/home/websdxuk/scanreport-websdxuk-Sep_29_2025_13h19m.txt
----------- SCAN REPORT -----------
TimeStamp: Mon, 29 Sep 2025 13:19:50 -0400
(/usr/sbin/cxs --background --clamdsock /var/clamd --dbreport --defapache nobody --doptions Mv --exploitscan --nofallback --filemax 50000 --noforce --html --ignore /etc/cxs/cxs.ignore.manual --options mMOLfSGchexdnwZDRru --noprobability --qoptions Mv --report /home/websdxuk/scanreport-websdxuk-Sep_29_2025_13h19m.txt --sizemax 1000000 --ssl --summary --sversionscan --timemax 30 --unofficial --user websdxuk --virusscan --vmrssmax 2000000 --waitscan 0 --xtra /etc/cxs/cxs.xtra.manual)
Scanning /home/websdxuk:
'/home/websdxuk/.cpanel/live-engine-connector-6Oy9csr76B.sock'
# Socket
'/home/websdxuk/.cpanel/live-engine-connector-VL9AyxTNVx.sock'
# Socket
'/home/websdxuk/.nc_plugin/hidden'
# World writeable directory
'/home/websdxuk/.trash/Danny-Martinez/Danny-Martinez/Danny-Martinez/YrnyPeQkEM.png'
# Suspicious image file (hidden script file)
'/home/websdxuk/.trash/Danny-Martinez/Danny-Martinez/Danny-Martinez/Danny-Martinez/Danny-Martinez/LQeAlFMYixKkw.gif'
# Suspicious image file (hidden script file)
'/home/websdxuk/.trash/Danny-Martinez/Danny-Martinez/Danny-Martinez/Danny-Martinez/Danny-Martinez/Danny-Martinez/Danny-Martinez/Danny-Martinez/Danny-Martinez/gABfLKpszunvaZbe.tif'
# Suspicious image file (hidden script file)
'/home/websdxuk/.trash/JFC/v1/wp-content/plugins/jeg-elementor-kit/lib/jeg-element/includes/class/class/YrBteJIw.jpg'
# Suspicious image file (hidden script file)
'/home/websdxuk/.trash/JFC/v1/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'
# Universal decode regex match = [universal decoder]
'/home/websdxuk/.trash/JFC/v1/wp-content/plugins/woocommerce/src/Internal/Admin/Settings/PaymentsController.php'
# Universal decode regex match = [universal decoder]
'/home/websdxuk/.trash/JFC/v1/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'
# Suspicious file type [application/x-c]
'/home/websdxuk/.trash/Leon-Toni/Leon-Toni/Leon-Toni/Leon-Toni/nHGRwQAUaZI.tif'
# Suspicious image file (hidden script file)
'/home/websdxuk/.trash/Leon-Toni/Leon-Toni/Leon-Toni/Leon-Toni/Leon-Toni/YaC.tiff'
# Suspicious image file (hidden script file)
'/home/websdxuk/.trash/Leon-Toni/Leon-Toni/Leon-Toni/Leon-Toni/Leon-Toni/Leon-Toni/Leon-Toni/mPJfwTSeUgCWGnRc.png'
# Suspicious image file (hidden script file)
'/home/websdxuk/.trash/Selina-Ruiz/v2/wp-content/plugins/all-in-one-wp-migration/all-in-one-wp-migration.php'
# Script version check [OLD] [All-in-One WP Migration v7.90 < v7.93]
'/home/websdxuk/.trash/Selina-Ruiz/v2/wp-content/plugins/elementor/elementor.php'
# Script version check [OLD] [Elementor v3.27.7 < v3.28.4]
'/home/websdxuk/.trash/Selina-Ruiz/v2/wp-content/plugins/elementskit/libs/composer/vendor/build/vendor/src/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php'
# Universal decode regex match = [universal decoder]
'/home/websdxuk/.trash/Selina-Ruiz/v2/wp-content/plugins/elementskit/libs/composer/vendor/build/vendor/src/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php'
# Universal decode regex match = [universal decoder]
'/home/websdxuk/.trash/Selina-Ruiz/v2/wp-content/plugins/elementskit-lite/elementskit-lite.php'
# Script version check [OLD] [ElementsKit Lite v3.4.4 < v3.4.9]
'/home/websdxuk/.trash/Selina-Ruiz/v2/wp-content/plugins/metform/metform.php'
# Script version check [OLD] [MetForm v3.9.6 < v3.9.8]
'/home/websdxuk/.trash/Selina-Ruiz/v2/wp-includes/version.php'
# Script version check [OLD] [Wordpress v6.8.1 < v6.8.2]
'/home/websdxuk/.trash/Toni/Toni/Toni/Toni/Toni/uaprZYw.tiff'
# Suspicious image file (hidden script file)
'/home/websdxuk/.trash/VljsnSwfzAMGItX/VljsnSwfzAMGItX/VljsnSwfzAMGItX/ZWqARFNIksbSg.jpeg'
# Suspicious image file (hidden script file)
'/home/websdxuk/.trash/VljsnSwfzAMGItX/VljsnSwfzAMGItX/VljsnSwfzAMGItX/pLhVYjabrwKXtsPxSmg.tiff'
# Suspicious image file (hidden script file)
'/home/websdxuk/.trash/YUgEZFamHBx/YUgEZFamHBx/YUgEZFamHBx/YUgEZFamHBx/YiSQjMkyqRwUmHIvWe.jpeg'
# Suspicious image file (hidden script file)
'/home/websdxuk/.trash/assets/images/images/images/images/aSXtBlYjNwFfZvuHUQ.tif'
# Suspicious image file (hidden script file)
'/home/websdxuk/.trash/cgi-bin/cgi-bin/cgi-bin/cgi-bin/Y.tiff'
# Suspicious image file (hidden script file)
'/home/websdxuk/.trash/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/QEcPhRiqlafvZruIFMpJ.gif'
# Suspicious image file (hidden script file)
'/home/websdxuk/.trash/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/iSxqYVEsGalbCurhA.gif'
# Suspicious image file (hidden script file)
'/home/websdxuk/.trash/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/rcqIwRELmMXQfnUN.gif'
# Suspicious image file (hidden script file)
'/home/websdxuk/.trash/images/images/images/g.tiff'
# Suspicious image file (hidden script file)
'/home/websdxuk/.trash/images/images/images/images/images/images/images/images/BViWIuxeaynTjL.jpeg'
# Suspicious image file (hidden script file)
'/home/websdxuk/.trash/images/images/images/images/images/images/images/images/E.jpeg'
# Suspicious image file (hidden script file)
'/home/websdxuk/.trash/images/images/images/images/images/images/images/images/images/fXUyFg.jpg'
# Suspicious image file (hidden script file)
'/home/websdxuk/.trash/include/include/include/include/ASzZnqjNmPVTFWHac.jpg'
# Suspicious image file (hidden script file)
'/home/websdxuk/.trash/nbzTp/nbzTp/nbzTp/nbzTp/ylhNbEwGAivcVHtm.jpeg'
# Suspicious image file (hidden script file)
'/home/websdxuk/.trash/wp-content/plugins/akismet/_inc/img/logo-rpnqprqnprprr.png'
# Suspicious image file (hidden script file)
# Universal decode regex match = [universal decoder]
'/home/websdxuk/.trash/wp-content/plugins/akismet/akismet/WMJZKspj.tiff'
# Suspicious image file (hidden script file)
'/home/websdxuk/.trash/wp-content.1/plugins/akismet/_inc/img/logo-nqrqsnsqqrqpsqssq.png'
# Suspicious image file (hidden script file)
# Universal decode regex match = [universal decoder]
'/home/websdxuk/.trash/wp-includes/Text/Diff/Diff/fviYyVtuEF.tiff'
# Suspicious image file (hidden script file)
'/home/websdxuk/.trash/wp-includes/Text/Diff/Engine/rpnqprqnprprr.ttf'
# Universal decode regex match = [universal decoder]
'/home/websdxuk/.trash/wp-includes/Text/Text/JpeYqcVE.gif'
# Suspicious image file (hidden script file)
'/home/websdxuk/.trash/wp-includes/Text/Text/Text/KLcQnYvjsPVef.png'
# Suspicious image file (hidden script file)
'/home/websdxuk/.trash/wp-includes/blocks/blocks/kefEyrxWGpgNsS.gif'
# Suspicious image file (hidden script file)
'/home/websdxuk/.trash/wp-includes/blocks/cover/style-rel.css'
# Universal decode regex match = [universal decoder]
'/home/websdxuk/.trash/wp-includes/blocks/cover/cover/BxNkyRbYCeTKrUAwXQs.tif'
# Suspicious image file (hidden script file)
'/home/websdxuk/.trash/wp-includes/blocks/cover/cover/V.png'
# Suspicious image file (hidden script file)
'/home/websdxuk/.trash/wp-includes/images/w-ecadcedacecee.gif'
# Suspicious image file (hidden script file)
# Universal decode regex match = [universal decoder]
'/home/websdxuk/.trash/wp-includes/images/wpspin-1x.gif'
# Suspicious image file (hidden script file)
'/home/websdxuk/.trash/wp-includes/images/xit-3x.gif'
# Suspicious image file (hidden script file)
'/home/websdxuk/.trash/wp-includes/images/media/ecadcedacecee.png'
# Suspicious image file (hidden script file)
# Universal decode regex match = [universal decoder]
'/home/websdxuk/.trash/wp-includes.1/Text/Diff/Engine/nqrqsnsqqrqpsqssq.ttf'
# Universal decode regex match = [universal decoder]
'/home/websdxuk/.trash/wp-includes.1/blocks/cover/style-rel.css'
# Universal decode regex match = [universal decoder]
'/home/websdxuk/.trash/wp-includes.1/images/w-adedfafddedcfdffd.gif'
# Suspicious image file (hidden script file)
# Universal decode regex match = [universal decoder]
'/home/websdxuk/.trash/wp-includes.1/images/xit-3x.gif'
# Suspicious image file (hidden script file)
'/home/websdxuk/.trash/wp-includes.1/images/media/adedfafddedcfdffd.png'
# Suspicious image file (hidden script file)
# Universal decode regex match = [universal decoder]
'/home/websdxuk/amazonautomationofficial.com/.tmb'
# World writeable directory
'/home/websdxuk/amazonautomationofficial.com/images/images/jUNvqMSKmz.tif'
# Suspicious image file (hidden script file)
'/home/websdxuk/amazonautomationofficial.com/images/images/images/ZMuwCHnJRKzvIfm.gif'
# Suspicious image file (hidden script file)
'/home/websdxuk/amazonautomationofficial.com/images/images/images/images/images/images/images/index.php'
# Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P2189]]
'/home/websdxuk/amazonautomationofficial.com/images/images/images/images/images/images/images/images/images/index.php'
# Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P2195]]
'/home/websdxuk/amazonautomationofficial.com/images/images/images/images/images/images/images/images/images/images/images/LieUWbuyhCJRcPKkQqlp.png'
# Suspicious image file (hidden script file)
'/home/websdxuk/amazonautomationofficial.com/images/images/images/images/images/images/images/images/images/images/images/afXu.gif'
# Suspicious image file (hidden script file)
'/home/websdxuk/amazonautomationofficial.com/images/images/images/images/images/images/images/images/images/images/images/mM.tif'
# Suspicious image file (hidden script file)
'/home/websdxuk/amazonautomationofficial.com/images/images/images/images/images/images/images/images/images/images/images/images/images/mIecRxwWfjPhEJLBHFC.tiff'
# Suspicious image file (hidden script file)
'/home/websdxuk/amazonautomationofficial.com/wp-admin/css/colors/modern/modern/modern/cfZKewGCqUlBrypFH.jpg'
# Suspicious image file (hidden script file)
'/home/websdxuk/amazonautomationofficial.com/wp-admin/js/widgets/widgets/index.php'
# Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P2189]]
'/home/websdxuk/amazonautomationofficial.com/wp-admin/js/widgets/widgets/widgets/index.php'
# Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P2202]]
'/home/websdxuk/amazonautomationofficial.com/wp-content/plugins/akismet/_inc/img/logo-rnoroornsrsr.png'
# Suspicious image file (hidden script file)
# Universal decode regex match = [universal decoder]
'/home/websdxuk/amazonautomationofficial.com/wp-content/plugins/all-in-one-wp-migration/lib/vendor/bandar/bandar/lib/lib/index.php'
# Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P2195]]
'/home/websdxuk/amazonautomationofficial.com/wp-content/plugins/elementor-pro/modules/forms/submissions/database/migrations/migrations/index.php'
# Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P2189]]
'/home/websdxuk/amazonautomationofficial.com/wp-content/plugins/happy-elementor-addons/classes/notice.php'
# Universal decode regex match = [universal decoder]
'/home/websdxuk/amazonautomationofficial.com/wp-content/plugins/happy-elementor-addons/classes/review.php'
# Universal decode regex match = [universal decoder]
'/home/websdxuk/amazonautomationofficial.com/wp-content/plugins/happy-elementor-addons/inc/functions.php'
# Universal decode regex match = [universal decoder]
'/home/websdxuk/amazonautomationofficial.com/wp-content/plugins/wp-file-manager/lib/codemirror/mode/clike/index.html'
# Suspicious file type [application/x-c]
'/home/websdxuk/amazonautomationofficial.com/wp-content/plugins/wp-optimize/includes/class-wp-optimize-admin.php'
# Universal decode regex match = [universal decoder]
'/home/websdxuk/amazonautomationofficial.com/wp-content/plugins/wp-rocket/vendor/symfony/polyfill-php80/Resources/stubs/stubs/lTBRqjkzM.tif'
# Suspicious image file (hidden script file)
'/home/websdxuk/amazonautomationofficial.com/wp-includes/Text/Diff/Engine/rnoroornsrsr.ttf'
# Universal decode regex match = [universal decoder]
'/home/websdxuk/amazonautomationofficial.com/wp-includes/blocks/cover/style-rel.css'
# Universal decode regex match = [universal decoder]
'/home/websdxuk/amazonautomationofficial.com/wp-includes/blocks/post-author/post-author/index.php'
# Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P2202]]
'/home/websdxuk/amazonautomationofficial.com/wp-includes/images/w-eabebbeafefe.gif'
# Suspicious image file (hidden script file)
# Universal decode regex match = [universal decoder]
'/home/websdxuk/amazonautomationofficial.com/wp-includes/images/wpspin-1x.gif'
# Suspicious image file (hidden script file)
'/home/websdxuk/amazonautomationofficial.com/wp-includes/images/xit-3x.gif'
# Suspicious image file (hidden script file)
'/home/websdxuk/amazonautomationofficial.com/wp-includes/images/media/eabebbeafefe.png'
# Suspicious image file (hidden script file)
# Universal decode regex match = [universal decoder]
'/home/websdxuk/amazonautomationofficial.com/wp-includes/js/dist/script-modules/block-library/image/image/index.php'
# Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P2189]]
'/home/websdxuk/amazonautomationofficial.com/wp-includes/sitemaps/sitemaps/aZmnEx.gif'
# Suspicious image file (hidden script file)
'/home/websdxuk/asecomllc.com/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/wVLIlhWMSmApcesxXJyq.jpg'
# Suspicious image file (hidden script file)
'/home/websdxuk/asecomllc.com/contents/contents/contents/HPEfueRjXyQgcqACZJt.jpeg'
# Suspicious image file (hidden script file)
'/home/websdxuk/asecomllc.com/wp-content/plugins/akismet/_inc/img/logo-srqosnsooqop.png'
# Suspicious image file (hidden script file)
# Universal decode regex match = [universal decoder]
'/home/websdxuk/asecomllc.com/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'
# Universal decode regex match = [universal decoder]
'/home/websdxuk/asecomllc.com/wp-content/plugins/woocommerce/src/Internal/Admin/Settings/PaymentsController.php'
# Universal decode regex match = [universal decoder]
'/home/websdxuk/asecomllc.com/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'
# Suspicious file type [application/x-c]
'/home/websdxuk/asecomllc.com/wp-content/uploads/elementor/css/css/lUXMHCINqseikA.jpg'
# Suspicious image file (hidden script file)
'/home/websdxuk/asecomllc.com/wp-includes/SimplePie/src/src/aeBsKQMPmjHUcn.png'
# Suspicious image file (hidden script file)
'/home/websdxuk/asecomllc.com/wp-includes/Text/Diff/Engine/srqosnsooqop.ttf'
# Universal decode regex match = [universal decoder]
'/home/websdxuk/asecomllc.com/wp-includes/blocks/cover/style-rel.css'
# Universal decode regex match = [universal decoder]
'/home/websdxuk/asecomllc.com/wp-includes/blocks/navigation-link/navigation-link/AUVcgrNhQm.tif'
# Suspicious image file (hidden script file)
'/home/websdxuk/asecomllc.com/wp-includes/images/w-fedbfafbbdbc.gif'
# Suspicious image file (hidden script file)
# Universal decode regex match = [universal decoder]
'/home/websdxuk/asecomllc.com/wp-includes/images/wpspin-1x.gif'
# Suspicious image file (hidden script file)
'/home/websdxuk/asecomllc.com/wp-includes/images/xit-3x.gif'
# Suspicious image file (hidden script file)
'/home/websdxuk/asecomllc.com/wp-includes/images/media/fedbfafbbdbc.png'
# Suspicious image file (hidden script file)
# Universal decode regex match = [universal decoder]
'/home/websdxuk/asecomllc.com/wp-includes/js/jquery/ui/ui/QsxzPVNSUi.tiff'
# Suspicious image file (hidden script file)
'/home/websdxuk/jamesfrycreatives.com/cgi-bin/cgi-bin/cgi-bin/FpytcgqAhZjsL.jpeg'
# Suspicious image file (hidden script file)
'/home/websdxuk/jamesfrycreatives.com/cgi-bin/cgi-bin/cgi-bin/cfBqJtspNFPY.jpg'
# Suspicious image file (hidden script file)
'/home/websdxuk/jamesfrycreatives.com/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/AiCZYrNLkGmfXKJ.tif'
# Suspicious image file (hidden script file)
'/home/websdxuk/jamesfrycreatives.com/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/YwBVZWcGtNbIkveQj.jpg'
# Suspicious image file (hidden script file)
'/home/websdxuk/jamesfrycreatives.com/images/images/X.tiff'
# Suspicious image file (hidden script file)
'/home/websdxuk/jamesfrycreatives.com/products/products/products/products/EGcLqPrNnutRmax.jpg'
# Suspicious image file (hidden script file)
'/home/websdxuk/jamesfrycreatives.com/products/products/products/products/products/products/knfVTaWb.gif'
# Suspicious image file (hidden script file)
'/home/websdxuk/jamesfrycreatives.com/wp-admin/css/colors/midnight/midnight/midnight/fpiZhumjWJGysSKqlIe.tif'
# Suspicious image file (hidden script file)
'/home/websdxuk/jamesfrycreatives.com/wp-admin/maint/maint/MSZVeIvUbysflrFNE.jpeg'
# Suspicious image file (hidden script file)
'/home/websdxuk/jamesfrycreatives.com/wp-content/plugins/akismet/_inc/img/logo-rnnrnprrqro.png'
# Suspicious image file (hidden script file)
# Universal decode regex match = [universal decoder]
'/home/websdxuk/jamesfrycreatives.com/wp-content/plugins/elementor-pro/modules/custom-css/admin-menu-items/admin-menu-items/XehbPBE.png'
# Suspicious image file (hidden script file)
'/home/websdxuk/jamesfrycreatives.com/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'
# Universal decode regex match = [universal decoder]
'/home/websdxuk/jamesfrycreatives.com/wp-content/plugins/woocommerce/src/Internal/Admin/Settings/PaymentsController.php'
# Universal decode regex match = [universal decoder]
'/home/websdxuk/jamesfrycreatives.com/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'
# Suspicious file type [application/x-c]
'/home/websdxuk/jamesfrycreatives.com/wp-includes/Text/Diff/Engine/rnnrnprrqro.ttf'
# Universal decode regex match = [universal decoder]
'/home/websdxuk/jamesfrycreatives.com/wp-includes/blocks/cover/style-rel.css'
# Universal decode regex match = [universal decoder]
'/home/websdxuk/jamesfrycreatives.com/wp-includes/blocks/group/group/eFkraMAbYTlpK.gif'
# Suspicious image file (hidden script file)
'/home/websdxuk/jamesfrycreatives.com/wp-includes/images/w-eaaeaceedeb.gif'
# Suspicious image file (hidden script file)
# Universal decode regex match = [universal decoder]
'/home/websdxuk/jamesfrycreatives.com/wp-includes/images/wpspin-1x.gif'
# Suspicious image file (hidden script file)
'/home/websdxuk/jamesfrycreatives.com/wp-includes/images/xit-3x.gif'
# Suspicious image file (hidden script file)
'/home/websdxuk/jamesfrycreatives.com/wp-includes/images/media/eaaeaceedeb.png'
# Suspicious image file (hidden script file)
# Universal decode regex match = [universal decoder]
'/home/websdxuk/jamesfrycreatives.com/wp-includes/js/dist/development/development/XmckRuwUZlNLe.tif'
# Suspicious image file (hidden script file)
'/home/websdxuk/jamesfrycreatives.com/wp-includes/js/tinymce/skins/skins/EITzVghJL.jpeg'
# Suspicious image file (hidden script file)
'/home/websdxuk/merchantkeysonline.com/wp-content/plugins/jetformbuilder/modules/framework/admin-bar/jet-admin-bar.php'
# Universal decode regex match = [universal decoder]
'/home/websdxuk/merchantkeysonline.com/wp-content/plugins/jetformbuilder/modules/post-type/icon.php'
# Universal decode regex match = [universal decoder]
'/home/websdxuk/merchantkeysonline.com/wp-content/plugins/pojo-accessibility/modules/legacy/components/upgrade.php'
# Universal decode regex match = [universal decoder]
'/home/websdxuk/merchantkeysonline.com/wp-content/plugins/royal-elementor-addons/admin/plugin-options.php'
# Universal decode regex match = [universal decoder]
'/home/websdxuk/public_html/Kris-Curran/v2/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'
# Universal decode regex match = [universal decoder]
'/home/websdxuk/public_html/Kris-Curran/v2/wp-content/plugins/woocommerce/src/Internal/Admin/Settings/PaymentsController.php'
# Universal decode regex match = [universal decoder]
'/home/websdxuk/public_html/Kris-Curran/v2/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'
# Suspicious file type [application/x-c]
'/home/websdxuk/public_html/projects/Vernon-Somerville/v2/wp-content/plugins/selection-lite/src/Merkulove/Unity/PluginHelper.php'
# Universal decode regex match = [universal decoder]
'/home/websdxuk/public_html/projects/Vernon-Somerville/v2/wp-content/plugins/selection-lite/src/Merkulove/Unity/Settings.php'
# Universal decode regex match = [universal decoder]
'/home/websdxuk/rccgnccl.org/cgi-bin/cgi-bin/cgi-bin/ShIemfRQLx.tif'
# Suspicious image file (hidden script file)
'/home/websdxuk/rccgnccl.org/images/images/IMtCUkRvnNbwA.gif'
# Suspicious image file (hidden script file)
'/home/websdxuk/rccgnccl.org/images/images/images/rheHgUWE.tif'
# Suspicious image file (hidden script file)
'/home/websdxuk/rccgnccl.org/images/images/images/images/images/Kt.jpeg'
# Suspicious image file (hidden script file)
'/home/websdxuk/rccgnccl.org/item/item/item/item/item/item/YGluSnRiHLI.jpeg'
# Suspicious image file (hidden script file)
'/home/websdxuk/rccgnccl.org/wp-admin/css/colors/sunrise/sunrise/EqTFlXjWSBihUycKZ.jpg'
# Suspicious image file (hidden script file)
'/home/websdxuk/rccgnccl.org/wp-admin/css/css/css/MGiTPFw.jpeg'
# Suspicious image file (hidden script file)
'/home/websdxuk/rccgnccl.org/wp-content/plugins/akismet/_inc/img/logo-qqprqsrrsonnr.png'
# Suspicious image file (hidden script file)
# Universal decode regex match = [universal decoder]
'/home/websdxuk/rccgnccl.org/wp-content/plugins/elementor-pro/modules/progress-tracker/progress-tracker/WlfvrphGSyeBIFu.tiff'
# Suspicious image file (hidden script file)
'/home/websdxuk/rccgnccl.org/wp-content/plugins/givesss/includes/misc-functions.php'
# Universal decode regex match = [universal decoder]
'/home/websdxuk/rccgnccl.org/wp-includes/ID3/ID3/GqWPIx.jpg'
# Suspicious image file (hidden script file)
'/home/websdxuk/rccgnccl.org/wp-includes/Requests/Exception/HTTP/418-ChaCha20.php'
# Universal decode regex match = [universal decoder]
'/home/websdxuk/rccgnccl.org/wp-includes/Requests/src/Exception/Transport/Transport/Transport/WhSEqrJM.tiff'
# Suspicious image file (hidden script file)
'/home/websdxuk/rccgnccl.org/wp-includes/Text/Diff/Engine/qqprqsrrsonnr.ttf'
# Universal decode regex match = [universal decoder]
'/home/websdxuk/rccgnccl.org/wp-includes/blocks/cover/style-rel.css'
# Universal decode regex match = [universal decoder]
'/home/websdxuk/rccgnccl.org/wp-includes/css/dist/nux/nux/wZ.png'
# Suspicious image file (hidden script file)
'/home/websdxuk/rccgnccl.org/wp-includes/images/w-ddcedfeefbaae.gif'
# Suspicious image file (hidden script file)
# Universal decode regex match = [universal decoder]
'/home/websdxuk/rccgnccl.org/wp-includes/images/wpspin-1x.gif'
# Suspicious image file (hidden script file)
'/home/websdxuk/rccgnccl.org/wp-includes/images/xit-3x.gif'
# Suspicious image file (hidden script file)
'/home/websdxuk/rccgnccl.org/wp-includes/images/media/ddcedfeefbaae.png'
# Suspicious image file (hidden script file)
# Universal decode regex match = [universal decoder]
'/home/websdxuk/rccgnccl.org/wp-includes/js/tinymce/langs/langs/RuhrCIxfjFZyt.tif'
# Suspicious image file (hidden script file)
'/home/websdxuk/ustradersllc.com/.tmb'
# World writeable directory
'/home/websdxuk/ustradersllc.com/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'
# Universal decode regex match = [universal decoder]
'/home/websdxuk/ustradersllc.com/wp-content/plugins/woocommerce/src/Internal/Admin/Settings/PaymentsController.php'
# Universal decode regex match = [universal decoder]
'/home/websdxuk/ustradersllc.com/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'
# Suspicious file type [application/x-c]
'/home/websdxuk/ustradersllc.com/wp-content/plugins/wp-file-manager/lib/codemirror/mode/clike/index.html'
# Suspicious file type [application/x-c]
'/home/websdxuk/webdesignersmania.com/wp-content/plugins/akismet/_inc/img/logo-nqrqsnsqqrqpsqssq.png'
# Suspicious image file (hidden script file)
# Universal decode regex match = [universal decoder]
'/home/websdxuk/webdesignersmania.com/wp-includes/Text/Diff/Engine/nqrqsnsqqrqpsqssq.ttf'
# Universal decode regex match = [universal decoder]
'/home/websdxuk/webdesignersmania.com/wp-includes/blocks/cover/style-rel.css'
# Universal decode regex match = [universal decoder]
'/home/websdxuk/webdesignersmania.com/wp-includes/images/w-adedfafddedcfdffd.gif'
# Suspicious image file (hidden script file)
# Universal decode regex match = [universal decoder]
'/home/websdxuk/webdesignersmania.com/wp-includes/images/xit-3x.gif'
# Suspicious image file (hidden script file)
'/home/websdxuk/webdesignersmania.com/wp-includes/images/media/adedfafddedcfdffd.png'
# Suspicious image file (hidden script file)
# Universal decode regex match = [universal decoder]
----------- SCAN SUMMARY -----------
Scanned directories: 35170
Scanned files: 500429
Ignored items: 968
Suspicious matches: 186
Viruses found: 0
Fingerprint matches: 8
Data scanned: 22245.09 MB
Scan peak memory: 400212 kB
Scan time/item: 0.021 sec
Scan time: 11179.942 sec