins-old/ewww-image-optimizer/binaries/optipng-sol'
# Linux Binary/Executable [application/x-executable]
'/home/mpararhp/mydanini.com/wp-content/updraft/plugins-old/ewww-image-optimizer/binaries/optipng.exe'
# MS Windows Binary/Executable [application/x-winexec]
'/home/mpararhp/mydanini.com/wp-content/updraft/plugins-old/ewww-image-optimizer/binaries/pngquant-fbsd'
# Linux Binary/Executable [application/x-executable]
'/home/mpararhp/mydanini.com/wp-content/updraft/plugins-old/ewww-image-optimizer/binaries/pngquant-linux'
# Linux Binary/Executable [application/x-executable]
'/home/mpararhp/mydanini.com/wp-content/updraft/plugins-old/ewww-image-optimizer/binaries/pngquant-sol'
# Linux Binary/Executable [application/x-executable]
'/home/mpararhp/mydanini.com/wp-content/updraft/plugins-old/ewww-image-optimizer/binaries/pngquant.exe'
# MS Windows Binary/Executable [application/x-winexec]
'/home/mpararhp/mydanini.com/wp-content/updraft/plugins-old/google-site-kit/includes/Core/Assets/Assets.php'
# Regular expression match = [\*[A-Za-z0-9]{12,130}\*]
'/home/mpararhp/mydanini.com/wp-content/updraft/plugins-old/w3-total-cache/CdnEngine_Ftp.php'
# Regular expression match = [\n(?!\s*(//|\#|\*)).*\.ssh/]
'/home/mpararhp/mydanini.com/wp-content/updraft/plugins-old/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'
# Suspicious file type [application/x-c]
'/home/mpararhp/myjackdanni.com/windex.php'
# Decode regex match = [decode regex: 1]
# (decoded file [depth: 1]) Decode regex match = [decode regex: 1]
'/home/mpararhp/myjackdanni.com/.quarantine/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/myjackdanni.com/.quarantine/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/myjackdanni.com/.quarantine/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/myjackdanni.com/.quarantine/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/myjackdanni.com/.tmb'
# World writeable directory
'/home/mpararhp/myjackdanni.com/.tmb/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/myjackdanni.com/.tmb/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/myjackdanni.com/.tmb/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/myjackdanni.com/.tmb/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/myjackdanni.com/.well-known/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/myjackdanni.com/.well-known/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/myjackdanni.com/.well-known/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/myjackdanni.com/.well-known/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/myjackdanni.com/wp-admin/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/myjackdanni.com/wp-admin/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/myjackdanni.com/wp-admin/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/myjackdanni.com/wp-admin/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/myjackdanni.com/wp-admin/css/colors/blue/index.php'
# Universal decode regex match = [universal decoder]
'/home/mpararhp/myjackdanni.com/wp-content/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/myjackdanni.com/wp-content/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/myjackdanni.com/wp-content/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/myjackdanni.com/wp-content/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/myjackdanni.com/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'
# Suspicious file type [application/x-c]
'/home/mpararhp/myjackdanni.com/wp-includes/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/myjackdanni.com/wp-includes/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/myjackdanni.com/wp-includes/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/myjackdanni.com/wp-includes/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/neerjasethi.ca/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/neerjasethi.ca/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/neerjasethi.ca/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/neerjasethi.ca/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/neerjasethi.ca/cgi-bin/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/neerjasethi.ca/cgi-bin/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/neerjasethi.ca/cgi-bin/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/neerjasethi.ca/cgi-bin/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/pinkalhealth.com/windex.php'
# Decode regex match = [decode regex: 1]
# (decoded file [depth: 1]) Decode regex match = [decode regex: 1]
'/home/mpararhp/pinkalhealth.com/old/aopdgi.php'
# Universal decode regex match = [universal decoder]
# (decoded file [advanced decoder: 14 (depth: 3)]) ClamAV detected virus = [YARA.multiple_php_webshells.UNOFFICIAL]
'/home/mpararhp/pinkalhealth.com/old/daxsbfbcat.php'
# Regular expression match = [\*[A-Za-z0-9]{12,130}\*]
'/home/mpararhp/pinkalhealth.com/old/fcohth.php'
# (decoded file [advanced decoder: 14 (depth: 3)]) ClamAV detected virus = [{HEX}php.cmdshell.generic.276.UNOFFICIAL]
'/home/mpararhp/pinkalhealth.com/old/windex.php'
# Decode regex match = [decode regex: 1]
# (decoded file [depth: 1]) Decode regex match = [decode regex: 1]
'/home/mpararhp/pinkalhealth.com/old/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/pinkalhealth.com/old/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/pinkalhealth.com/old/.well-known/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/pinkalhealth.com/old/.well-known/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/pinkalhealth.com/old/.well-known/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/pinkalhealth.com/old/.well-known/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/pinkalhealth.com/old/cgi-bin/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/pinkalhealth.com/old/cgi-bin/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/pinkalhealth.com/old/cgi-bin/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/pinkalhealth.com/old/cgi-bin/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/pinkalhealth.com/old/wp-admin/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/pinkalhealth.com/old/wp-admin/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/pinkalhealth.com/old/wp-admin/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/pinkalhealth.com/old/wp-admin/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/pinkalhealth.com/old/wp-admin/images/align-lefts.png'
# Suspicious image file (hidden script file)
'/home/mpararhp/pinkalhealth.com/old/wp-includes/aopdgi.php'
# Universal decode regex match = [universal decoder]
# (decoded file [advanced decoder: 14 (depth: 3)]) ClamAV detected virus = [YARA.multiple_php_webshells.UNOFFICIAL]
'/home/mpararhp/pinkalhealth.com/old/wp-includes/fcohth.php'
# (decoded file [advanced decoder: 14 (depth: 3)]) ClamAV detected virus = [{HEX}php.cmdshell.generic.276.UNOFFICIAL]
'/home/mpararhp/pinkalhealth.com/old/wp-includes/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/pinkalhealth.com/old/wp-includes/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/pinkalhealth.com/old/wp-includes/version.php'
# Script version check [OLD] [Wordpress v5.2.9 < v5.6]
'/home/mpararhp/pinkalhealth.com/old/wp-includes/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/pinkalhealth.com/old/wp-includes/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/pinkalhealth.com/old/wp-includes/images/smilies/icon_reds.gif'
# Suspicious image file (hidden script file)
'/home/mpararhp/pinkalhealth.com/old/wp-snapshots/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/pinkalhealth.com/old/wp-snapshots/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/pinkalhealth.com/old/wp-snapshots/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/pinkalhealth.com/old/wp-snapshots/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/pinkalhealth.com/reorder/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/pinkalhealth.com/reorder/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/pinkalhealth.com/sitemaps/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/pinkalhealth.com/sitemaps/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/pinkalhealth.com/sitemaps/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/pinkalhealth.com/sitemaps/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/pinkalhealth.com/wp-content/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/pinkalhealth.com/wp-content/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/pinkalhealth.com/wp-content/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/pinkalhealth.com/wp-content/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/pinkalhealth.com/wp-content/plugins/all-in-one-wp-migration/all-in-one-wp-migration.php'
# Script version check [OLD] [All-in-One WP Migration v7.33 < v7.34]
'/home/mpararhp/pinkalhealth.com/wp-content/plugins/custom-facebook-feed/custom-facebook-feed.php'
# Script version check [OLD] [Smash Balloon Custom Facebook Feed v2.18.1 < v2.18.2]
'/home/mpararhp/pinkalhealth.com/wp-content/plugins/updraftplus/updraftplus.php'
# Script version check [OLD] [UpdraftPlus - Backup/Restore v1.16.46 < v1.16.47]
'/home/mpararhp/pinkalhealth.com/wp-content/plugins/wordpress-seo/wp-seo.php'
# Script version check [OLD] [Yoast SEO v15.6.2 < v15.7]
'/home/mpararhp/public_html/pinkalfootcareclinic.ca/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/public_html/pinkalfootcareclinic.ca/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/public_html/pinkalfootcareclinic.ca/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/public_html/pinkalfootcareclinic.ca/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/public_html/wp-content/plugins/all-in-one-wp-migration/all-in-one-wp-migration.php'
# Script version check [OLD] [All-in-One WP Migration v7.33 < v7.34]
'/home/mpararhp/public_html/wp-content/plugins/wordpress-seo/wp-seo.php'
# Script version check [OLD] [Yoast SEO v15.0 < v15.7]
'/home/mpararhp/public_html/wp-includes/version.php'
# Script version check [OLD] [Wordpress v5.4.4 < v5.6]
'/home/mpararhp/queensfamilydentistry.ca/old/.well-known/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/queensfamilydentistry.ca/old/.well-known/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/queensfamilydentistry.ca/old/.well-known/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/queensfamilydentistry.ca/old/.well-known/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/queensfamilydentistry.ca/old/cgi-bin/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/queensfamilydentistry.ca/old/cgi-bin/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/queensfamilydentistry.ca/old/wp-admin/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/queensfamilydentistry.ca/old/wp-admin/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/queensfamilydentistry.ca/old/wp-admin/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/queensfamilydentistry.ca/old/wp-admin/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/queensfamilydentistry.ca/old/wp-admin/images/align-lefts.png'
# Suspicious image file (hidden script file)
'/home/mpararhp/queensfamilydentistry.ca/old/wp-includes/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/queensfamilydentistry.ca/old/wp-includes/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/queensfamilydentistry.ca/old/wp-includes/version.php'
# Script version check [OLD] [Wordpress v5.1.8 < v5.6]
'/home/mpararhp/queensfamilydentistry.ca/old/wp-includes/images/smilies/icon_reds.gif'
# Suspicious image file (hidden script file)
'/home/mpararhp/queensfamilydentistry.ca/old/wp-snapshots/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/queensfamilydentistry.ca/old/wp-snapshots/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/queensfamilydentistry.ca/sidecart/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/queensfamilydentistry.ca/sidecart/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/queensfamilydentistry.ca/wp-content/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/queensfamilydentistry.ca/wp-content/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/sikhheritagelondon.ca/wp-content/plugins/all-in-one-wp-migration/all-in-one-wp-migration.php'
# Script version check [OLD] [All-in-One WP Migration v7.33 < v7.34]
'/home/mpararhp/tmp/awstats/awstats012021.ishitexinc.mparkara.com.txt'
# ClamAV detected virus = [{HEX}php.malware.magento.585.UNOFFICIAL]
'/home/mpararhp/www.burritoguyz.ca'
# Suspicious directory
'/home/mpararhp/www.burritoguyz.ca/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/www.burritoguyz.ca/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/www.burritoguyz.ca/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/www.burritoguyz.ca/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/www.queensfamilydentistry.ca'
# Suspicious directory
'/home/mpararhp/www.queensfamilydentistry.ca/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/www.queensfamilydentistry.ca/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/www.queensfamilydentistry.ca/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/www.queensfamilydentistry.ca/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/www.queensfamilydentistry.ca/cgi-bin/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/www.queensfamilydentistry.ca/cgi-bin/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/www.queensfamilydentistry.ca/cgi-bin/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/www.queensfamilydentistry.ca/cgi-bin/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
'/home/mpararhp/www.sikhheritagelondon.ca'
# Suspicious directory
'/home/mpararhp/www.turmericindianeatery.ca'
# Suspicious directory
'/home/mpararhp/www.turmericindianeatery.ca/windex.php'
# Decode regex match = [decode regex: 1]
# (decoded file [depth: 1]) Decode regex match = [decode regex: 1]
'/home/mpararhp/www.turmericindianeatery.ca/wp-content/plugins/all-in-one-wp-migration/all-in-one-wp-migration.php'
# Script version check [OLD] [All-in-One WP Migration v7.33 < v7.34]
'/home/mpararhp/www.turmericindianeatery.ca/wp-content/plugins/fusion-builder/templates/content/content-templates.php'
# Universal decode regex match = [universal decoder]
'/home/mpararhp/www.turmericindianeatery.ca/wp-content/plugins/revslider/admin/views/builder.php'
# Regular expression match = [\*[A-Za-z0-9]{12,130}\*]
----------- SCAN SUMMARY -----------
Scanned directories: 19714
Scanned files: 201826
Ignored items: 412
Suspicious matches: 448
Viruses found: 9
Fingerprint matches: 350
Data scanned: 192067.37 MB
Scan peak memory: 315520 kB
Scan time/item: 0.032 sec
Scan time: 7114.590 sec
| Name | Type | Size | Permission | Actions |
|---|---|---|---|---|
| .cagefs | Folder | 0771 |
|
|
| .caldav | Folder | 0755 |
|
|
| .cl.selector | Folder | 0755 |
|
|
| .clwpos | Folder | 0700 |
|
|
| .cpanel | Folder | 0700 |
|
|
| .cphorde | Folder | 0700 |
|
|
| .ftp-scan | Folder | 0775 |
|
|
| .htpasswds | Folder | 0750 |
|
|
| .nc_plugin | Folder | 0711 |
|
|
| .pki | Folder | 0740 |
|
|
| .razor | Folder | 0755 |
|
|
| .softaculous | Folder | 0711 |
|
|
| .spamassassin | Folder | 0700 |
|
|
| .sqmailattach | Folder | 0700 |
|
|
| .sqmaildata | Folder | 0700 |
|
|
| .subaccounts | Folder | 0700 |
|
|
| .system-php | Folder | 0755 |
|
|
| .trash | Folder | 0700 |
|
|
| .wp-cli | Folder | 0775 |
|
|
| 11queensfamilydentistry.ca | Folder | 0755 |
|
|
| Domains | Folder | 0755 |
|
|
| access-logs | Folder | 0750 |
|
|
| bin | Folder | 0755 |
|
|
| cache | Folder | 0755 |
|
|
| cgi-bin | Folder | 0755 |
|
|
| etc | Folder | 0750 |
|
|
| gbiproperties.ca | Folder | 0750 |
|
|
| hachiai.mparkara.com | Folder | 0750 |
|
|
| hccold.mparkara.com | Folder | 0750 |
|
|
| invisalign.queensfamilydentistry.ca | Folder | 0750 |
|
|
| ishitexinc.com | Folder | 0750 |
|
|
| lifebuild.mparkara.com | Folder | 0750 |
|
|
| logs | Folder | 0700 |
|
|
| lscache | Folder | 2770 |
|
|
| lscmData | Folder | 0700 |
|
|
| Folder | 0751 |
|
||
| milind.mparkara.com | Folder | 0750 |
|
|
| mobileanesthesia.mparkara.com | Folder | 0750 |
|
|
| mparkaraonline.ca | Folder | 0750 |
|
|
| myjackdanni.com | Folder | 0750 |
|
|
| newpatient.queensfamilydentistry.ca | Folder | 0750 |
|
|
| ottlo.mparkara.com | Folder | 0750 |
|
|
| perl5 | Folder | 0775 |
|
|
| php | Folder | 0755 |
|
|
| public_ftp | Folder | 0750 |
|
|
| public_html | Folder | 0750 |
|
|
| quarantine_clamavconnector | Folder | 0700 |
|
|
| queensfamilydentistry.ca | Folder | 0755 |
|
|
| queensfamilydentistry.ca_fresh | Folder | 0750 |
|
|
| rajaniskinclinic | Folder | 0755 |
|
|
| sikhheritagelondon.ca | Folder | 0777 |
|
|
| softaculous_backups | Folder | 0711 |
|
|
| ssl | Folder | 0755 |
|
|
| tmp | Folder | 0755 |
|
|
| transfer | Folder | 0755 |
|
|
| vardan.mparkara.com | Folder | 0750 |
|
|
| vardandentalstudio.com | Folder | 0750 |
|
|
| vardandentalstudio.in | Folder | 0750 |
|
|
| world.mparkara.com | Folder | 0750 |
|
|
| www | Folder | 0750 |
|
|
| www.queensfamilydentistry.ca | Folder | 0750 |
|
|
| www.turmericindianeatery.ca | Folder | 0750 |
|
|
| .bash_history | File | 637 B | 0600 |
|
| .bash_logout | File | 18 B | 0644 |
|
| .bash_profile | File | 176 B | 0644 |
|
| .bashrc | File | 124 B | 0644 |
|
| .clamavconnector.pid | File | 7 B | 0644 |
|
| .clamavconnector.status | File | 173 B | 0644 |
|
| .contactemail | File | 19 B | 0600 |
|
| .dns | File | 12 B | 0664 |
|
| .ftpquota | File | 19 B | 0600 |
|
| .gemrc | File | 140 B | 0644 |
|
| .htaccess1 | File | 76 B | 0644 |
|
| .imunify_patch_id | File | 106 B | 0660 |
|
| .last.inodes | File | 12.26 KB | 0644 |
|
| .lastlogin | File | 573 B | 0600 |
|
| .myimunify_id | File | 102 B | 0660 |
|
| .pearrc | File | 607 B | 0644 |
|
| .spamassassinboxenable | File | 0 B | 0644 |
|
| .spamassassinenable | File | 0 B | 0644 |
|
| .viminfo | File | 578 B | 0600 |
|
| .wget-hsts | File | 172 B | 0644 |
|
| .zshrc | File | 658 B | 0644 |
|
| anniversaryReminder | File | 645.45 KB | 0644 |
|
| anniversaryReminder.1 | File | 651.55 KB | 0644 |
|
| anniversaryReminder.10 | File | 651.79 KB | 0644 |
|
| anniversaryReminder.11 | File | 651.8 KB | 0644 |
|
| anniversaryReminder.12 | File | 651.63 KB | 0644 |
|
| anniversaryReminder.13 | File | 651.63 KB | 0644 |
|
| anniversaryReminder.14 | File | 651.81 KB | 0644 |
|
| anniversaryReminder.15 | File | 651.52 KB | 0644 |
|
| anniversaryReminder.16 | File | 651.36 KB | 0644 |
|
| anniversaryReminder.17 | File | 651.35 KB | 0644 |
|
| anniversaryReminder.18 | File | 651.36 KB | 0644 |
|
| anniversaryReminder.19 | File | 651.37 KB | 0644 |
|
| anniversaryReminder.2 | File | 651.55 KB | 0644 |
|
| anniversaryReminder.20 | File | 651.38 KB | 0644 |
|
| anniversaryReminder.21 | File | 651.53 KB | 0644 |
|
| anniversaryReminder.22 | File | 651.54 KB | 0644 |
|
| anniversaryReminder.23 | File | 651.36 KB | 0644 |
|
| anniversaryReminder.24 | File | 651.37 KB | 0644 |
|
| anniversaryReminder.25 | File | 651.18 KB | 0644 |
|
| anniversaryReminder.26 | File | 651.2 KB | 0644 |
|
| anniversaryReminder.27 | File | 651.18 KB | 0644 |
|
| anniversaryReminder.28 | File | 651.19 KB | 0644 |
|
| anniversaryReminder.29 | File | 651.35 KB | 0644 |
|
| anniversaryReminder.3 | File | 651.38 KB | 0644 |
|
| anniversaryReminder.30 | File | 651.35 KB | 0644 |
|
| anniversaryReminder.31 | File | 651.34 KB | 0644 |
|
| anniversaryReminder.32 | File | 651.34 KB | 0644 |
|
| anniversaryReminder.33 | File | 651.35 KB | 0644 |
|
| anniversaryReminder.34 | File | 651.37 KB | 0644 |
|
| anniversaryReminder.35 | File | 651.36 KB | 0644 |
|
| anniversaryReminder.36 | File | 651.75 KB | 0644 |
|
| anniversaryReminder.37 | File | 651.6 KB | 0644 |
|
| anniversaryReminder.38 | File | 651.58 KB | 0644 |
|
| anniversaryReminder.39 | File | 651.75 KB | 0644 |
|
| anniversaryReminder.4 | File | 651.55 KB | 0644 |
|
| anniversaryReminder.40 | File | 651.77 KB | 0644 |
|
| anniversaryReminder.41 | File | 651.75 KB | 0644 |
|
| anniversaryReminder.5 | File | 651.54 KB | 0644 |
|
| anniversaryReminder.6 | File | 651.54 KB | 0644 |
|
| anniversaryReminder.7 | File | 651.53 KB | 0644 |
|
| anniversaryReminder.8 | File | 651.79 KB | 0644 |
|
| anniversaryReminder.9 | File | 651.65 KB | 0644 |
|
| birthdayReminder | File | 645.44 KB | 0644 |
|
| birthdayReminder.1 | File | 651.55 KB | 0644 |
|
| birthdayReminder.10 | File | 651.82 KB | 0644 |
|
| birthdayReminder.11 | File | 651.8 KB | 0644 |
|
| birthdayReminder.12 | File | 651.65 KB | 0644 |
|
| birthdayReminder.13 | File | 651.63 KB | 0644 |
|
| birthdayReminder.14 | File | 651.8 KB | 0644 |
|
| birthdayReminder.15 | File | 651.52 KB | 0644 |
|
| birthdayReminder.16 | File | 651.36 KB | 0644 |
|
| birthdayReminder.17 | File | 651.36 KB | 0644 |
|
| birthdayReminder.18 | File | 651.37 KB | 0644 |
|
| birthdayReminder.19 | File | 651.37 KB | 0644 |
|
| birthdayReminder.2 | File | 651.55 KB | 0644 |
|
| birthdayReminder.20 | File | 651.37 KB | 0644 |
|
| birthdayReminder.21 | File | 651.53 KB | 0644 |
|
| birthdayReminder.22 | File | 651.54 KB | 0644 |
|
| birthdayReminder.23 | File | 651.37 KB | 0644 |
|
| birthdayReminder.24 | File | 651.38 KB | 0644 |
|
| birthdayReminder.25 | File | 651.18 KB | 0644 |
|
| birthdayReminder.26 | File | 651.18 KB | 0644 |
|
| birthdayReminder.27 | File | 651.18 KB | 0644 |
|
| birthdayReminder.28 | File | 651.19 KB | 0644 |
|
| birthdayReminder.29 | File | 651.37 KB | 0644 |
|
| birthdayReminder.3 | File | 651.38 KB | 0644 |
|
| birthdayReminder.30 | File | 651.36 KB | 0644 |
|
| birthdayReminder.31 | File | 651.34 KB | 0644 |
|
| birthdayReminder.32 | File | 651.35 KB | 0644 |
|
| birthdayReminder.33 | File | 651.35 KB | 0644 |
|
| birthdayReminder.34 | File | 651.37 KB | 0644 |
|
| birthdayReminder.35 | File | 651.34 KB | 0644 |
|
| birthdayReminder.36 | File | 651.75 KB | 0644 |
|
| birthdayReminder.37 | File | 651.61 KB | 0644 |
|
| birthdayReminder.38 | File | 651.6 KB | 0644 |
|
| birthdayReminder.39 | File | 651.75 KB | 0644 |
|
| birthdayReminder.4 | File | 651.55 KB | 0644 |
|
| birthdayReminder.40 | File | 651.76 KB | 0644 |
|
| birthdayReminder.41 | File | 651.75 KB | 0644 |
|
| birthdayReminder.5 | File | 651.54 KB | 0644 |
|
| birthdayReminder.6 | File | 651.54 KB | 0644 |
|
| birthdayReminder.7 | File | 651.53 KB | 0644 |
|
| birthdayReminder.8 | File | 651.79 KB | 0644 |
|
| birthdayReminder.9 | File | 651.63 KB | 0644 |
|
| cpbackup-exclude.conf | File | 1 B | 0640 |
|
| scanreport--Feb_06_2021_07h31m.txt | File | 5.33 KB | 0644 |
|
| scanreport-mpararhp-Feb_06_2021_08h22m.txt | File | 3.17 KB | 0644 |
|
| scanreport-mpararhp-May072024_00h16m.txt | File | 23.57 KB | 0644 |
|
| scanreport-mpararhp-May_28_2024_14h35m.txt | File | 25.49 KB | 0644 |
|
| scanreport-mytophpk-Feb_03_2021_08h31m.txt | File | 58.52 KB | 0644 |
|