----------- SCAN REPORT ----------- TimeStamp: Wed, 9 Dec 2015 16:17:22 +0200 (/usr/sbin/cxs --nobayes --clamdsock /var/clamd --defapache nobody --doptions Mv --exploitscan --nofallback --filemax 10000 --html --ignore /etc/cxs/cxs.ignore --logfile /var/log/cxs.log --options mMOLfSGchednRD --qoptions Mv --report /var/log/cxs.scan --sizemax 500000 --ssl --nosummary --sversionscan --timemax 30 --user h3kroko --virusscan --voptions T --www) Scanning /home3/h3kroko/public_html: '/home3/h3kroko/public_html/scan/crap-folder/crap/agr.php' # Known exploit = [Fingerprint Match] [PHP Exploit] '/home3/h3kroko/public_html/scan/crap-folder/crap/fr.php' # Known exploit = [Fingerprint Match] [PHP Upload Exploit [P0898]] '/home3/h3kroko/public_html/scan/crap-folder/crap/cache/eeg.php' # Known exploit = [Fingerprint Match] [PHP Exploit] '/home3/h3kroko/public_html/scan/crap-folder/crap/cache/blogs/rom.php' # Known exploit = [Fingerprint Match] [PHP Exploit] '/home3/h3kroko/public_html/scan/wp-content/cache/supercache/www.retailers.ro' # Suspicious directory '/home3/h3kroko/public_html/scan/wp-content/plugins/sam-images/spe.php' # Known exploit = [Fingerprint Match] [PHP Shell Exploit [P0297]] '/home3/h3kroko/public_html/scan/wp-content/plugins/sam-images/wpa.php' # Known exploit = [Fingerprint Match] [PHP Shell Exploit] '/home3/h3kroko/public_html/scan/wp-content/plugins/sam-images/y0hf2y.php' # Known exploit = [Fingerprint Match] [PHP Shell Exploit] '/home3/h3kroko/public_html/scan/wp-content/plugins/sam-images/ytae6i.php' # Known exploit = [Fingerprint Match] [PHP Shell Exploit] '/home3/h3kroko/public_html/scan/wp-content/uploads/2013/03/index.php' # Known exploit = [Fingerprint Match] [PHP Shell Exploit] '/home3/h3kroko/public_html/scan/wp-content/uploads/2013/03/wp-index.php' # Known exploit = [Fingerprint Match] [PHP Shell Exploit] '/home3/h3kroko/public_html/scan/wp-content/uploads/2013/04/index.php' # Known exploit = [Fingerprint Match] [PHP Shell Exploit] '/home3/h3kroko/public_html/scan/wp-content/uploads/2013/04/wp-index.php' # Known exploit = [Fingerprint Match] [PHP Shell Exploit] '/home3/h3kroko/public_html/scan/wp-content/uploads/2013/05/index.php' # Known exploit = [Fingerprint Match] [PHP Shell Exploit] '/home3/h3kroko/public_html/scan/wp-content/uploads/2013/05/wp-index.php' # Known exploit = [Fingerprint Match] [PHP Shell Exploit] '/home3/h3kroko/public_html/scan/wp-content/uploads/2013/06/index.php' # Known exploit = [Fingerprint Match] [PHP Shell Exploit] '/home3/h3kroko/public_html/scan/wp-content/uploads/2013/06/wp-index.php' # Known exploit = [Fingerprint Match] [PHP Shell Exploit] '/home3/h3kroko/public_html/scan/wp-content/uploads/2013/07/index.php' # Known exploit = [Fingerprint Match] [PHP Shell Exploit] '/home3/h3kroko/public_html/scan/wp-content/uploads/2013/07/wp-index.php' # Known exploit = [Fingerprint Match] [PHP Shell Exploit] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/t44.php' # Known exploit = [Fingerprint Match] [PHP Wordpress Backdoor [P1003]] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/03/index.php' # Known exploit = [Fingerprint Match] [PHP Shell Exploit] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/03/wp-index.php' # Known exploit = [Fingerprint Match] [PHP Shell Exploit] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/04/index.php' # Known exploit = [Fingerprint Match] [PHP Shell Exploit] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/04/wp-index.php' # Known exploit = [Fingerprint Match] [PHP Shell Exploit] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/05/index.php' # Known exploit = [Fingerprint Match] [PHP Shell Exploit] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/05/wp-index.php' # Known exploit = [Fingerprint Match] [PHP Shell Exploit] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/index.php' # Known exploit = [Fingerprint Match] [PHP Shell Exploit] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsad07fHvt' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsad0fCZuZ' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsad1MXcZp' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsad2tXGRA' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsad2uivxG' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsad2ujzoU' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsad3Ufd5Z' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsad3ZJh40' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsad3lJmzD' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsad43zBF9' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsad4yIZ1B' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsad5PRqSo' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsad5TqR5c' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsad6ZPE6g' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsad7Ah559' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsad7EGrtQ' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsad7clwSY' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsad7hLfpj' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsad8MQI74' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsad8QNPCu' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsad8TIUbq' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsad8squDp' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsad8xVZf7' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsad9OSy5u' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsad9puucq' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadA0XWkJ' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadAE460d' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadAI8PfK' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadAMPD4L' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadAhuS2t' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadB3sK1f' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadB565jO' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadBC7A4G' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadBq3M15' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadC6dvU2' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadCWQWlB' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadCY2Bb9' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadDKqDn9' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadE3LZvg' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadESQ8z7' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadGPRzIa' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadGrwDJa' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadH5BSNC' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadH5T2Fj' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadJOHqMX' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadKHY7f1' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadKLSclP' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadM1meYx' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadMDwkZc' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadMFxcJZ' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadNGkmYM' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadNiPzs0' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadNnN8Qi' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadNw8Hce' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadOTVvcw' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadOqJ5rY' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadPLGiY3' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadQu9VIG' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadR4KDYf' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadRFHPIL' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadRQDcBc' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadRrCFM2' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadUQ1iCp' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadUdQVWV' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadUg5uEG' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadUriCRN' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadUttpQM' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadVc1Zy4' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadVtYlwO' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadW1NFGX' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadWM0xJW' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadWvL6x6' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadXgqjf6' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadXlxCeI' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadXmxxkN' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadY1yGZo' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadZapIOH' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadaEfVEg' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadaOaV2X' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadaawDsS' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadabraVK' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadbGKfzM' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadbP5ZvB' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadbdmzJ1' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsaddKYdn0' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsaddMXCLt' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsaddNqSOT' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsaddflEz9' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadeL6MWX' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadebH064' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadfxwFz6' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadgB1vZ1' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadgNzcDY' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadgRZYnD' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadh91Hme' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadi3DNOh' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadiVaBcg' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadilHlp9' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadiovhJT' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadiztFhK' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadj0oIKQ' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadjEVEN2' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadjcV2LT' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadk4mIVe' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadkpugaF' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadlHBPt7' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadlTUL6o' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadlsTaEZ' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadm7gmb0' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadmyVoXg' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadn54s3X' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadn9NX45' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadnMme77' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadoBE2Yt' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadoDfb1z' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadoGnNXm' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadoaQhdg' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadq5JZ0T' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadrG6o9Z' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadrbVM1L' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsads0GS5v' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsads4OKJ0' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadsFl2RP' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadsxf7J5' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadtBY6U3' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadtEbb3d' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsaduPKtRz' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadudzTiI' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadvVES0M' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadvcMCfU' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadwUjFsY' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadxBWY7N' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadxtNs0g' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadyXeUy1' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadyYJXEd' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadynfZHT' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadyuYOXi' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/tetqwqsadzaMO0V' # Regular expression match = [decode regex: 10] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/06/wp-index.php' # Known exploit = [Fingerprint Match] [PHP Shell Exploit] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/07/index.php' # Known exploit = [Fingerprint Match] [PHP Shell Exploit] '/home3/h3kroko/public_html/scan/wp-content/uploads/2014/07/wp-index.php' # Known exploit = [Fingerprint Match] [PHP Shell Exploit] '/home3/h3kroko/public_html/scan/wp-content/uploads/wysija/temp/temp.php' # Known exploit = [Fingerprint Match] [PHP Shell Exploit] '/home3/h3kroko/public_html/scan/wp-content/uploads/wysija/temp/wp-index.php' # Known exploit = [Fingerprint Match] [PHP Shell Exploit] '/home3/h3kroko/public_html/scan/wp-content/uploads/wysija/themes/MPEvSCeSNG/XJHzcNkbuo.php' # ClamAV detected virus = [Php.Trojan.MSShellcode-8] '/home3/h3kroko/public_html/scan/wp-content/uploads/wysija/themes/default3/index.php' # Regular expression match = [\b(system|exec|passthru|shell_exec)\s*\(\s*\$_(GET|POST|GLOBALS|SERVER|REQUEST|SESSION|ENV|COOKIE)\[] '/home3/h3kroko/public_html/scan/wp-content/uploads/wysija/themes/oljoHbDnRM/gqPljiBkII.php' # ClamAV detected virus = [Php.Trojan.MSShellcode-8] '/home3/h3kroko/public_html/scan/wp-content/uploads/wysija/themes/wp/sql.php' # Known exploit = [Fingerprint Match] [PHP Shell Exploit] '/home3/h3kroko/public_html/scan/wp-content/uploads/wysija/themes/xeojsm/xm.php' # Regular expression match = [decode regex: 1] # (decoded file [depth: 1]) Known exploit = [Fingerprint Match] [PHP Shell Exploit [P0024]] # (decoded file [depth: 2]) ClamAV detected virus = [PHP.Shell-38] '/home3/h3kroko/public_html/scan/wp-includes/version.php' # Script version check [OLD] [Wordpress v4.3 < v4.3.1]