ヤミRoot VoidGate
User / IP
:
216.73.216.49
Host / Server
:
146.88.233.70 / www.dev.loger.cm
System
:
Linux hybrid1120.fr.ns.planethoster.net 3.10.0-957.21.2.el7.x86_64 #1 SMP Wed Jun 5 14:26:44 UTC 2019 x86_64
Command
|
Upload
|
Create
Mass Deface
|
Jumping
|
Symlink
|
Reverse Shell
Ping
|
Port Scan
|
DNS Lookup
|
Whois
|
Header
|
cURL
:
/
usr
/
local
/
maldetect.bk11234
/
logs
/
Viewing: event_log
Mar 15 2025 03:07:23 hybrid1120 maldet(21525): {sigup} performing signature update check... Mar 15 2025 03:07:23 hybrid1120 maldet(21525): {sigup} local signature set is version 20250225482944 Mar 15 2025 03:07:45 hybrid1120 maldet(21525): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 15 2025 03:07:45 hybrid1120 maldet(21525): {sigup} new signature set 20250313525494 available Mar 15 2025 03:07:45 hybrid1120 maldet(21525): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 15 2025 03:08:08 hybrid1120 maldet(21525): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 15 2025 03:08:22 hybrid1120 maldet(21525): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 15 2025 03:08:22 hybrid1120 maldet(21525): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 15 2025 03:08:28 hybrid1120 maldet(21525): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 15 2025 03:08:31 hybrid1120 maldet(21525): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 15 2025 03:08:31 hybrid1120 maldet(21525): {sigup} verified md5sum of maldet-sigpack.tgz Mar 15 2025 03:08:32 hybrid1120 maldet(21525): {sigup} unpacked and installed maldet-sigpack.tgz Mar 15 2025 03:08:32 hybrid1120 maldet(21525): {sigup} verified md5sum of maldet-clean.tgz Mar 15 2025 03:08:32 hybrid1120 maldet(21525): {sigup} unpacked and installed maldet-clean.tgz Mar 15 2025 03:08:32 hybrid1120 maldet(21525): {sigup} signature set update completed Mar 15 2025 03:08:32 hybrid1120 maldet(21525): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 15 2025 03:08:32 hybrid1120 maldet(19413): {update} completed update v1.6.6 3a1792 => v1.6.6 359d25, running signature updates... Mar 15 2025 03:08:32 hybrid1120 maldet(22004): {sigup} performing signature update check... Mar 15 2025 03:08:32 hybrid1120 maldet(22004): {sigup} local signature set is version 20250313525494 Mar 15 2025 03:08:33 hybrid1120 maldet(22004): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 15 2025 03:08:33 hybrid1120 maldet(22004): {sigup} latest signature set already installed Mar 15 2025 03:08:33 hybrid1120 maldet(19413): {update} update and config import completed Mar 15 2025 03:08:33 hybrid1120 maldet(22097): {sigup} performing signature update check... Mar 15 2025 03:08:33 hybrid1120 maldet(22097): {sigup} local signature set is version 20250313525494 Mar 15 2025 03:08:34 hybrid1120 maldet(22097): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 15 2025 03:08:34 hybrid1120 maldet(22097): {sigup} latest signature set already installed Mar 15 2025 03:08:34 hybrid1120 maldet(22185): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 15 2025 03:08:34 hybrid1120 maldet(22185): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 15 2025 03:08:34 hybrid1120 maldet(22185): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 15 2025 03:08:34 hybrid1120 maldet(22185): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 15 2025 03:08:34 hybrid1120 maldet(22185): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 15 2025 03:15:22 hybrid1120 maldet(22185): {scan} file list completed in 408s, found 1530 files... Mar 15 2025 03:15:22 hybrid1120 maldet(22185): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1530 files) in progress... Mar 15 2025 03:16:08 hybrid1120 maldet(22185): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1530, malware hits 0, cleaned hits 0, time 454s Mar 15 2025 03:16:08 hybrid1120 maldet(22185): {scan} scan report saved, to view run: maldet --report 250315-0308.22185 Mar 16 2025 04:44:37 hybrid1120 maldet(10948): {update} checking for available updates... Mar 16 2025 04:44:37 hybrid1120 maldet(10948): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 16 2025 04:44:37 hybrid1120 maldet(10948): {update} hashing install files and checking against server... Mar 16 2025 04:44:38 hybrid1120 maldet(10948): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 16 2025 04:44:38 hybrid1120 maldet(10948): {update} latest version already installed. Mar 16 2025 04:44:38 hybrid1120 maldet(11058): {sigup} performing signature update check... Mar 16 2025 04:44:38 hybrid1120 maldet(11058): {sigup} local signature set is version 20250313525494 Mar 16 2025 04:44:38 hybrid1120 maldet(11058): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 16 2025 04:44:39 hybrid1120 maldet(11058): {sigup} latest signature set already installed Mar 16 2025 04:44:39 hybrid1120 maldet(11146): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 16 2025 04:44:39 hybrid1120 maldet(11146): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 16 2025 04:44:39 hybrid1120 maldet(11146): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 16 2025 04:44:39 hybrid1120 maldet(11146): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 16 2025 04:44:39 hybrid1120 maldet(11146): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 16 2025 04:50:59 hybrid1120 maldet(11146): {scan} file list completed in 380s, found 1232 files... Mar 16 2025 04:50:59 hybrid1120 maldet(11146): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1232 files) in progress... Mar 16 2025 04:51:40 hybrid1120 maldet(11146): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1232, malware hits 0, cleaned hits 0, time 421s Mar 16 2025 04:51:40 hybrid1120 maldet(11146): {scan} scan report saved, to view run: maldet --report 250316-0444.11146 Mar 17 2025 02:25:21 hybrid1120 maldet(4100): {update} checking for available updates... Mar 17 2025 02:25:22 hybrid1120 maldet(4100): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 17 2025 02:25:22 hybrid1120 maldet(4100): {update} hashing install files and checking against server... Mar 17 2025 02:25:23 hybrid1120 maldet(4100): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 17 2025 02:25:23 hybrid1120 maldet(4100): {update} latest version already installed. Mar 17 2025 02:25:23 hybrid1120 maldet(4227): {sigup} performing signature update check... Mar 17 2025 02:25:23 hybrid1120 maldet(4227): {sigup} local signature set is version 20250313525494 Mar 17 2025 02:25:23 hybrid1120 maldet(4227): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 17 2025 02:25:23 hybrid1120 maldet(4227): {sigup} new signature set 20250316483998 available Mar 17 2025 02:25:23 hybrid1120 maldet(4227): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 17 2025 02:25:24 hybrid1120 maldet(4227): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 17 2025 02:25:25 hybrid1120 maldet(4227): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 17 2025 02:25:25 hybrid1120 maldet(4227): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 17 2025 02:25:25 hybrid1120 maldet(4227): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 17 2025 02:25:26 hybrid1120 maldet(4227): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 17 2025 02:25:26 hybrid1120 maldet(4227): {sigup} verified md5sum of maldet-sigpack.tgz Mar 17 2025 02:25:26 hybrid1120 maldet(4227): {sigup} unpacked and installed maldet-sigpack.tgz Mar 17 2025 02:25:26 hybrid1120 maldet(4227): {sigup} verified md5sum of maldet-clean.tgz Mar 17 2025 02:25:26 hybrid1120 maldet(4227): {sigup} unpacked and installed maldet-clean.tgz Mar 17 2025 02:25:26 hybrid1120 maldet(4227): {sigup} signature set update completed Mar 17 2025 02:25:26 hybrid1120 maldet(4227): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 17 2025 02:25:26 hybrid1120 maldet(4458): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 17 2025 02:25:27 hybrid1120 maldet(4458): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 17 2025 02:25:27 hybrid1120 maldet(4458): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 17 2025 02:25:27 hybrid1120 maldet(4458): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 17 2025 02:25:27 hybrid1120 maldet(4458): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 17 2025 02:31:56 hybrid1120 maldet(4458): {scan} file list completed in 389s, found 2282 files... Mar 17 2025 02:31:56 hybrid1120 maldet(4458): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2282 files) in progress... Mar 17 2025 02:33:10 hybrid1120 maldet(4458): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2282, malware hits 0, cleaned hits 0, time 464s Mar 17 2025 02:33:10 hybrid1120 maldet(4458): {scan} scan report saved, to view run: maldet --report 250317-0225.4458 Mar 18 2025 04:10:08 hybrid1120 maldet(982): {update} checking for available updates... Mar 18 2025 04:10:09 hybrid1120 maldet(982): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 18 2025 04:10:09 hybrid1120 maldet(982): {update} hashing install files and checking against server... Mar 18 2025 04:10:09 hybrid1120 maldet(982): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 18 2025 04:10:09 hybrid1120 maldet(982): {update} latest version already installed. Mar 18 2025 04:10:09 hybrid1120 maldet(1101): {sigup} performing signature update check... Mar 18 2025 04:10:09 hybrid1120 maldet(1101): {sigup} local signature set is version 20250316483998 Mar 18 2025 04:10:10 hybrid1120 maldet(1101): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 18 2025 04:10:10 hybrid1120 maldet(1101): {sigup} latest signature set already installed Mar 18 2025 04:10:10 hybrid1120 maldet(1194): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 18 2025 04:10:11 hybrid1120 maldet(1194): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 18 2025 04:10:11 hybrid1120 maldet(1194): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 18 2025 04:10:11 hybrid1120 maldet(1194): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 18 2025 04:10:11 hybrid1120 maldet(1194): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 18 2025 04:17:05 hybrid1120 maldet(1194): {scan} file list completed in 414s, found 2193 files... Mar 18 2025 04:17:05 hybrid1120 maldet(1194): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2193 files) in progress... Mar 18 2025 04:18:14 hybrid1120 maldet(1194): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2193, malware hits 0, cleaned hits 0, time 484s Mar 18 2025 04:18:14 hybrid1120 maldet(1194): {scan} scan report saved, to view run: maldet --report 250318-0410.1194 Mar 19 2025 02:44:54 hybrid1120 maldet(32758): {update} checking for available updates... Mar 19 2025 02:44:54 hybrid1120 maldet(32758): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 19 2025 02:44:54 hybrid1120 maldet(32758): {update} hashing install files and checking against server... Mar 19 2025 02:44:55 hybrid1120 maldet(32758): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 19 2025 02:44:55 hybrid1120 maldet(32758): {update} latest version already installed. Mar 19 2025 02:44:55 hybrid1120 maldet(418): {sigup} performing signature update check... Mar 19 2025 02:44:55 hybrid1120 maldet(418): {sigup} local signature set is version 20250316483998 Mar 19 2025 02:44:55 hybrid1120 maldet(418): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 19 2025 02:44:55 hybrid1120 maldet(418): {sigup} latest signature set already installed Mar 19 2025 02:44:56 hybrid1120 maldet(510): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 19 2025 02:44:56 hybrid1120 maldet(510): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 19 2025 02:44:56 hybrid1120 maldet(510): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 19 2025 02:44:56 hybrid1120 maldet(510): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 19 2025 02:44:56 hybrid1120 maldet(510): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 19 2025 02:51:10 hybrid1120 maldet(510): {scan} file list completed in 374s, found 2043 files... Mar 19 2025 02:51:10 hybrid1120 maldet(510): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2043 files) in progress... Mar 19 2025 02:52:10 hybrid1120 maldet(510): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2043, malware hits 0, cleaned hits 0, time 434s Mar 19 2025 02:52:10 hybrid1120 maldet(510): {scan} scan report saved, to view run: maldet --report 250319-0244.510 Mar 20 2025 03:14:34 hybrid1120 maldet(2970): {update} checking for available updates... Mar 20 2025 03:14:34 hybrid1120 maldet(2970): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 20 2025 03:14:34 hybrid1120 maldet(2970): {update} hashing install files and checking against server... Mar 20 2025 03:14:35 hybrid1120 maldet(2970): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 20 2025 03:14:35 hybrid1120 maldet(2970): {update} latest version already installed. Mar 20 2025 03:14:35 hybrid1120 maldet(3084): {sigup} performing signature update check... Mar 20 2025 03:14:35 hybrid1120 maldet(3084): {sigup} local signature set is version 20250316483998 Mar 20 2025 03:14:36 hybrid1120 maldet(3084): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 20 2025 03:14:36 hybrid1120 maldet(3084): {sigup} new signature set 20250319514026 available Mar 20 2025 03:14:36 hybrid1120 maldet(3084): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 20 2025 03:14:37 hybrid1120 maldet(3084): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 20 2025 03:14:37 hybrid1120 maldet(3084): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 20 2025 03:14:37 hybrid1120 maldet(3084): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 20 2025 03:14:38 hybrid1120 maldet(3084): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 20 2025 03:14:38 hybrid1120 maldet(3084): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 20 2025 03:14:38 hybrid1120 maldet(3084): {sigup} verified md5sum of maldet-sigpack.tgz Mar 20 2025 03:14:38 hybrid1120 maldet(3084): {sigup} unpacked and installed maldet-sigpack.tgz Mar 20 2025 03:14:39 hybrid1120 maldet(3084): {sigup} verified md5sum of maldet-clean.tgz Mar 20 2025 03:14:39 hybrid1120 maldet(3084): {sigup} unpacked and installed maldet-clean.tgz Mar 20 2025 03:14:39 hybrid1120 maldet(3084): {sigup} signature set update completed Mar 20 2025 03:14:39 hybrid1120 maldet(3084): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 20 2025 03:14:39 hybrid1120 maldet(3326): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 20 2025 03:14:39 hybrid1120 maldet(3326): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 20 2025 03:14:39 hybrid1120 maldet(3326): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 20 2025 03:14:39 hybrid1120 maldet(3326): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 20 2025 03:14:39 hybrid1120 maldet(3326): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 20 2025 03:19:05 hybrid1120 maldet(3326): {scan} file list completed in 266s, found 2072 files... Mar 20 2025 03:19:05 hybrid1120 maldet(3326): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2072 files) in progress... Mar 20 2025 03:20:09 hybrid1120 maldet(3326): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2072, malware hits 0, cleaned hits 0, time 329s Mar 20 2025 03:20:09 hybrid1120 maldet(3326): {scan} scan report saved, to view run: maldet --report 250320-0314.3326 Mar 21 2025 03:12:49 hybrid1120 maldet(27422): {update} checking for available updates... Mar 21 2025 03:12:50 hybrid1120 maldet(27422): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 21 2025 03:12:50 hybrid1120 maldet(27422): {update} hashing install files and checking against server... Mar 21 2025 03:12:50 hybrid1120 maldet(27422): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 21 2025 03:12:50 hybrid1120 maldet(27422): {update} latest version already installed. Mar 21 2025 03:12:50 hybrid1120 maldet(27538): {sigup} performing signature update check... Mar 21 2025 03:12:51 hybrid1120 maldet(27538): {sigup} local signature set is version 20250319514026 Mar 21 2025 03:12:51 hybrid1120 maldet(27538): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 21 2025 03:12:51 hybrid1120 maldet(27538): {sigup} latest signature set already installed Mar 21 2025 03:12:51 hybrid1120 maldet(27628): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 21 2025 03:12:52 hybrid1120 maldet(27628): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 21 2025 03:12:52 hybrid1120 maldet(27628): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 21 2025 03:12:52 hybrid1120 maldet(27628): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 21 2025 03:12:52 hybrid1120 maldet(27628): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 21 2025 03:19:05 hybrid1120 maldet(27628): {scan} file list completed in 373s, found 1902 files... Mar 21 2025 03:19:05 hybrid1120 maldet(27628): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1902 files) in progress... Mar 21 2025 03:20:10 hybrid1120 maldet(27628): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1902, malware hits 0, cleaned hits 0, time 439s Mar 21 2025 03:20:10 hybrid1120 maldet(27628): {scan} scan report saved, to view run: maldet --report 250321-0312.27628 Mar 22 2025 02:48:29 hybrid1120 maldet(12297): {update} checking for available updates... Mar 22 2025 02:48:30 hybrid1120 maldet(12297): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 22 2025 02:48:30 hybrid1120 maldet(12297): {update} hashing install files and checking against server... Mar 22 2025 02:48:30 hybrid1120 maldet(12297): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 22 2025 02:48:30 hybrid1120 maldet(12297): {update} latest version already installed. Mar 22 2025 02:48:30 hybrid1120 maldet(12413): {sigup} performing signature update check... Mar 22 2025 02:48:30 hybrid1120 maldet(12413): {sigup} local signature set is version 20250319514026 Mar 22 2025 02:48:31 hybrid1120 maldet(12413): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 22 2025 02:48:31 hybrid1120 maldet(12413): {sigup} latest signature set already installed Mar 22 2025 02:48:31 hybrid1120 maldet(12502): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 22 2025 02:48:32 hybrid1120 maldet(12502): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 22 2025 02:48:32 hybrid1120 maldet(12502): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 22 2025 02:48:32 hybrid1120 maldet(12502): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 22 2025 02:48:32 hybrid1120 maldet(12502): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 22 2025 02:54:22 hybrid1120 maldet(12502): {scan} file list completed in 350s, found 1330 files... Mar 22 2025 02:54:22 hybrid1120 maldet(12502): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1330 files) in progress... Mar 22 2025 02:55:01 hybrid1120 maldet(12502): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1330, malware hits 0, cleaned hits 0, time 390s Mar 22 2025 02:55:01 hybrid1120 maldet(12502): {scan} scan report saved, to view run: maldet --report 250322-0248.12502 Mar 23 2025 03:03:28 hybrid1120 maldet(2812): {update} checking for available updates... Mar 23 2025 03:05:18 hybrid1120 maldet(2812): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 23 2025 03:05:18 hybrid1120 maldet(2812): {update} hashing install files and checking against server... Mar 23 2025 03:08:06 hybrid1120 maldet(2812): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 23 2025 03:08:06 hybrid1120 maldet(2812): {update} latest version already installed. Mar 23 2025 03:08:06 hybrid1120 maldet(4676): {sigup} performing signature update check... Mar 23 2025 03:08:06 hybrid1120 maldet(4676): {sigup} local signature set is version 20250319514026 Mar 23 2025 03:08:27 hybrid1120 maldet(4676): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 23 2025 03:08:27 hybrid1120 maldet(4676): {sigup} new signature set 202503221188379 available Mar 23 2025 03:08:27 hybrid1120 maldet(4676): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 23 2025 03:08:43 hybrid1120 maldet(4676): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 23 2025 03:08:54 hybrid1120 maldet(4676): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 23 2025 03:08:54 hybrid1120 maldet(4676): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 23 2025 03:09:03 hybrid1120 maldet(4676): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 23 2025 03:09:10 hybrid1120 maldet(4676): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 23 2025 03:09:10 hybrid1120 maldet(4676): {sigup} verified md5sum of maldet-sigpack.tgz Mar 23 2025 03:09:10 hybrid1120 maldet(4676): {sigup} unpacked and installed maldet-sigpack.tgz Mar 23 2025 03:09:10 hybrid1120 maldet(4676): {sigup} verified md5sum of maldet-clean.tgz Mar 23 2025 03:09:10 hybrid1120 maldet(4676): {sigup} unpacked and installed maldet-clean.tgz Mar 23 2025 03:09:10 hybrid1120 maldet(4676): {sigup} signature set update completed Mar 23 2025 03:09:11 hybrid1120 maldet(4676): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 23 2025 03:09:11 hybrid1120 maldet(5280): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 23 2025 03:09:11 hybrid1120 maldet(5280): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 23 2025 03:09:11 hybrid1120 maldet(5280): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 23 2025 03:09:11 hybrid1120 maldet(5280): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 23 2025 03:09:11 hybrid1120 maldet(5280): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 23 2025 03:16:40 hybrid1120 maldet(5280): {scan} file list completed in 449s, found 4271 files... Mar 23 2025 03:16:40 hybrid1120 maldet(5280): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (4271 files) in progress... Mar 23 2025 03:18:53 hybrid1120 maldet(5280): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 4271, malware hits 0, cleaned hits 0, time 582s Mar 23 2025 03:18:53 hybrid1120 maldet(5280): {scan} scan report saved, to view run: maldet --report 250323-0309.5280 Mar 24 2025 03:03:47 hybrid1120 maldet(14962): {update} checking for available updates... Mar 24 2025 03:05:37 hybrid1120 maldet(14962): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 24 2025 03:05:37 hybrid1120 maldet(14962): {update} hashing install files and checking against server... Mar 24 2025 03:06:04 hybrid1120 maldet(14962): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 24 2025 03:06:04 hybrid1120 maldet(14962): {update} latest version already installed. Mar 24 2025 03:06:04 hybrid1120 maldet(16700): {sigup} performing signature update check... Mar 24 2025 03:06:04 hybrid1120 maldet(16700): {sigup} local signature set is version 202503221188379 Mar 24 2025 03:06:43 hybrid1120 maldet(16700): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 24 2025 03:06:43 hybrid1120 maldet(16700): {sigup} new signature set error code: 522 available Mar 24 2025 03:06:43 hybrid1120 maldet(16700): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 24 2025 03:07:09 hybrid1120 maldet(16700): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 24 2025 03:07:53 hybrid1120 maldet(16700): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 24 2025 03:07:53 hybrid1120 maldet(16700): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 24 2025 03:08:15 hybrid1120 maldet(16700): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 24 2025 03:08:28 hybrid1120 maldet(16700): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 24 2025 03:08:28 hybrid1120 maldet(16700): {sigup} verified md5sum of maldet-sigpack.tgz Mar 24 2025 03:08:29 hybrid1120 maldet(16700): {sigup} unpacked and installed maldet-sigpack.tgz Mar 24 2025 03:08:29 hybrid1120 maldet(16700): {sigup} verified md5sum of maldet-clean.tgz Mar 24 2025 03:08:29 hybrid1120 maldet(16700): {sigup} unpacked and installed maldet-clean.tgz Mar 24 2025 03:08:29 hybrid1120 maldet(16700): {sigup} signature set update completed Mar 24 2025 03:08:29 hybrid1120 maldet(16700): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 24 2025 03:08:29 hybrid1120 maldet(18053): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 24 2025 03:08:29 hybrid1120 maldet(18053): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 24 2025 03:08:29 hybrid1120 maldet(18053): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 24 2025 03:08:29 hybrid1120 maldet(18053): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 24 2025 03:08:29 hybrid1120 maldet(18053): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 24 2025 03:15:21 hybrid1120 maldet(18053): {scan} file list completed in 412s, found 1945 files... Mar 24 2025 03:15:21 hybrid1120 maldet(18053): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1945 files) in progress... Mar 24 2025 03:16:27 hybrid1120 maldet(18053): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1945, malware hits 0, cleaned hits 0, time 478s Mar 24 2025 03:16:27 hybrid1120 maldet(18053): {scan} scan report saved, to view run: maldet --report 250324-0308.18053 Mar 25 2025 05:17:43 hybrid1120 maldet(16440): {update} checking for available updates... Mar 25 2025 05:17:44 hybrid1120 maldet(16440): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 25 2025 05:17:44 hybrid1120 maldet(16440): {update} hashing install files and checking against server... Mar 25 2025 05:17:44 hybrid1120 maldet(16440): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 25 2025 05:17:44 hybrid1120 maldet(16440): {update} latest version already installed. Mar 25 2025 05:17:44 hybrid1120 maldet(16553): {sigup} performing signature update check... Mar 25 2025 05:17:44 hybrid1120 maldet(16553): {sigup} local signature set is version 202503221188379 Mar 25 2025 05:17:45 hybrid1120 maldet(16553): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 25 2025 05:17:45 hybrid1120 maldet(16553): {sigup} latest signature set already installed Mar 25 2025 05:17:45 hybrid1120 maldet(16643): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 25 2025 05:17:46 hybrid1120 maldet(16643): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 25 2025 05:17:46 hybrid1120 maldet(16643): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 25 2025 05:17:46 hybrid1120 maldet(16643): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 25 2025 05:17:46 hybrid1120 maldet(16643): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 25 2025 05:22:47 hybrid1120 maldet(16643): {scan} file list completed in 301s, found 1440 files... Mar 25 2025 05:22:47 hybrid1120 maldet(16643): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1440 files) in progress... Mar 25 2025 05:23:35 hybrid1120 maldet(16643): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1440, malware hits 0, cleaned hits 0, time 350s Mar 25 2025 05:23:35 hybrid1120 maldet(16643): {scan} scan report saved, to view run: maldet --report 250325-0517.16643 Mar 26 2025 02:16:16 hybrid1120 maldet(8653): {update} checking for available updates... Mar 26 2025 02:16:16 hybrid1120 maldet(8653): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 26 2025 02:16:16 hybrid1120 maldet(8653): {update} hashing install files and checking against server... Mar 26 2025 02:16:17 hybrid1120 maldet(8653): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 26 2025 02:16:17 hybrid1120 maldet(8653): {update} latest version already installed. Mar 26 2025 02:16:17 hybrid1120 maldet(8767): {sigup} performing signature update check... Mar 26 2025 02:16:17 hybrid1120 maldet(8767): {sigup} local signature set is version 202503221188379 Mar 26 2025 02:16:17 hybrid1120 maldet(8767): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 26 2025 02:16:18 hybrid1120 maldet(8767): {sigup} new signature set 202503251862979 available Mar 26 2025 02:16:18 hybrid1120 maldet(8767): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 26 2025 02:16:19 hybrid1120 maldet(8767): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 26 2025 02:16:20 hybrid1120 maldet(8767): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 26 2025 02:16:20 hybrid1120 maldet(8767): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 26 2025 02:16:20 hybrid1120 maldet(8767): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 26 2025 02:16:21 hybrid1120 maldet(8767): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 26 2025 02:16:21 hybrid1120 maldet(8767): {sigup} verified md5sum of maldet-sigpack.tgz Mar 26 2025 02:16:21 hybrid1120 maldet(8767): {sigup} unpacked and installed maldet-sigpack.tgz Mar 26 2025 02:16:21 hybrid1120 maldet(8767): {sigup} verified md5sum of maldet-clean.tgz Mar 26 2025 02:16:21 hybrid1120 maldet(8767): {sigup} unpacked and installed maldet-clean.tgz Mar 26 2025 02:16:21 hybrid1120 maldet(8767): {sigup} signature set update completed Mar 26 2025 02:16:21 hybrid1120 maldet(8767): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 26 2025 02:16:21 hybrid1120 maldet(9020): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 26 2025 02:16:22 hybrid1120 maldet(9020): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 26 2025 02:16:22 hybrid1120 maldet(9020): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 26 2025 02:16:22 hybrid1120 maldet(9020): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 26 2025 02:16:22 hybrid1120 maldet(9020): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 26 2025 02:23:00 hybrid1120 maldet(9020): {scan} file list completed in 398s, found 1971 files... Mar 26 2025 02:23:00 hybrid1120 maldet(9020): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1971 files) in progress... Mar 26 2025 02:24:06 hybrid1120 maldet(9020): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1971, malware hits 0, cleaned hits 0, time 465s Mar 26 2025 02:24:06 hybrid1120 maldet(9020): {scan} scan report saved, to view run: maldet --report 250326-0216.9020 Mar 27 2025 04:36:58 hybrid1120 maldet(16485): {update} checking for available updates... Mar 27 2025 04:36:58 hybrid1120 maldet(16485): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 27 2025 04:36:58 hybrid1120 maldet(16485): {update} hashing install files and checking against server... Mar 27 2025 04:36:59 hybrid1120 maldet(16485): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 27 2025 04:36:59 hybrid1120 maldet(16485): {update} latest version already installed. Mar 27 2025 04:36:59 hybrid1120 maldet(16599): {sigup} performing signature update check... Mar 27 2025 04:36:59 hybrid1120 maldet(16599): {sigup} local signature set is version 202503251862979 Mar 27 2025 04:37:00 hybrid1120 maldet(16599): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 27 2025 04:37:00 hybrid1120 maldet(16599): {sigup} latest signature set already installed Mar 27 2025 04:37:00 hybrid1120 maldet(16688): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 27 2025 04:37:00 hybrid1120 maldet(16688): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 27 2025 04:37:00 hybrid1120 maldet(16688): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 27 2025 04:37:00 hybrid1120 maldet(16688): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 27 2025 04:37:00 hybrid1120 maldet(16688): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 27 2025 04:42:08 hybrid1120 maldet(16688): {scan} file list completed in 308s, found 1296 files... Mar 27 2025 04:42:08 hybrid1120 maldet(16688): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1296 files) in progress... Mar 27 2025 04:42:57 hybrid1120 maldet(16688): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1296, malware hits 0, cleaned hits 0, time 357s Mar 27 2025 04:42:57 hybrid1120 maldet(16688): {scan} scan report saved, to view run: maldet --report 250327-0437.16688 Mar 28 2025 04:25:18 hybrid1120 maldet(4373): {update} checking for available updates... Mar 28 2025 04:25:19 hybrid1120 maldet(4373): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 28 2025 04:25:19 hybrid1120 maldet(4373): {update} hashing install files and checking against server... Mar 28 2025 04:25:19 hybrid1120 maldet(4373): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 28 2025 04:25:19 hybrid1120 maldet(4373): {update} latest version already installed. Mar 28 2025 04:25:19 hybrid1120 maldet(4484): {sigup} performing signature update check... Mar 28 2025 04:25:19 hybrid1120 maldet(4484): {sigup} local signature set is version 202503251862979 Mar 28 2025 04:25:20 hybrid1120 maldet(4484): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 28 2025 04:25:20 hybrid1120 maldet(4484): {sigup} latest signature set already installed Mar 28 2025 04:25:20 hybrid1120 maldet(4573): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 28 2025 04:25:20 hybrid1120 maldet(4573): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 28 2025 04:25:20 hybrid1120 maldet(4573): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 28 2025 04:25:20 hybrid1120 maldet(4573): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 28 2025 04:25:20 hybrid1120 maldet(4573): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 28 2025 04:31:07 hybrid1120 maldet(4573): {scan} file list completed in 347s, found 1230 files... Mar 28 2025 04:31:07 hybrid1120 maldet(4573): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1230 files) in progress... Mar 28 2025 04:31:50 hybrid1120 maldet(4573): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1230, malware hits 0, cleaned hits 0, time 390s Mar 28 2025 04:31:50 hybrid1120 maldet(4573): {scan} scan report saved, to view run: maldet --report 250328-0425.4573 Mar 29 2025 02:52:07 hybrid1120 maldet(14391): {update} checking for available updates... Mar 29 2025 02:52:08 hybrid1120 maldet(14391): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 29 2025 02:52:08 hybrid1120 maldet(14391): {update} hashing install files and checking against server... Mar 29 2025 02:52:08 hybrid1120 maldet(14391): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 29 2025 02:52:08 hybrid1120 maldet(14391): {update} latest version already installed. Mar 29 2025 02:52:08 hybrid1120 maldet(14526): {sigup} performing signature update check... Mar 29 2025 02:52:08 hybrid1120 maldet(14526): {sigup} local signature set is version 202503251862979 Mar 29 2025 02:52:09 hybrid1120 maldet(14526): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 29 2025 02:52:09 hybrid1120 maldet(14526): {sigup} new signature set 202503282537907 available Mar 29 2025 02:52:09 hybrid1120 maldet(14526): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 29 2025 02:52:10 hybrid1120 maldet(14526): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 29 2025 02:52:11 hybrid1120 maldet(14526): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 29 2025 02:52:11 hybrid1120 maldet(14526): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 29 2025 02:52:11 hybrid1120 maldet(14526): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 29 2025 02:52:12 hybrid1120 maldet(14526): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 29 2025 02:52:12 hybrid1120 maldet(14526): {sigup} verified md5sum of maldet-sigpack.tgz Mar 29 2025 02:52:12 hybrid1120 maldet(14526): {sigup} unpacked and installed maldet-sigpack.tgz Mar 29 2025 02:52:12 hybrid1120 maldet(14526): {sigup} verified md5sum of maldet-clean.tgz Mar 29 2025 02:52:12 hybrid1120 maldet(14526): {sigup} unpacked and installed maldet-clean.tgz Mar 29 2025 02:52:12 hybrid1120 maldet(14526): {sigup} signature set update completed Mar 29 2025 02:52:12 hybrid1120 maldet(14526): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 29 2025 02:52:12 hybrid1120 maldet(14751): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 29 2025 02:52:13 hybrid1120 maldet(14751): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 29 2025 02:52:13 hybrid1120 maldet(14751): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 29 2025 02:52:13 hybrid1120 maldet(14751): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 29 2025 02:52:13 hybrid1120 maldet(14751): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 29 2025 02:58:29 hybrid1120 maldet(14751): {scan} file list completed in 376s, found 853 files... Mar 29 2025 02:58:29 hybrid1120 maldet(14751): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (853 files) in progress... Mar 29 2025 02:58:57 hybrid1120 maldet(14751): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 853, malware hits 0, cleaned hits 0, time 405s Mar 29 2025 02:58:57 hybrid1120 maldet(14751): {scan} scan report saved, to view run: maldet --report 250329-0252.14751 Mar 30 2025 03:47:57 hybrid1120 maldet(18912): {update} checking for available updates... Mar 30 2025 03:47:57 hybrid1120 maldet(18912): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 30 2025 03:47:57 hybrid1120 maldet(18912): {update} hashing install files and checking against server... Mar 30 2025 03:47:58 hybrid1120 maldet(18912): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 30 2025 03:47:58 hybrid1120 maldet(18912): {update} latest version already installed. Mar 30 2025 03:47:58 hybrid1120 maldet(19037): {sigup} performing signature update check... Mar 30 2025 03:47:58 hybrid1120 maldet(19037): {sigup} local signature set is version 202503282537907 Mar 30 2025 03:47:59 hybrid1120 maldet(19037): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 30 2025 03:47:59 hybrid1120 maldet(19037): {sigup} latest signature set already installed Mar 30 2025 03:47:59 hybrid1120 maldet(19125): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 30 2025 03:47:59 hybrid1120 maldet(19125): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 30 2025 03:47:59 hybrid1120 maldet(19125): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 30 2025 03:47:59 hybrid1120 maldet(19125): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 30 2025 03:47:59 hybrid1120 maldet(19125): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 30 2025 03:54:56 hybrid1120 maldet(19125): {scan} file list completed in 417s, found 996 files... Mar 30 2025 03:54:56 hybrid1120 maldet(19125): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (996 files) in progress... Mar 30 2025 03:55:29 hybrid1120 maldet(19125): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 996, malware hits 0, cleaned hits 0, time 450s Mar 30 2025 03:55:29 hybrid1120 maldet(19125): {scan} scan report saved, to view run: maldet --report 250330-0347.19125 Mar 31 2025 03:43:22 hybrid1120 maldet(26432): {update} checking for available updates... Mar 31 2025 03:43:23 hybrid1120 maldet(26432): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 31 2025 03:43:23 hybrid1120 maldet(26432): {update} hashing install files and checking against server... Mar 31 2025 03:43:23 hybrid1120 maldet(26432): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 31 2025 03:43:23 hybrid1120 maldet(26432): {update} latest version already installed. Mar 31 2025 03:43:23 hybrid1120 maldet(26561): {sigup} performing signature update check... Mar 31 2025 03:43:23 hybrid1120 maldet(26561): {sigup} local signature set is version 202503282537907 Mar 31 2025 03:43:24 hybrid1120 maldet(26561): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 31 2025 03:43:24 hybrid1120 maldet(26561): {sigup} latest signature set already installed Mar 31 2025 03:43:24 hybrid1120 maldet(26670): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 31 2025 03:43:24 hybrid1120 maldet(26670): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 31 2025 03:43:24 hybrid1120 maldet(26670): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 31 2025 03:43:24 hybrid1120 maldet(26670): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 31 2025 03:43:24 hybrid1120 maldet(26670): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 31 2025 03:48:35 hybrid1120 maldet(26670): {scan} file list completed in 311s, found 1091 files... Mar 31 2025 03:48:35 hybrid1120 maldet(26670): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1091 files) in progress... Mar 31 2025 03:49:05 hybrid1120 maldet(26670): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1091, malware hits 0, cleaned hits 0, time 341s Mar 31 2025 03:49:05 hybrid1120 maldet(26670): {scan} scan report saved, to view run: maldet --report 250331-0343.26670 Apr 01 2025 03:08:42 hybrid1120 maldet(3721): {update} checking for available updates... Apr 01 2025 03:09:07 hybrid1120 maldet(3721): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 01 2025 03:09:07 hybrid1120 maldet(3721): {update} hashing install files and checking against server... Apr 01 2025 03:09:33 hybrid1120 maldet(3721): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 01 2025 03:09:33 hybrid1120 maldet(3721): {update} latest version already installed. Apr 01 2025 03:09:33 hybrid1120 maldet(4182): {sigup} performing signature update check... Apr 01 2025 03:09:33 hybrid1120 maldet(4182): {sigup} local signature set is version 202503282537907 Apr 01 2025 03:09:57 hybrid1120 maldet(4182): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 01 2025 03:09:57 hybrid1120 maldet(4182): {sigup} new signature set 202503313275323 available Apr 01 2025 03:09:57 hybrid1120 maldet(4182): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 01 2025 03:10:20 hybrid1120 maldet(4182): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 01 2025 03:10:39 hybrid1120 maldet(4182): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 01 2025 03:10:39 hybrid1120 maldet(4182): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 01 2025 03:10:52 hybrid1120 maldet(4182): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 01 2025 03:11:03 hybrid1120 maldet(4182): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 01 2025 03:11:03 hybrid1120 maldet(4182): {sigup} verified md5sum of maldet-sigpack.tgz Apr 01 2025 03:11:03 hybrid1120 maldet(4182): {sigup} unpacked and installed maldet-sigpack.tgz Apr 01 2025 03:11:04 hybrid1120 maldet(4182): {sigup} verified md5sum of maldet-clean.tgz Apr 01 2025 03:11:04 hybrid1120 maldet(4182): {sigup} unpacked and installed maldet-clean.tgz Apr 01 2025 03:11:04 hybrid1120 maldet(4182): {sigup} signature set update completed Apr 01 2025 03:11:04 hybrid1120 maldet(4182): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 01 2025 03:11:04 hybrid1120 maldet(5219): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 01 2025 03:11:04 hybrid1120 maldet(5219): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 01 2025 03:11:04 hybrid1120 maldet(5219): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 01 2025 03:11:04 hybrid1120 maldet(5219): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 01 2025 03:11:04 hybrid1120 maldet(5219): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 01 2025 03:17:43 hybrid1120 maldet(5219): {scan} file list completed in 399s, found 1575 files... Apr 01 2025 03:17:43 hybrid1120 maldet(5219): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1575 files) in progress... Apr 01 2025 03:18:30 hybrid1120 maldet(5219): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1575, malware hits 0, cleaned hits 0, time 446s Apr 01 2025 03:18:30 hybrid1120 maldet(5219): {scan} scan report saved, to view run: maldet --report 250401-0311.5219 Apr 02 2025 02:31:35 hybrid1120 maldet(929): {update} checking for available updates... Apr 02 2025 02:31:38 hybrid1120 maldet(929): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 02 2025 02:31:38 hybrid1120 maldet(929): {update} hashing install files and checking against server... Apr 02 2025 02:31:44 hybrid1120 maldet(929): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 02 2025 02:31:44 hybrid1120 maldet(929): {update} latest version already installed. Apr 02 2025 02:31:44 hybrid1120 maldet(1083): {sigup} performing signature update check... Apr 02 2025 02:31:44 hybrid1120 maldet(1083): {sigup} local signature set is version 202503313275323 Apr 02 2025 02:31:48 hybrid1120 maldet(1083): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 02 2025 02:31:48 hybrid1120 maldet(1083): {sigup} new signature set 202504013916532 available Apr 02 2025 02:31:48 hybrid1120 maldet(1083): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 02 2025 02:31:50 hybrid1120 maldet(1083): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 02 2025 02:31:55 hybrid1120 maldet(1083): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 02 2025 02:31:55 hybrid1120 maldet(1083): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 02 2025 02:31:59 hybrid1120 maldet(1083): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 02 2025 02:32:05 hybrid1120 maldet(1083): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 02 2025 02:32:05 hybrid1120 maldet(1083): {sigup} verified md5sum of maldet-sigpack.tgz Apr 02 2025 02:32:05 hybrid1120 maldet(1083): {sigup} unpacked and installed maldet-sigpack.tgz Apr 02 2025 02:32:05 hybrid1120 maldet(1083): {sigup} verified md5sum of maldet-clean.tgz Apr 02 2025 02:32:05 hybrid1120 maldet(1083): {sigup} unpacked and installed maldet-clean.tgz Apr 02 2025 02:32:05 hybrid1120 maldet(1083): {sigup} signature set update completed Apr 02 2025 02:32:05 hybrid1120 maldet(1083): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 02 2025 02:32:05 hybrid1120 maldet(1487): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 02 2025 02:32:06 hybrid1120 maldet(1487): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 02 2025 02:32:06 hybrid1120 maldet(1487): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 02 2025 02:32:06 hybrid1120 maldet(1487): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 02 2025 02:32:06 hybrid1120 maldet(1487): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 02 2025 02:38:27 hybrid1120 maldet(1487): {scan} file list completed in 381s, found 1356 files... Apr 02 2025 02:38:27 hybrid1120 maldet(1487): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1356 files) in progress... Apr 02 2025 02:39:14 hybrid1120 maldet(1487): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1356, malware hits 0, cleaned hits 0, time 429s Apr 02 2025 02:39:14 hybrid1120 maldet(1487): {scan} scan report saved, to view run: maldet --report 250402-0232.1487 Apr 03 2025 04:46:25 hybrid1120 maldet(27264): {update} checking for available updates... Apr 03 2025 04:46:25 hybrid1120 maldet(27264): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 03 2025 04:46:25 hybrid1120 maldet(27264): {update} hashing install files and checking against server... Apr 03 2025 04:46:26 hybrid1120 maldet(27264): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 03 2025 04:46:26 hybrid1120 maldet(27264): {update} latest version already installed. Apr 03 2025 04:46:26 hybrid1120 maldet(27374): {sigup} performing signature update check... Apr 03 2025 04:46:26 hybrid1120 maldet(27374): {sigup} local signature set is version 202504013916532 Apr 03 2025 04:46:26 hybrid1120 maldet(27374): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 03 2025 04:46:26 hybrid1120 maldet(27374): {sigup} latest signature set already installed Apr 03 2025 04:46:26 hybrid1120 maldet(27470): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 03 2025 04:46:27 hybrid1120 maldet(27470): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 03 2025 04:46:27 hybrid1120 maldet(27470): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 03 2025 04:46:27 hybrid1120 maldet(27470): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 03 2025 04:46:27 hybrid1120 maldet(27470): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 03 2025 04:50:56 hybrid1120 maldet(27470): {scan} file list completed in 268s, found 2332 files... Apr 03 2025 04:50:56 hybrid1120 maldet(27470): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2332 files) in progress... Apr 03 2025 04:52:03 hybrid1120 maldet(27470): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2332, malware hits 0, cleaned hits 0, time 336s Apr 03 2025 04:52:03 hybrid1120 maldet(27470): {scan} scan report saved, to view run: maldet --report 250403-0446.27470 Apr 04 2025 03:21:09 hybrid1120 maldet(28610): {update} checking for available updates... Apr 04 2025 03:21:10 hybrid1120 maldet(28610): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 04 2025 03:21:10 hybrid1120 maldet(28610): {update} hashing install files and checking against server... Apr 04 2025 03:21:10 hybrid1120 maldet(28610): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 04 2025 03:21:10 hybrid1120 maldet(28610): {update} latest version already installed. Apr 04 2025 03:21:10 hybrid1120 maldet(28736): {sigup} performing signature update check... Apr 04 2025 03:21:10 hybrid1120 maldet(28736): {sigup} local signature set is version 202504013916532 Apr 04 2025 03:21:11 hybrid1120 maldet(28736): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 04 2025 03:21:11 hybrid1120 maldet(28736): {sigup} latest signature set already installed Apr 04 2025 03:21:11 hybrid1120 maldet(28824): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 04 2025 03:21:12 hybrid1120 maldet(28824): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 04 2025 03:21:12 hybrid1120 maldet(28824): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 04 2025 03:21:12 hybrid1120 maldet(28824): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 04 2025 03:21:12 hybrid1120 maldet(28824): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 04 2025 03:27:12 hybrid1120 maldet(28824): {scan} file list completed in 360s, found 4242 files... Apr 04 2025 03:27:12 hybrid1120 maldet(28824): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (4242 files) in progress... Apr 04 2025 03:29:18 hybrid1120 maldet(28824): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 4242, malware hits 0, cleaned hits 0, time 487s Apr 04 2025 03:29:18 hybrid1120 maldet(28824): {scan} scan report saved, to view run: maldet --report 250404-0321.28824 Apr 04 2025 20:22:01 hybrid1120 maldet(1255): {mon} could not find monitor mode dependency 'ed' in PATH, please apt/yum/dnf install ed and try again. Apr 05 2025 03:29:02 hybrid1120 maldet(9367): {update} checking for available updates... Apr 05 2025 03:29:02 hybrid1120 maldet(9367): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 05 2025 03:29:02 hybrid1120 maldet(9367): {update} hashing install files and checking against server... Apr 05 2025 03:29:03 hybrid1120 maldet(9367): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 05 2025 03:29:03 hybrid1120 maldet(9367): {update} latest version already installed. Apr 05 2025 03:29:03 hybrid1120 maldet(9500): {sigup} performing signature update check... Apr 05 2025 03:29:03 hybrid1120 maldet(9500): {sigup} local signature set is version 202504013916532 Apr 05 2025 03:29:03 hybrid1120 maldet(9500): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 05 2025 03:29:03 hybrid1120 maldet(9500): {sigup} new signature set 20250404517655 available Apr 05 2025 03:29:03 hybrid1120 maldet(9500): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 05 2025 03:29:05 hybrid1120 maldet(9500): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 05 2025 03:29:05 hybrid1120 maldet(9500): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 05 2025 03:29:05 hybrid1120 maldet(9500): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 05 2025 03:29:05 hybrid1120 maldet(9500): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 05 2025 03:29:06 hybrid1120 maldet(9500): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 05 2025 03:29:06 hybrid1120 maldet(9500): {sigup} verified md5sum of maldet-sigpack.tgz Apr 05 2025 03:29:06 hybrid1120 maldet(9500): {sigup} unpacked and installed maldet-sigpack.tgz Apr 05 2025 03:29:06 hybrid1120 maldet(9500): {sigup} verified md5sum of maldet-clean.tgz Apr 05 2025 03:29:06 hybrid1120 maldet(9500): {sigup} unpacked and installed maldet-clean.tgz Apr 05 2025 03:29:06 hybrid1120 maldet(9500): {sigup} signature set update completed Apr 05 2025 03:29:06 hybrid1120 maldet(9500): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 05 2025 03:29:06 hybrid1120 maldet(9712): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 05 2025 03:29:07 hybrid1120 maldet(9712): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 05 2025 03:29:07 hybrid1120 maldet(9712): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 05 2025 03:29:07 hybrid1120 maldet(9712): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 05 2025 03:29:07 hybrid1120 maldet(9712): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 05 2025 03:34:54 hybrid1120 maldet(9712): {scan} file list completed in 347s, found 1455 files... Apr 05 2025 03:34:54 hybrid1120 maldet(9712): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1455 files) in progress... Apr 05 2025 03:35:35 hybrid1120 maldet(9712): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1455, malware hits 0, cleaned hits 0, time 389s Apr 05 2025 03:35:35 hybrid1120 maldet(9712): {scan} scan report saved, to view run: maldet --report 250405-0329.9712 Apr 06 2025 03:17:34 hybrid1120 maldet(14408): {update} checking for available updates... Apr 06 2025 03:17:34 hybrid1120 maldet(14408): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 06 2025 03:17:34 hybrid1120 maldet(14408): {update} hashing install files and checking against server... Apr 06 2025 03:17:35 hybrid1120 maldet(14408): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 06 2025 03:17:35 hybrid1120 maldet(14408): {update} latest version already installed. Apr 06 2025 03:17:35 hybrid1120 maldet(14519): {sigup} performing signature update check... Apr 06 2025 03:17:35 hybrid1120 maldet(14519): {sigup} local signature set is version 20250404517655 Apr 06 2025 03:17:35 hybrid1120 maldet(14519): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 06 2025 03:17:35 hybrid1120 maldet(14519): {sigup} latest signature set already installed Apr 06 2025 03:17:35 hybrid1120 maldet(14613): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 06 2025 03:17:36 hybrid1120 maldet(14613): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 06 2025 03:17:36 hybrid1120 maldet(14613): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 06 2025 03:17:36 hybrid1120 maldet(14613): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 06 2025 03:17:36 hybrid1120 maldet(14613): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 06 2025 03:24:48 hybrid1120 maldet(14613): {scan} file list completed in 432s, found 2033 files... Apr 06 2025 03:24:49 hybrid1120 maldet(14613): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2033 files) in progress... Apr 06 2025 03:25:52 hybrid1120 maldet(14613): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2033, malware hits 0, cleaned hits 0, time 497s Apr 06 2025 03:25:52 hybrid1120 maldet(14613): {scan} scan report saved, to view run: maldet --report 250406-0317.14613 Apr 07 2025 03:10:03 hybrid1120 maldet(28335): {update} checking for available updates... Apr 07 2025 03:10:03 hybrid1120 maldet(28335): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 07 2025 03:10:03 hybrid1120 maldet(28335): {update} hashing install files and checking against server... Apr 07 2025 03:10:04 hybrid1120 maldet(28335): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 07 2025 03:10:04 hybrid1120 maldet(28335): {update} latest version already installed. Apr 07 2025 03:10:04 hybrid1120 maldet(28543): {sigup} performing signature update check... Apr 07 2025 03:10:04 hybrid1120 maldet(28543): {sigup} local signature set is version 20250404517655 Apr 07 2025 03:10:05 hybrid1120 maldet(28543): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 07 2025 03:10:05 hybrid1120 maldet(28543): {sigup} latest signature set already installed Apr 07 2025 03:10:05 hybrid1120 maldet(28672): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 07 2025 03:10:05 hybrid1120 maldet(28672): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 07 2025 03:10:05 hybrid1120 maldet(28672): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 07 2025 03:10:05 hybrid1120 maldet(28672): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 07 2025 03:10:05 hybrid1120 maldet(28672): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 07 2025 03:16:06 hybrid1120 maldet(28672): {scan} file list completed in 361s, found 1784 files... Apr 07 2025 03:16:06 hybrid1120 maldet(28672): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1784 files) in progress... Apr 07 2025 03:16:57 hybrid1120 maldet(28672): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1784, malware hits 0, cleaned hits 0, time 412s Apr 07 2025 03:16:57 hybrid1120 maldet(28672): {scan} scan report saved, to view run: maldet --report 250407-0310.28672 Apr 08 2025 02:23:22 hybrid1120 maldet(5935): {update} checking for available updates... Apr 08 2025 02:23:22 hybrid1120 maldet(5935): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 08 2025 02:23:22 hybrid1120 maldet(5935): {update} hashing install files and checking against server... Apr 08 2025 02:23:39 hybrid1120 maldet(5935): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 08 2025 02:23:39 hybrid1120 maldet(5935): {update} latest version already installed. Apr 08 2025 02:23:39 hybrid1120 maldet(6103): {sigup} performing signature update check... Apr 08 2025 02:23:39 hybrid1120 maldet(6103): {sigup} local signature set is version 20250404517655 Apr 08 2025 02:23:57 hybrid1120 maldet(6103): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 08 2025 02:23:57 hybrid1120 maldet(6103): {sigup} new signature set 202504071198007 available Apr 08 2025 02:23:57 hybrid1120 maldet(6103): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 08 2025 02:24:17 hybrid1120 maldet(6103): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 08 2025 02:24:33 hybrid1120 maldet(6103): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 08 2025 02:24:33 hybrid1120 maldet(6103): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 08 2025 02:24:33 hybrid1120 maldet(6103): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 08 2025 02:24:46 hybrid1120 maldet(6103): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 08 2025 02:24:46 hybrid1120 maldet(6103): {sigup} verified md5sum of maldet-sigpack.tgz Apr 08 2025 02:24:47 hybrid1120 maldet(6103): {sigup} unpacked and installed maldet-sigpack.tgz Apr 08 2025 02:24:47 hybrid1120 maldet(6103): {sigup} verified md5sum of maldet-clean.tgz Apr 08 2025 02:24:47 hybrid1120 maldet(6103): {sigup} unpacked and installed maldet-clean.tgz Apr 08 2025 02:24:47 hybrid1120 maldet(6103): {sigup} signature set update completed Apr 08 2025 02:24:47 hybrid1120 maldet(6103): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 08 2025 02:24:47 hybrid1120 maldet(6662): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 08 2025 02:24:47 hybrid1120 maldet(6662): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 08 2025 02:24:47 hybrid1120 maldet(6662): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 08 2025 02:24:47 hybrid1120 maldet(6662): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 08 2025 02:24:47 hybrid1120 maldet(6662): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 08 2025 02:30:11 hybrid1120 maldet(6662): {scan} file list completed in 324s, found 1506 files... Apr 08 2025 02:30:11 hybrid1120 maldet(6662): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1506 files) in progress... Apr 08 2025 02:30:57 hybrid1120 maldet(6662): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1506, malware hits 0, cleaned hits 0, time 370s Apr 08 2025 02:30:57 hybrid1120 maldet(6662): {scan} scan report saved, to view run: maldet --report 250408-0224.6662 Apr 09 2025 04:43:15 hybrid1120 maldet(21835): {update} checking for available updates... Apr 09 2025 04:43:15 hybrid1120 maldet(21835): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 09 2025 04:43:15 hybrid1120 maldet(21835): {update} hashing install files and checking against server... Apr 09 2025 04:43:16 hybrid1120 maldet(21835): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 09 2025 04:43:16 hybrid1120 maldet(21835): {update} latest version already installed. Apr 09 2025 04:43:16 hybrid1120 maldet(21949): {sigup} performing signature update check... Apr 09 2025 04:43:16 hybrid1120 maldet(21949): {sigup} local signature set is version 202504071198007 Apr 09 2025 04:43:16 hybrid1120 maldet(21949): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 09 2025 04:43:16 hybrid1120 maldet(21949): {sigup} latest signature set already installed Apr 09 2025 04:43:16 hybrid1120 maldet(22039): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 09 2025 04:43:17 hybrid1120 maldet(22039): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 09 2025 04:43:17 hybrid1120 maldet(22039): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 09 2025 04:43:17 hybrid1120 maldet(22039): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 09 2025 04:43:17 hybrid1120 maldet(22039): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 09 2025 04:49:02 hybrid1120 maldet(22039): {scan} file list completed in 345s, found 1635 files... Apr 09 2025 04:49:02 hybrid1120 maldet(22039): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1635 files) in progress... Apr 09 2025 04:49:55 hybrid1120 maldet(22039): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1635, malware hits 0, cleaned hits 0, time 399s Apr 09 2025 04:49:55 hybrid1120 maldet(22039): {scan} scan report saved, to view run: maldet --report 250409-0443.22039 Apr 10 2025 02:21:12 hybrid1120 maldet(22549): {update} checking for available updates... Apr 10 2025 02:21:12 hybrid1120 maldet(22549): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 10 2025 02:21:12 hybrid1120 maldet(22549): {update} hashing install files and checking against server... Apr 10 2025 02:21:13 hybrid1120 maldet(22549): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 10 2025 02:21:13 hybrid1120 maldet(22549): {update} latest version already installed. Apr 10 2025 02:21:13 hybrid1120 maldet(22659): {sigup} performing signature update check... Apr 10 2025 02:21:13 hybrid1120 maldet(22659): {sigup} local signature set is version 202504071198007 Apr 10 2025 02:21:13 hybrid1120 maldet(22659): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 10 2025 02:21:13 hybrid1120 maldet(22659): {sigup} latest signature set already installed Apr 10 2025 02:21:13 hybrid1120 maldet(22749): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 10 2025 02:21:14 hybrid1120 maldet(22749): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 10 2025 02:21:14 hybrid1120 maldet(22749): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 10 2025 02:21:14 hybrid1120 maldet(22749): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 10 2025 02:21:14 hybrid1120 maldet(22749): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 10 2025 02:27:38 hybrid1120 maldet(22749): {scan} file list completed in 384s, found 1900 files... Apr 10 2025 02:27:38 hybrid1120 maldet(22749): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1900 files) in progress... Apr 10 2025 02:28:30 hybrid1120 maldet(22749): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1900, malware hits 0, cleaned hits 0, time 437s Apr 10 2025 02:28:30 hybrid1120 maldet(22749): {scan} scan report saved, to view run: maldet --report 250410-0221.22749 Apr 11 2025 03:25:00 hybrid1120 maldet(28021): {update} checking for available updates... Apr 11 2025 03:25:01 hybrid1120 maldet(28021): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 11 2025 03:25:01 hybrid1120 maldet(28021): {update} hashing install files and checking against server... Apr 11 2025 03:25:01 hybrid1120 maldet(28021): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 11 2025 03:25:02 hybrid1120 maldet(28021): {update} latest version already installed. Apr 11 2025 03:25:02 hybrid1120 maldet(28174): {sigup} performing signature update check... Apr 11 2025 03:25:02 hybrid1120 maldet(28174): {sigup} local signature set is version 202504071198007 Apr 11 2025 03:25:02 hybrid1120 maldet(28174): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 11 2025 03:25:02 hybrid1120 maldet(28174): {sigup} new signature set 202504101870578 available Apr 11 2025 03:25:02 hybrid1120 maldet(28174): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 11 2025 03:25:03 hybrid1120 maldet(28174): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 11 2025 03:25:04 hybrid1120 maldet(28174): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 11 2025 03:25:04 hybrid1120 maldet(28174): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 11 2025 03:25:04 hybrid1120 maldet(28174): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 11 2025 03:25:05 hybrid1120 maldet(28174): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 11 2025 03:25:05 hybrid1120 maldet(28174): {sigup} verified md5sum of maldet-sigpack.tgz Apr 11 2025 03:25:05 hybrid1120 maldet(28174): {sigup} unpacked and installed maldet-sigpack.tgz Apr 11 2025 03:25:05 hybrid1120 maldet(28174): {sigup} verified md5sum of maldet-clean.tgz Apr 11 2025 03:25:05 hybrid1120 maldet(28174): {sigup} unpacked and installed maldet-clean.tgz Apr 11 2025 03:25:05 hybrid1120 maldet(28174): {sigup} signature set update completed Apr 11 2025 03:25:05 hybrid1120 maldet(28174): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 11 2025 03:25:05 hybrid1120 maldet(28646): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 11 2025 03:25:05 hybrid1120 maldet(28646): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 11 2025 03:25:06 hybrid1120 maldet(28646): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 11 2025 03:25:06 hybrid1120 maldet(28646): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 11 2025 03:25:06 hybrid1120 maldet(28646): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 11 2025 03:32:48 hybrid1120 maldet(28646): {scan} file list completed in 462s, found 1369 files... Apr 11 2025 03:32:48 hybrid1120 maldet(28646): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1369 files) in progress... Apr 11 2025 03:33:42 hybrid1120 maldet(28646): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1369, malware hits 0, cleaned hits 0, time 517s Apr 11 2025 03:33:42 hybrid1120 maldet(28646): {scan} scan report saved, to view run: maldet --report 250411-0325.28646 Apr 12 2025 03:07:55 hybrid1120 maldet(4628): {update} checking for available updates... Apr 12 2025 03:08:20 hybrid1120 maldet(4628): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 12 2025 03:08:20 hybrid1120 maldet(4628): {update} hashing install files and checking against server... Apr 12 2025 03:08:41 hybrid1120 maldet(4628): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 12 2025 03:08:41 hybrid1120 maldet(4628): {update} latest version already installed. Apr 12 2025 03:08:41 hybrid1120 maldet(4930): {sigup} performing signature update check... Apr 12 2025 03:08:41 hybrid1120 maldet(4930): {sigup} local signature set is version 202504101870578 Apr 12 2025 03:08:55 hybrid1120 maldet(4930): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 12 2025 03:08:55 hybrid1120 maldet(4930): {sigup} latest signature set already installed Apr 12 2025 03:08:55 hybrid1120 maldet(5068): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 12 2025 03:08:56 hybrid1120 maldet(5068): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 12 2025 03:08:56 hybrid1120 maldet(5068): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 12 2025 03:08:56 hybrid1120 maldet(5068): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 12 2025 03:08:56 hybrid1120 maldet(5068): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 12 2025 03:14:34 hybrid1120 maldet(5068): {scan} file list completed in 338s, found 1492 files... Apr 12 2025 03:14:34 hybrid1120 maldet(5068): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1492 files) in progress... Apr 12 2025 03:15:16 hybrid1120 maldet(5068): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1492, malware hits 0, cleaned hits 0, time 381s Apr 12 2025 03:15:16 hybrid1120 maldet(5068): {scan} scan report saved, to view run: maldet --report 250412-0308.5068 Apr 13 2025 03:04:28 hybrid1120 maldet(5342): {update} checking for available updates... Apr 13 2025 03:06:17 hybrid1120 maldet(5342): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 13 2025 03:06:17 hybrid1120 maldet(5342): {update} hashing install files and checking against server... Apr 13 2025 03:08:07 hybrid1120 maldet(5342): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 13 2025 03:08:07 hybrid1120 maldet(5342): {update} version check shows latest but hash check failed, forcing update... Apr 13 2025 03:08:07 hybrid1120 maldet(5342): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz Apr 13 2025 03:08:31 hybrid1120 maldet(5342): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz.md5 Apr 13 2025 03:08:31 hybrid1120 maldet(5342): {update} verified md5sum of maldetect-current.tar.gz Apr 13 2025 03:08:31 hybrid1120 maldet(5342): {update} completed update v1.6.6 3a1792 => verror code: 522 359d25, running signature updates... Apr 13 2025 03:08:31 hybrid1120 maldet(7347): {sigup} performing signature update check... Apr 13 2025 03:08:31 hybrid1120 maldet(7347): {sigup} local signature set is version 202504101870578 Apr 13 2025 03:08:52 hybrid1120 maldet(7347): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 13 2025 03:08:52 hybrid1120 maldet(7347): {sigup} latest signature set already installed Apr 13 2025 03:08:52 hybrid1120 maldet(5342): {update} update and config import completed Apr 13 2025 03:08:52 hybrid1120 maldet(7517): {sigup} performing signature update check... Apr 13 2025 03:08:52 hybrid1120 maldet(7517): {sigup} local signature set is version 202504101870578 Apr 13 2025 03:09:06 hybrid1120 maldet(7517): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 13 2025 03:09:06 hybrid1120 maldet(7517): {sigup} latest signature set already installed Apr 13 2025 03:09:06 hybrid1120 maldet(7660): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 13 2025 03:09:07 hybrid1120 maldet(7660): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 13 2025 03:09:07 hybrid1120 maldet(7660): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 13 2025 03:09:07 hybrid1120 maldet(7660): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 13 2025 03:09:07 hybrid1120 maldet(7660): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 13 2025 03:15:44 hybrid1120 maldet(7660): {scan} file list completed in 397s, found 1478 files... Apr 13 2025 03:15:44 hybrid1120 maldet(7660): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1478 files) in progress... Apr 13 2025 03:16:30 hybrid1120 maldet(7660): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1478, malware hits 0, cleaned hits 0, time 443s Apr 13 2025 03:16:30 hybrid1120 maldet(7660): {scan} scan report saved, to view run: maldet --report 250413-0309.7660 Apr 14 2025 04:01:47 hybrid1120 maldet(9536): {update} checking for available updates... Apr 14 2025 04:01:47 hybrid1120 maldet(9536): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 14 2025 04:01:47 hybrid1120 maldet(9536): {update} hashing install files and checking against server... Apr 14 2025 04:01:48 hybrid1120 maldet(9536): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 14 2025 04:01:48 hybrid1120 maldet(9536): {update} latest version already installed. Apr 14 2025 04:01:48 hybrid1120 maldet(9648): {sigup} performing signature update check... Apr 14 2025 04:01:48 hybrid1120 maldet(9648): {sigup} local signature set is version 202504101870578 Apr 14 2025 04:01:48 hybrid1120 maldet(9648): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 14 2025 04:01:48 hybrid1120 maldet(9648): {sigup} new signature set 202504132544993 available Apr 14 2025 04:01:48 hybrid1120 maldet(9648): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 14 2025 04:01:50 hybrid1120 maldet(9648): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 14 2025 04:01:50 hybrid1120 maldet(9648): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 14 2025 04:01:50 hybrid1120 maldet(9648): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 14 2025 04:01:50 hybrid1120 maldet(9648): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 14 2025 04:01:51 hybrid1120 maldet(9648): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 14 2025 04:01:51 hybrid1120 maldet(9648): {sigup} verified md5sum of maldet-sigpack.tgz Apr 14 2025 04:01:51 hybrid1120 maldet(9648): {sigup} unpacked and installed maldet-sigpack.tgz Apr 14 2025 04:01:51 hybrid1120 maldet(9648): {sigup} verified md5sum of maldet-clean.tgz Apr 14 2025 04:01:51 hybrid1120 maldet(9648): {sigup} unpacked and installed maldet-clean.tgz Apr 14 2025 04:01:51 hybrid1120 maldet(9648): {sigup} signature set update completed Apr 14 2025 04:01:51 hybrid1120 maldet(9648): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 14 2025 04:01:51 hybrid1120 maldet(9855): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 14 2025 04:01:52 hybrid1120 maldet(9855): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 14 2025 04:01:52 hybrid1120 maldet(9855): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 14 2025 04:01:52 hybrid1120 maldet(9855): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 14 2025 04:01:52 hybrid1120 maldet(9855): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 14 2025 04:08:23 hybrid1120 maldet(9855): {scan} file list completed in 391s, found 1295 files... Apr 14 2025 04:08:23 hybrid1120 maldet(9855): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1295 files) in progress... Apr 14 2025 04:08:59 hybrid1120 maldet(9855): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1295, malware hits 0, cleaned hits 0, time 428s Apr 14 2025 04:08:59 hybrid1120 maldet(9855): {scan} scan report saved, to view run: maldet --report 250414-0401.9855 Apr 15 2025 03:20:30 hybrid1120 maldet(11661): {update} checking for available updates... Apr 15 2025 03:20:31 hybrid1120 maldet(11661): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 15 2025 03:20:31 hybrid1120 maldet(11661): {update} hashing install files and checking against server... Apr 15 2025 03:20:32 hybrid1120 maldet(11661): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 15 2025 03:20:32 hybrid1120 maldet(11661): {update} latest version already installed. Apr 15 2025 03:20:32 hybrid1120 maldet(11804): {sigup} performing signature update check... Apr 15 2025 03:20:32 hybrid1120 maldet(11804): {sigup} local signature set is version 202504132544993 Apr 15 2025 03:20:33 hybrid1120 maldet(11804): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 15 2025 03:20:33 hybrid1120 maldet(11804): {sigup} latest signature set already installed Apr 15 2025 03:20:33 hybrid1120 maldet(11893): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 15 2025 03:20:33 hybrid1120 maldet(11893): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 15 2025 03:20:33 hybrid1120 maldet(11893): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 15 2025 03:20:33 hybrid1120 maldet(11893): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 15 2025 03:20:33 hybrid1120 maldet(11893): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 15 2025 03:28:32 hybrid1120 maldet(11893): {scan} file list completed in 479s, found 1554 files... Apr 15 2025 03:28:32 hybrid1120 maldet(11893): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1554 files) in progress... Apr 15 2025 03:29:18 hybrid1120 maldet(11893): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1554, malware hits 0, cleaned hits 0, time 525s Apr 15 2025 03:29:18 hybrid1120 maldet(11893): {scan} scan report saved, to view run: maldet --report 250415-0320.11893 Apr 16 2025 02:53:40 hybrid1120 maldet(11074): {update} checking for available updates... Apr 16 2025 02:53:41 hybrid1120 maldet(11074): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 16 2025 02:53:41 hybrid1120 maldet(11074): {update} hashing install files and checking against server... Apr 16 2025 02:53:42 hybrid1120 maldet(11074): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 16 2025 02:53:42 hybrid1120 maldet(11074): {update} latest version already installed. Apr 16 2025 02:53:42 hybrid1120 maldet(11185): {sigup} performing signature update check... Apr 16 2025 02:53:42 hybrid1120 maldet(11185): {sigup} local signature set is version 202504132544993 Apr 16 2025 02:53:42 hybrid1120 maldet(11185): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 16 2025 02:53:42 hybrid1120 maldet(11185): {sigup} latest signature set already installed Apr 16 2025 02:53:42 hybrid1120 maldet(11279): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 16 2025 02:53:43 hybrid1120 maldet(11279): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 16 2025 02:53:43 hybrid1120 maldet(11279): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 16 2025 02:53:43 hybrid1120 maldet(11279): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 16 2025 02:53:43 hybrid1120 maldet(11279): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 16 2025 03:01:53 hybrid1120 maldet(11279): {scan} file list completed in 490s, found 1838 files... Apr 16 2025 03:01:53 hybrid1120 maldet(11279): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1838 files) in progress... Apr 16 2025 03:02:50 hybrid1120 maldet(11279): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1838, malware hits 0, cleaned hits 0, time 548s Apr 16 2025 03:02:50 hybrid1120 maldet(11279): {scan} scan report saved, to view run: maldet --report 250416-0253.11279 Apr 17 2025 03:42:43 hybrid1120 maldet(16429): {update} checking for available updates... Apr 17 2025 03:42:43 hybrid1120 maldet(16429): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 17 2025 03:42:43 hybrid1120 maldet(16429): {update} hashing install files and checking against server... Apr 17 2025 03:42:44 hybrid1120 maldet(16429): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 17 2025 03:42:44 hybrid1120 maldet(16429): {update} latest version already installed. Apr 17 2025 03:42:44 hybrid1120 maldet(16539): {sigup} performing signature update check... Apr 17 2025 03:42:44 hybrid1120 maldet(16539): {sigup} local signature set is version 202504132544993 Apr 17 2025 03:42:44 hybrid1120 maldet(16539): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 17 2025 03:42:45 hybrid1120 maldet(16539): {sigup} new signature set 202504163218957 available Apr 17 2025 03:42:45 hybrid1120 maldet(16539): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 17 2025 03:42:46 hybrid1120 maldet(16539): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 17 2025 03:42:46 hybrid1120 maldet(16539): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 17 2025 03:42:46 hybrid1120 maldet(16539): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 17 2025 03:42:47 hybrid1120 maldet(16539): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 17 2025 03:42:47 hybrid1120 maldet(16539): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 17 2025 03:42:47 hybrid1120 maldet(16539): {sigup} verified md5sum of maldet-sigpack.tgz Apr 17 2025 03:42:48 hybrid1120 maldet(16539): {sigup} unpacked and installed maldet-sigpack.tgz Apr 17 2025 03:42:48 hybrid1120 maldet(16539): {sigup} verified md5sum of maldet-clean.tgz Apr 17 2025 03:42:48 hybrid1120 maldet(16539): {sigup} unpacked and installed maldet-clean.tgz Apr 17 2025 03:42:48 hybrid1120 maldet(16539): {sigup} signature set update completed Apr 17 2025 03:42:48 hybrid1120 maldet(16539): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 17 2025 03:42:48 hybrid1120 maldet(16743): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 17 2025 03:42:48 hybrid1120 maldet(16743): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 17 2025 03:42:48 hybrid1120 maldet(16743): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 17 2025 03:42:48 hybrid1120 maldet(16743): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 17 2025 03:42:48 hybrid1120 maldet(16743): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 17 2025 03:49:38 hybrid1120 maldet(16743): {scan} file list completed in 410s, found 1993 files... Apr 17 2025 03:49:38 hybrid1120 maldet(16743): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1993 files) in progress... Apr 17 2025 03:51:21 hybrid1120 maldet(16743): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1993, malware hits 0, cleaned hits 0, time 513s Apr 17 2025 03:51:21 hybrid1120 maldet(16743): {scan} scan report saved, to view run: maldet --report 250417-0342.16743 Apr 18 2025 02:36:10 hybrid1120 maldet(1241): {update} checking for available updates... Apr 18 2025 02:36:10 hybrid1120 maldet(1241): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 18 2025 02:36:10 hybrid1120 maldet(1241): {update} hashing install files and checking against server... Apr 18 2025 02:36:11 hybrid1120 maldet(1241): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 18 2025 02:36:11 hybrid1120 maldet(1241): {update} latest version already installed. Apr 18 2025 02:36:11 hybrid1120 maldet(1358): {sigup} performing signature update check... Apr 18 2025 02:36:11 hybrid1120 maldet(1358): {sigup} local signature set is version 202504163218957 Apr 18 2025 02:36:12 hybrid1120 maldet(1358): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 18 2025 02:36:12 hybrid1120 maldet(1358): {sigup} latest signature set already installed Apr 18 2025 02:36:12 hybrid1120 maldet(1452): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 18 2025 02:36:12 hybrid1120 maldet(1452): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 18 2025 02:36:12 hybrid1120 maldet(1452): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 18 2025 02:36:12 hybrid1120 maldet(1452): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 18 2025 02:36:12 hybrid1120 maldet(1452): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 18 2025 02:42:43 hybrid1120 maldet(1452): {scan} file list completed in 391s, found 1708 files... Apr 18 2025 02:42:43 hybrid1120 maldet(1452): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1708 files) in progress... Apr 18 2025 02:43:44 hybrid1120 maldet(1452): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1708, malware hits 0, cleaned hits 0, time 452s Apr 18 2025 02:43:44 hybrid1120 maldet(1452): {scan} scan report saved, to view run: maldet --report 250418-0236.1452 Apr 19 2025 03:25:33 hybrid1120 maldet(13097): {update} checking for available updates... Apr 19 2025 03:25:34 hybrid1120 maldet(13097): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 19 2025 03:25:34 hybrid1120 maldet(13097): {update} hashing install files and checking against server... Apr 19 2025 03:25:34 hybrid1120 maldet(13097): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 19 2025 03:25:34 hybrid1120 maldet(13097): {update} latest version already installed. Apr 19 2025 03:25:34 hybrid1120 maldet(13206): {sigup} performing signature update check... Apr 19 2025 03:25:34 hybrid1120 maldet(13206): {sigup} local signature set is version 202504163218957 Apr 19 2025 03:25:35 hybrid1120 maldet(13206): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 19 2025 03:25:35 hybrid1120 maldet(13206): {sigup} latest signature set already installed Apr 19 2025 03:25:35 hybrid1120 maldet(13294): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 19 2025 03:25:36 hybrid1120 maldet(13294): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 19 2025 03:25:36 hybrid1120 maldet(13294): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 19 2025 03:25:36 hybrid1120 maldet(13294): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 19 2025 03:25:36 hybrid1120 maldet(13294): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 19 2025 03:32:14 hybrid1120 maldet(13294): {scan} file list completed in 398s, found 2465 files... Apr 19 2025 03:32:14 hybrid1120 maldet(13294): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2465 files) in progress... Apr 19 2025 03:33:32 hybrid1120 maldet(13294): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2465, malware hits 0, cleaned hits 0, time 477s Apr 19 2025 03:33:32 hybrid1120 maldet(13294): {scan} scan report saved, to view run: maldet --report 250419-0325.13294 Apr 20 2025 03:34:41 hybrid1120 maldet(14898): {update} checking for available updates... Apr 20 2025 03:34:41 hybrid1120 maldet(14898): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 20 2025 03:34:41 hybrid1120 maldet(14898): {update} hashing install files and checking against server... Apr 20 2025 03:34:42 hybrid1120 maldet(14898): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 20 2025 03:34:42 hybrid1120 maldet(14898): {update} latest version already installed. Apr 20 2025 03:34:42 hybrid1120 maldet(15019): {sigup} performing signature update check... Apr 20 2025 03:34:42 hybrid1120 maldet(15019): {sigup} local signature set is version 202504163218957 Apr 20 2025 03:34:42 hybrid1120 maldet(15019): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 20 2025 03:34:43 hybrid1120 maldet(15019): {sigup} new signature set 20250419480331 available Apr 20 2025 03:34:43 hybrid1120 maldet(15019): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 20 2025 03:34:44 hybrid1120 maldet(15019): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 20 2025 03:34:44 hybrid1120 maldet(15019): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 20 2025 03:34:44 hybrid1120 maldet(15019): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 20 2025 03:34:45 hybrid1120 maldet(15019): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 20 2025 03:34:45 hybrid1120 maldet(15019): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 20 2025 03:34:45 hybrid1120 maldet(15019): {sigup} verified md5sum of maldet-sigpack.tgz Apr 20 2025 03:34:46 hybrid1120 maldet(15019): {sigup} unpacked and installed maldet-sigpack.tgz Apr 20 2025 03:34:46 hybrid1120 maldet(15019): {sigup} verified md5sum of maldet-clean.tgz Apr 20 2025 03:34:46 hybrid1120 maldet(15019): {sigup} unpacked and installed maldet-clean.tgz Apr 20 2025 03:34:46 hybrid1120 maldet(15019): {sigup} signature set update completed Apr 20 2025 03:34:46 hybrid1120 maldet(15019): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 20 2025 03:34:46 hybrid1120 maldet(15250): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 20 2025 03:34:46 hybrid1120 maldet(15250): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 20 2025 03:34:46 hybrid1120 maldet(15250): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 20 2025 03:34:46 hybrid1120 maldet(15250): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 20 2025 03:34:46 hybrid1120 maldet(15250): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 20 2025 03:37:10 hybrid1120 maldet(15250): {scan} file list completed in 144s, found 4568 files... Apr 20 2025 03:37:10 hybrid1120 maldet(15250): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (4568 files) in progress... Apr 20 2025 03:38:59 hybrid1120 maldet(15250): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 4568, malware hits 0, cleaned hits 0, time 253s Apr 20 2025 03:38:59 hybrid1120 maldet(15250): {scan} scan report saved, to view run: maldet --report 250420-0334.15250 Apr 21 2025 02:39:15 hybrid1120 maldet(28913): {update} checking for available updates... Apr 21 2025 02:39:15 hybrid1120 maldet(28913): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 21 2025 02:39:15 hybrid1120 maldet(28913): {update} hashing install files and checking against server... Apr 21 2025 02:39:16 hybrid1120 maldet(28913): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 21 2025 02:39:16 hybrid1120 maldet(28913): {update} latest version already installed. Apr 21 2025 02:39:16 hybrid1120 maldet(29031): {sigup} performing signature update check... Apr 21 2025 02:39:16 hybrid1120 maldet(29031): {sigup} local signature set is version 20250419480331 Apr 21 2025 02:39:17 hybrid1120 maldet(29031): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 21 2025 02:39:17 hybrid1120 maldet(29031): {sigup} latest signature set already installed Apr 21 2025 02:39:17 hybrid1120 maldet(29119): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 21 2025 02:39:17 hybrid1120 maldet(29119): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 21 2025 02:39:17 hybrid1120 maldet(29119): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 21 2025 02:39:17 hybrid1120 maldet(29119): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 21 2025 02:39:17 hybrid1120 maldet(29119): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 21 2025 02:45:48 hybrid1120 maldet(29119): {scan} file list completed in 391s, found 1408 files... Apr 21 2025 02:45:48 hybrid1120 maldet(29119): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1408 files) in progress... Apr 21 2025 02:46:38 hybrid1120 maldet(29119): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1408, malware hits 0, cleaned hits 0, time 441s Apr 21 2025 02:46:38 hybrid1120 maldet(29119): {scan} scan report saved, to view run: maldet --report 250421-0239.29119 Apr 22 2025 03:35:23 hybrid1120 maldet(25063): {update} checking for available updates... Apr 22 2025 03:35:23 hybrid1120 maldet(25063): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 22 2025 03:35:23 hybrid1120 maldet(25063): {update} hashing install files and checking against server... Apr 22 2025 03:35:24 hybrid1120 maldet(25063): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 22 2025 03:35:24 hybrid1120 maldet(25063): {update} latest version already installed. Apr 22 2025 03:35:24 hybrid1120 maldet(25174): {sigup} performing signature update check... Apr 22 2025 03:35:24 hybrid1120 maldet(25174): {sigup} local signature set is version 20250419480331 Apr 22 2025 03:35:24 hybrid1120 maldet(25174): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 22 2025 03:35:24 hybrid1120 maldet(25174): {sigup} latest signature set already installed Apr 22 2025 03:35:25 hybrid1120 maldet(25263): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 22 2025 03:35:25 hybrid1120 maldet(25263): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 22 2025 03:35:25 hybrid1120 maldet(25263): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 22 2025 03:35:25 hybrid1120 maldet(25263): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 22 2025 03:35:25 hybrid1120 maldet(25263): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 22 2025 03:41:36 hybrid1120 maldet(25263): {scan} file list completed in 371s, found 2107 files... Apr 22 2025 03:41:36 hybrid1120 maldet(25263): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2107 files) in progress... Apr 22 2025 03:42:33 hybrid1120 maldet(25263): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2107, malware hits 0, cleaned hits 0, time 428s Apr 22 2025 03:42:33 hybrid1120 maldet(25263): {scan} scan report saved, to view run: maldet --report 250422-0335.25263 Apr 23 2025 03:45:53 hybrid1120 maldet(2050): {update} checking for available updates... Apr 23 2025 03:45:54 hybrid1120 maldet(2050): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 23 2025 03:45:54 hybrid1120 maldet(2050): {update} hashing install files and checking against server... Apr 23 2025 03:45:54 hybrid1120 maldet(2050): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 23 2025 03:45:54 hybrid1120 maldet(2050): {update} latest version already installed. Apr 23 2025 03:45:54 hybrid1120 maldet(2162): {sigup} performing signature update check... Apr 23 2025 03:45:54 hybrid1120 maldet(2162): {sigup} local signature set is version 20250419480331 Apr 23 2025 03:45:55 hybrid1120 maldet(2162): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 23 2025 03:45:55 hybrid1120 maldet(2162): {sigup} new signature set 202504221155028 available Apr 23 2025 03:45:55 hybrid1120 maldet(2162): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 23 2025 03:45:56 hybrid1120 maldet(2162): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 23 2025 03:45:57 hybrid1120 maldet(2162): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 23 2025 03:45:57 hybrid1120 maldet(2162): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 23 2025 03:45:57 hybrid1120 maldet(2162): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 23 2025 03:45:58 hybrid1120 maldet(2162): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 23 2025 03:45:58 hybrid1120 maldet(2162): {sigup} verified md5sum of maldet-sigpack.tgz Apr 23 2025 03:45:58 hybrid1120 maldet(2162): {sigup} unpacked and installed maldet-sigpack.tgz Apr 23 2025 03:45:58 hybrid1120 maldet(2162): {sigup} verified md5sum of maldet-clean.tgz Apr 23 2025 03:45:58 hybrid1120 maldet(2162): {sigup} unpacked and installed maldet-clean.tgz Apr 23 2025 03:45:58 hybrid1120 maldet(2162): {sigup} signature set update completed Apr 23 2025 03:45:58 hybrid1120 maldet(2162): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 23 2025 03:45:58 hybrid1120 maldet(2390): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 23 2025 03:45:58 hybrid1120 maldet(2390): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 23 2025 03:45:58 hybrid1120 maldet(2390): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 23 2025 03:45:58 hybrid1120 maldet(2390): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 23 2025 03:45:58 hybrid1120 maldet(2390): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 23 2025 03:51:47 hybrid1120 maldet(2390): {scan} file list completed in 349s, found 1252 files... Apr 23 2025 03:51:47 hybrid1120 maldet(2390): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1252 files) in progress... Apr 23 2025 03:52:20 hybrid1120 maldet(2390): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1252, malware hits 0, cleaned hits 0, time 382s Apr 23 2025 03:52:20 hybrid1120 maldet(2390): {scan} scan report saved, to view run: maldet --report 250423-0345.2390 Apr 24 2025 03:33:13 hybrid1120 maldet(24858): {update} checking for available updates... Apr 24 2025 03:33:14 hybrid1120 maldet(24858): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 24 2025 03:33:14 hybrid1120 maldet(24858): {update} hashing install files and checking against server... Apr 24 2025 03:33:14 hybrid1120 maldet(24858): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 24 2025 03:33:14 hybrid1120 maldet(24858): {update} latest version already installed. Apr 24 2025 03:33:14 hybrid1120 maldet(24969): {sigup} performing signature update check... Apr 24 2025 03:33:14 hybrid1120 maldet(24969): {sigup} local signature set is version 202504221155028 Apr 24 2025 03:33:15 hybrid1120 maldet(24969): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 24 2025 03:33:15 hybrid1120 maldet(24969): {sigup} latest signature set already installed Apr 24 2025 03:33:15 hybrid1120 maldet(25057): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 24 2025 03:33:16 hybrid1120 maldet(25057): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 24 2025 03:33:16 hybrid1120 maldet(25057): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 24 2025 03:33:16 hybrid1120 maldet(25057): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 24 2025 03:33:16 hybrid1120 maldet(25057): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 24 2025 03:40:00 hybrid1120 maldet(25057): {scan} file list completed in 403s, found 1405 files... Apr 24 2025 03:40:00 hybrid1120 maldet(25057): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1405 files) in progress... Apr 24 2025 03:40:42 hybrid1120 maldet(25057): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1405, malware hits 0, cleaned hits 0, time 447s Apr 24 2025 03:40:42 hybrid1120 maldet(25057): {scan} scan report saved, to view run: maldet --report 250424-0333.25057 Apr 25 2025 03:15:33 hybrid1120 maldet(13263): {update} checking for available updates... Apr 25 2025 03:15:34 hybrid1120 maldet(13263): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 25 2025 03:15:34 hybrid1120 maldet(13263): {update} hashing install files and checking against server... Apr 25 2025 03:15:34 hybrid1120 maldet(13263): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 25 2025 03:15:34 hybrid1120 maldet(13263): {update} latest version already installed. Apr 25 2025 03:15:34 hybrid1120 maldet(13372): {sigup} performing signature update check... Apr 25 2025 03:15:34 hybrid1120 maldet(13372): {sigup} local signature set is version 202504221155028 Apr 25 2025 03:15:35 hybrid1120 maldet(13372): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 25 2025 03:15:35 hybrid1120 maldet(13372): {sigup} latest signature set already installed Apr 25 2025 03:15:35 hybrid1120 maldet(13460): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 25 2025 03:15:35 hybrid1120 maldet(13460): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 25 2025 03:15:35 hybrid1120 maldet(13460): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 25 2025 03:15:35 hybrid1120 maldet(13460): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 25 2025 03:15:35 hybrid1120 maldet(13460): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 25 2025 03:22:48 hybrid1120 maldet(13460): {scan} file list completed in 433s, found 1112 files... Apr 25 2025 03:22:48 hybrid1120 maldet(13460): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1112 files) in progress... Apr 25 2025 03:23:25 hybrid1120 maldet(13460): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1112, malware hits 0, cleaned hits 0, time 470s Apr 25 2025 03:23:25 hybrid1120 maldet(13460): {scan} scan report saved, to view run: maldet --report 250425-0315.13460 Apr 26 2025 03:31:10 hybrid1120 maldet(10254): {update} checking for available updates... Apr 26 2025 03:31:10 hybrid1120 maldet(10254): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 26 2025 03:31:10 hybrid1120 maldet(10254): {update} hashing install files and checking against server... Apr 26 2025 03:31:11 hybrid1120 maldet(10254): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 26 2025 03:31:11 hybrid1120 maldet(10254): {update} latest version already installed. Apr 26 2025 03:31:11 hybrid1120 maldet(10372): {sigup} performing signature update check... Apr 26 2025 03:31:11 hybrid1120 maldet(10372): {sigup} local signature set is version 202504221155028 Apr 26 2025 03:31:11 hybrid1120 maldet(10372): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 26 2025 03:31:12 hybrid1120 maldet(10372): {sigup} new signature set 202504251845085 available Apr 26 2025 03:31:12 hybrid1120 maldet(10372): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 26 2025 03:31:13 hybrid1120 maldet(10372): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 26 2025 03:31:13 hybrid1120 maldet(10372): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 26 2025 03:31:13 hybrid1120 maldet(10372): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 26 2025 03:31:14 hybrid1120 maldet(10372): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 26 2025 03:31:14 hybrid1120 maldet(10372): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 26 2025 03:31:14 hybrid1120 maldet(10372): {sigup} verified md5sum of maldet-sigpack.tgz Apr 26 2025 03:31:15 hybrid1120 maldet(10372): {sigup} unpacked and installed maldet-sigpack.tgz Apr 26 2025 03:31:15 hybrid1120 maldet(10372): {sigup} verified md5sum of maldet-clean.tgz Apr 26 2025 03:31:15 hybrid1120 maldet(10372): {sigup} unpacked and installed maldet-clean.tgz Apr 26 2025 03:31:15 hybrid1120 maldet(10372): {sigup} signature set update completed Apr 26 2025 03:31:15 hybrid1120 maldet(10372): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 26 2025 03:31:15 hybrid1120 maldet(10585): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 26 2025 03:31:15 hybrid1120 maldet(10585): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 26 2025 03:31:15 hybrid1120 maldet(10585): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 26 2025 03:31:15 hybrid1120 maldet(10585): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 26 2025 03:31:15 hybrid1120 maldet(10585): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 26 2025 03:38:02 hybrid1120 maldet(10585): {scan} file list completed in 407s, found 1126 files... Apr 26 2025 03:38:02 hybrid1120 maldet(10585): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1126 files) in progress... Apr 26 2025 03:38:34 hybrid1120 maldet(10585): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1126, malware hits 0, cleaned hits 0, time 439s Apr 26 2025 03:38:34 hybrid1120 maldet(10585): {scan} scan report saved, to view run: maldet --report 250426-0331.10585 Apr 27 2025 03:33:55 hybrid1120 maldet(32528): {update} checking for available updates... Apr 27 2025 03:33:56 hybrid1120 maldet(32528): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 27 2025 03:33:56 hybrid1120 maldet(32528): {update} hashing install files and checking against server... Apr 27 2025 03:33:56 hybrid1120 maldet(32528): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 27 2025 03:33:56 hybrid1120 maldet(32528): {update} latest version already installed. Apr 27 2025 03:33:56 hybrid1120 maldet(32643): {sigup} performing signature update check... Apr 27 2025 03:33:56 hybrid1120 maldet(32643): {sigup} local signature set is version 202504251845085 Apr 27 2025 03:33:57 hybrid1120 maldet(32643): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 27 2025 03:33:57 hybrid1120 maldet(32643): {sigup} latest signature set already installed Apr 27 2025 03:33:57 hybrid1120 maldet(32754): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 27 2025 03:33:57 hybrid1120 maldet(32754): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 27 2025 03:33:57 hybrid1120 maldet(32754): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 27 2025 03:33:57 hybrid1120 maldet(32754): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 27 2025 03:33:57 hybrid1120 maldet(32754): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 27 2025 03:40:20 hybrid1120 maldet(32754): {scan} file list completed in 383s, found 1470 files... Apr 27 2025 03:40:20 hybrid1120 maldet(32754): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1470 files) in progress... Apr 27 2025 03:41:07 hybrid1120 maldet(32754): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1470, malware hits 0, cleaned hits 0, time 430s Apr 27 2025 03:41:07 hybrid1120 maldet(32754): {scan} scan report saved, to view run: maldet --report 250427-0333.32754 Apr 28 2025 03:34:54 hybrid1120 maldet(16634): {update} checking for available updates... Apr 28 2025 03:34:54 hybrid1120 maldet(16634): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 28 2025 03:34:54 hybrid1120 maldet(16634): {update} hashing install files and checking against server... Apr 28 2025 03:34:55 hybrid1120 maldet(16634): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 28 2025 03:34:55 hybrid1120 maldet(16634): {update} latest version already installed. Apr 28 2025 03:34:55 hybrid1120 maldet(16793): {sigup} performing signature update check... Apr 28 2025 03:34:55 hybrid1120 maldet(16793): {sigup} local signature set is version 202504251845085 Apr 28 2025 03:34:55 hybrid1120 maldet(16793): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 28 2025 03:34:55 hybrid1120 maldet(16793): {sigup} latest signature set already installed Apr 28 2025 03:34:55 hybrid1120 maldet(16915): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 28 2025 03:34:56 hybrid1120 maldet(16915): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 28 2025 03:34:56 hybrid1120 maldet(16915): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 28 2025 03:34:56 hybrid1120 maldet(16915): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 28 2025 03:34:56 hybrid1120 maldet(16915): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 28 2025 03:41:21 hybrid1120 maldet(16915): {scan} file list completed in 385s, found 1435 files... Apr 28 2025 03:41:21 hybrid1120 maldet(16915): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1435 files) in progress... Apr 28 2025 03:42:01 hybrid1120 maldet(16915): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1435, malware hits 0, cleaned hits 0, time 426s Apr 28 2025 03:42:01 hybrid1120 maldet(16915): {scan} scan report saved, to view run: maldet --report 250428-0334.16915 Apr 29 2025 03:52:47 hybrid1120 maldet(12107): {update} checking for available updates... Apr 29 2025 03:52:47 hybrid1120 maldet(12107): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 29 2025 03:52:47 hybrid1120 maldet(12107): {update} hashing install files and checking against server... Apr 29 2025 03:52:48 hybrid1120 maldet(12107): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 29 2025 03:52:48 hybrid1120 maldet(12107): {update} latest version already installed. Apr 29 2025 03:52:48 hybrid1120 maldet(12227): {sigup} performing signature update check... Apr 29 2025 03:52:48 hybrid1120 maldet(12227): {sigup} local signature set is version 202504251845085 Apr 29 2025 03:52:48 hybrid1120 maldet(12227): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 29 2025 03:52:48 hybrid1120 maldet(12227): {sigup} new signature set 202504282520736 available Apr 29 2025 03:52:48 hybrid1120 maldet(12227): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 29 2025 03:52:50 hybrid1120 maldet(12227): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 29 2025 03:52:50 hybrid1120 maldet(12227): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 29 2025 03:52:50 hybrid1120 maldet(12227): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 29 2025 03:52:51 hybrid1120 maldet(12227): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 29 2025 03:52:51 hybrid1120 maldet(12227): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 29 2025 03:52:51 hybrid1120 maldet(12227): {sigup} verified md5sum of maldet-sigpack.tgz Apr 29 2025 03:52:51 hybrid1120 maldet(12227): {sigup} unpacked and installed maldet-sigpack.tgz Apr 29 2025 03:52:52 hybrid1120 maldet(12227): {sigup} verified md5sum of maldet-clean.tgz Apr 29 2025 03:52:52 hybrid1120 maldet(12227): {sigup} unpacked and installed maldet-clean.tgz Apr 29 2025 03:52:52 hybrid1120 maldet(12227): {sigup} signature set update completed Apr 29 2025 03:52:52 hybrid1120 maldet(12227): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 29 2025 03:52:52 hybrid1120 maldet(12493): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 29 2025 03:52:52 hybrid1120 maldet(12493): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 29 2025 03:52:52 hybrid1120 maldet(12493): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 29 2025 03:52:52 hybrid1120 maldet(12493): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 29 2025 03:52:52 hybrid1120 maldet(12493): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 29 2025 03:58:11 hybrid1120 maldet(12493): {scan} file list completed in 318s, found 1393 files... Apr 29 2025 03:58:11 hybrid1120 maldet(12493): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1393 files) in progress... Apr 29 2025 03:58:47 hybrid1120 maldet(12493): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1393, malware hits 0, cleaned hits 0, time 355s Apr 29 2025 03:58:47 hybrid1120 maldet(12493): {scan} scan report saved, to view run: maldet --report 250429-0352.12493 Apr 30 2025 03:11:00 hybrid1120 maldet(12899): {update} checking for available updates... Apr 30 2025 03:11:01 hybrid1120 maldet(12899): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 30 2025 03:11:01 hybrid1120 maldet(12899): {update} hashing install files and checking against server... Apr 30 2025 03:11:01 hybrid1120 maldet(12899): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 30 2025 03:11:01 hybrid1120 maldet(12899): {update} latest version already installed. Apr 30 2025 03:11:01 hybrid1120 maldet(13018): {sigup} performing signature update check... Apr 30 2025 03:11:01 hybrid1120 maldet(13018): {sigup} local signature set is version 202504282520736 Apr 30 2025 03:11:02 hybrid1120 maldet(13018): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 30 2025 03:11:02 hybrid1120 maldet(13018): {sigup} latest signature set already installed Apr 30 2025 03:11:02 hybrid1120 maldet(13138): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 30 2025 03:11:02 hybrid1120 maldet(13138): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 30 2025 03:11:02 hybrid1120 maldet(13138): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 30 2025 03:11:02 hybrid1120 maldet(13138): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 30 2025 03:11:02 hybrid1120 maldet(13138): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 30 2025 03:17:14 hybrid1120 maldet(13138): {scan} file list completed in 371s, found 1558 files... Apr 30 2025 03:17:14 hybrid1120 maldet(13138): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1558 files) in progress... Apr 30 2025 03:18:01 hybrid1120 maldet(13138): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1558, malware hits 0, cleaned hits 0, time 419s Apr 30 2025 03:18:01 hybrid1120 maldet(13138): {scan} scan report saved, to view run: maldet --report 250430-0311.13138 May 01 2025 02:49:51 hybrid1120 maldet(17964): {update} checking for available updates... May 01 2025 02:49:52 hybrid1120 maldet(17964): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 01 2025 02:49:52 hybrid1120 maldet(17964): {update} hashing install files and checking against server... May 01 2025 02:49:53 hybrid1120 maldet(17964): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 01 2025 02:49:53 hybrid1120 maldet(17964): {update} latest version already installed. May 01 2025 02:49:53 hybrid1120 maldet(18088): {sigup} performing signature update check... May 01 2025 02:49:53 hybrid1120 maldet(18088): {sigup} local signature set is version 202504282520736 May 01 2025 02:49:53 hybrid1120 maldet(18088): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 01 2025 02:49:53 hybrid1120 maldet(18088): {sigup} latest signature set already installed May 01 2025 02:49:53 hybrid1120 maldet(18176): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 01 2025 02:49:54 hybrid1120 maldet(18176): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 01 2025 02:49:54 hybrid1120 maldet(18176): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 01 2025 02:49:54 hybrid1120 maldet(18176): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 01 2025 02:49:54 hybrid1120 maldet(18176): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 01 2025 02:57:21 hybrid1120 maldet(18176): {scan} file list completed in 447s, found 1176 files... May 01 2025 02:57:21 hybrid1120 maldet(18176): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1176 files) in progress... May 01 2025 02:57:56 hybrid1120 maldet(18176): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1176, malware hits 0, cleaned hits 0, time 483s May 01 2025 02:57:56 hybrid1120 maldet(18176): {scan} scan report saved, to view run: maldet --report 250501-0249.18176 May 02 2025 03:30:36 hybrid1120 maldet(22470): {update} checking for available updates... May 02 2025 03:30:36 hybrid1120 maldet(22470): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 02 2025 03:30:36 hybrid1120 maldet(22470): {update} hashing install files and checking against server... May 02 2025 03:30:37 hybrid1120 maldet(22470): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 02 2025 03:30:37 hybrid1120 maldet(22470): {update} latest version already installed. May 02 2025 03:30:37 hybrid1120 maldet(22594): {sigup} performing signature update check... May 02 2025 03:30:37 hybrid1120 maldet(22594): {sigup} local signature set is version 202504282520736 May 02 2025 03:30:37 hybrid1120 maldet(22594): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 02 2025 03:30:37 hybrid1120 maldet(22594): {sigup} new signature set 202505013184135 available May 02 2025 03:30:37 hybrid1120 maldet(22594): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 02 2025 03:30:38 hybrid1120 maldet(22594): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 02 2025 03:30:39 hybrid1120 maldet(22594): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 02 2025 03:30:39 hybrid1120 maldet(22594): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 02 2025 03:30:39 hybrid1120 maldet(22594): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 02 2025 03:30:40 hybrid1120 maldet(22594): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 02 2025 03:30:40 hybrid1120 maldet(22594): {sigup} verified md5sum of maldet-sigpack.tgz May 02 2025 03:30:41 hybrid1120 maldet(22594): {sigup} unpacked and installed maldet-sigpack.tgz May 02 2025 03:30:41 hybrid1120 maldet(22594): {sigup} verified md5sum of maldet-clean.tgz May 02 2025 03:30:41 hybrid1120 maldet(22594): {sigup} unpacked and installed maldet-clean.tgz May 02 2025 03:30:41 hybrid1120 maldet(22594): {sigup} signature set update completed May 02 2025 03:30:41 hybrid1120 maldet(22594): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 02 2025 03:30:41 hybrid1120 maldet(22803): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 02 2025 03:30:41 hybrid1120 maldet(22803): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 02 2025 03:30:41 hybrid1120 maldet(22803): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 02 2025 03:30:41 hybrid1120 maldet(22803): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 02 2025 03:30:41 hybrid1120 maldet(22803): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 02 2025 03:38:11 hybrid1120 maldet(22803): {scan} file list completed in 450s, found 1469 files... May 02 2025 03:38:11 hybrid1120 maldet(22803): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1469 files) in progress... May 02 2025 03:39:07 hybrid1120 maldet(22803): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1469, malware hits 0, cleaned hits 0, time 506s May 02 2025 03:39:07 hybrid1120 maldet(22803): {scan} scan report saved, to view run: maldet --report 250502-0330.22803 May 03 2025 03:35:53 hybrid1120 maldet(9917): {update} checking for available updates... May 03 2025 03:35:53 hybrid1120 maldet(9917): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 03 2025 03:35:53 hybrid1120 maldet(9917): {update} hashing install files and checking against server... May 03 2025 03:35:54 hybrid1120 maldet(9917): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 03 2025 03:35:54 hybrid1120 maldet(9917): {update} latest version already installed. May 03 2025 03:35:54 hybrid1120 maldet(10041): {sigup} performing signature update check... May 03 2025 03:35:54 hybrid1120 maldet(10041): {sigup} local signature set is version 202505013184135 May 03 2025 03:35:54 hybrid1120 maldet(10041): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 03 2025 03:35:54 hybrid1120 maldet(10041): {sigup} latest signature set already installed May 03 2025 03:35:54 hybrid1120 maldet(10129): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 03 2025 03:35:55 hybrid1120 maldet(10129): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 03 2025 03:35:55 hybrid1120 maldet(10129): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 03 2025 03:35:55 hybrid1120 maldet(10129): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 03 2025 03:35:55 hybrid1120 maldet(10129): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 03 2025 03:43:56 hybrid1120 maldet(10129): {scan} file list completed in 481s, found 1122 files... May 03 2025 03:43:56 hybrid1120 maldet(10129): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1122 files) in progress... May 03 2025 03:44:36 hybrid1120 maldet(10129): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1122, malware hits 0, cleaned hits 0, time 522s May 03 2025 03:44:36 hybrid1120 maldet(10129): {scan} scan report saved, to view run: maldet --report 250503-0335.10129 May 04 2025 04:09:51 hybrid1120 maldet(4692): {update} checking for available updates... May 04 2025 04:09:51 hybrid1120 maldet(4692): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 04 2025 04:09:51 hybrid1120 maldet(4692): {update} hashing install files and checking against server... May 04 2025 04:09:52 hybrid1120 maldet(4692): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 04 2025 04:09:52 hybrid1120 maldet(4692): {update} latest version already installed. May 04 2025 04:09:52 hybrid1120 maldet(4802): {sigup} performing signature update check... May 04 2025 04:09:52 hybrid1120 maldet(4802): {sigup} local signature set is version 202505013184135 May 04 2025 04:09:52 hybrid1120 maldet(4802): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 04 2025 04:09:52 hybrid1120 maldet(4802): {sigup} latest signature set already installed May 04 2025 04:09:52 hybrid1120 maldet(4890): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 04 2025 04:09:53 hybrid1120 maldet(4890): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 04 2025 04:09:53 hybrid1120 maldet(4890): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 04 2025 04:09:53 hybrid1120 maldet(4890): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 04 2025 04:09:53 hybrid1120 maldet(4890): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 04 2025 04:16:27 hybrid1120 maldet(4890): {scan} file list completed in 394s, found 1539 files... May 04 2025 04:16:27 hybrid1120 maldet(4890): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1539 files) in progress... May 04 2025 04:17:16 hybrid1120 maldet(4890): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1539, malware hits 0, cleaned hits 0, time 444s May 04 2025 04:17:16 hybrid1120 maldet(4890): {scan} scan report saved, to view run: maldet --report 250504-0409.4890 May 05 2025 04:05:55 hybrid1120 maldet(20840): {update} checking for available updates... May 05 2025 04:05:56 hybrid1120 maldet(20840): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 05 2025 04:05:56 hybrid1120 maldet(20840): {update} hashing install files and checking against server... May 05 2025 04:05:56 hybrid1120 maldet(20840): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 05 2025 04:05:56 hybrid1120 maldet(20840): {update} latest version already installed. May 05 2025 04:05:56 hybrid1120 maldet(20953): {sigup} performing signature update check... May 05 2025 04:05:56 hybrid1120 maldet(20953): {sigup} local signature set is version 202505013184135 May 05 2025 04:05:57 hybrid1120 maldet(20953): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 05 2025 04:05:57 hybrid1120 maldet(20953): {sigup} new signature set 20250504486927 available May 05 2025 04:05:57 hybrid1120 maldet(20953): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 05 2025 04:05:58 hybrid1120 maldet(20953): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 05 2025 04:05:58 hybrid1120 maldet(20953): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 05 2025 04:05:58 hybrid1120 maldet(20953): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 05 2025 04:05:59 hybrid1120 maldet(20953): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 05 2025 04:05:59 hybrid1120 maldet(20953): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 05 2025 04:05:59 hybrid1120 maldet(20953): {sigup} verified md5sum of maldet-sigpack.tgz May 05 2025 04:06:00 hybrid1120 maldet(20953): {sigup} unpacked and installed maldet-sigpack.tgz May 05 2025 04:06:00 hybrid1120 maldet(20953): {sigup} verified md5sum of maldet-clean.tgz May 05 2025 04:06:00 hybrid1120 maldet(20953): {sigup} unpacked and installed maldet-clean.tgz May 05 2025 04:06:00 hybrid1120 maldet(20953): {sigup} signature set update completed May 05 2025 04:06:00 hybrid1120 maldet(20953): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 05 2025 04:06:00 hybrid1120 maldet(21179): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 05 2025 04:06:01 hybrid1120 maldet(21179): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 05 2025 04:06:01 hybrid1120 maldet(21179): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 05 2025 04:06:01 hybrid1120 maldet(21179): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 05 2025 04:06:01 hybrid1120 maldet(21179): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 05 2025 04:12:54 hybrid1120 maldet(21179): {scan} file list completed in 413s, found 1209 files... May 05 2025 04:12:54 hybrid1120 maldet(21179): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1209 files) in progress... May 05 2025 04:13:21 hybrid1120 maldet(21179): {hit} malware hit {HEX}php.nested.base64.652 found for /home/itscm/public_html/cgi-bin/149508/index.php May 05 2025 04:13:21 hybrid1120 maldet(21179): {hit} malware hit {HEX}php.nested.base64.652 found for /home/itscm/public_html/wp-admin/includes/94691/index.php May 05 2025 04:13:36 hybrid1120 maldet(21179): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1209, malware hits 2, cleaned hits 0, time 456s May 05 2025 04:13:36 hybrid1120 maldet(21179): {scan} scan report saved, to view run: maldet --report 250505-0406.21179 May 05 2025 04:13:36 hybrid1120 maldet(21179): {scan} quarantine is disabled! set quarantine_hits=1 in conf.maldet or to quarantine results run: maldet -q 250505-0406.21179 May 05 2025 04:13:36 hybrid1120 maldet(21179): {alert} sent scan report to report@planethoster.info, belltver@yahoo.fr May 06 2025 02:54:34 hybrid1120 maldet(468): {update} checking for available updates... May 06 2025 02:54:34 hybrid1120 maldet(468): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 06 2025 02:54:34 hybrid1120 maldet(468): {update} hashing install files and checking against server... May 06 2025 02:54:35 hybrid1120 maldet(468): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 06 2025 02:54:35 hybrid1120 maldet(468): {update} latest version already installed. May 06 2025 02:54:35 hybrid1120 maldet(595): {sigup} performing signature update check... May 06 2025 02:54:35 hybrid1120 maldet(595): {sigup} local signature set is version 20250504486927 May 06 2025 02:54:36 hybrid1120 maldet(595): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 06 2025 02:54:36 hybrid1120 maldet(595): {sigup} latest signature set already installed May 06 2025 02:54:36 hybrid1120 maldet(700): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 06 2025 02:54:37 hybrid1120 maldet(700): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 06 2025 02:54:37 hybrid1120 maldet(700): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 06 2025 02:54:37 hybrid1120 maldet(700): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 06 2025 02:54:37 hybrid1120 maldet(700): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 06 2025 03:01:44 hybrid1120 maldet(700): {scan} file list completed in 427s, found 1514 files... May 06 2025 03:01:44 hybrid1120 maldet(700): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1514 files) in progress... May 06 2025 03:02:33 hybrid1120 maldet(700): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1514, malware hits 0, cleaned hits 0, time 477s May 06 2025 03:02:33 hybrid1120 maldet(700): {scan} scan report saved, to view run: maldet --report 250506-0254.700 May 07 2025 04:12:59 hybrid1120 maldet(16542): {update} checking for available updates... May 07 2025 04:12:59 hybrid1120 maldet(16542): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 07 2025 04:12:59 hybrid1120 maldet(16542): {update} hashing install files and checking against server... May 07 2025 04:12:59 hybrid1120 maldet(16542): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 07 2025 04:12:59 hybrid1120 maldet(16542): {update} latest version already installed. May 07 2025 04:13:00 hybrid1120 maldet(16663): {sigup} performing signature update check... May 07 2025 04:13:00 hybrid1120 maldet(16663): {sigup} local signature set is version 20250504486927 May 07 2025 04:13:00 hybrid1120 maldet(16663): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 07 2025 04:13:00 hybrid1120 maldet(16663): {sigup} latest signature set already installed May 07 2025 04:13:00 hybrid1120 maldet(16751): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 07 2025 04:13:01 hybrid1120 maldet(16751): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 07 2025 04:13:01 hybrid1120 maldet(16751): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 07 2025 04:13:01 hybrid1120 maldet(16751): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 07 2025 04:13:01 hybrid1120 maldet(16751): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 07 2025 04:20:45 hybrid1120 maldet(16751): {scan} file list completed in 464s, found 4267 files... May 07 2025 04:20:45 hybrid1120 maldet(16751): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (4267 files) in progress... May 07 2025 04:22:52 hybrid1120 maldet(16751): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 4267, malware hits 0, cleaned hits 0, time 591s May 07 2025 04:22:52 hybrid1120 maldet(16751): {scan} scan report saved, to view run: maldet --report 250507-0413.16751 May 08 2025 03:39:20 hybrid1120 maldet(11743): {update} checking for available updates... May 08 2025 03:39:20 hybrid1120 maldet(11743): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 08 2025 03:39:20 hybrid1120 maldet(11743): {update} hashing install files and checking against server... May 08 2025 03:39:21 hybrid1120 maldet(11743): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 08 2025 03:39:21 hybrid1120 maldet(11743): {update} latest version already installed. May 08 2025 03:39:21 hybrid1120 maldet(11872): {sigup} performing signature update check... May 08 2025 03:39:21 hybrid1120 maldet(11872): {sigup} local signature set is version 20250504486927 May 08 2025 03:39:21 hybrid1120 maldet(11872): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 08 2025 03:39:22 hybrid1120 maldet(11872): {sigup} new signature set 202505071163993 available May 08 2025 03:39:22 hybrid1120 maldet(11872): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 08 2025 03:39:23 hybrid1120 maldet(11872): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 08 2025 03:39:23 hybrid1120 maldet(11872): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 08 2025 03:39:23 hybrid1120 maldet(11872): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 08 2025 03:39:24 hybrid1120 maldet(11872): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 08 2025 03:39:24 hybrid1120 maldet(11872): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 08 2025 03:39:24 hybrid1120 maldet(11872): {sigup} verified md5sum of maldet-sigpack.tgz May 08 2025 03:39:24 hybrid1120 maldet(11872): {sigup} unpacked and installed maldet-sigpack.tgz May 08 2025 03:39:25 hybrid1120 maldet(11872): {sigup} verified md5sum of maldet-clean.tgz May 08 2025 03:39:25 hybrid1120 maldet(11872): {sigup} unpacked and installed maldet-clean.tgz May 08 2025 03:39:25 hybrid1120 maldet(11872): {sigup} signature set update completed May 08 2025 03:39:25 hybrid1120 maldet(11872): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 08 2025 03:39:25 hybrid1120 maldet(12080): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 08 2025 03:39:25 hybrid1120 maldet(12080): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 08 2025 03:39:25 hybrid1120 maldet(12080): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 08 2025 03:39:25 hybrid1120 maldet(12080): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 08 2025 03:39:25 hybrid1120 maldet(12080): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 08 2025 03:47:28 hybrid1120 maldet(12080): {scan} file list completed in 483s, found 1787 files... May 08 2025 03:47:28 hybrid1120 maldet(12080): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1787 files) in progress... May 08 2025 03:48:19 hybrid1120 maldet(12080): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1787, malware hits 0, cleaned hits 0, time 534s May 08 2025 03:48:19 hybrid1120 maldet(12080): {scan} scan report saved, to view run: maldet --report 250508-0339.12080 May 09 2025 02:29:35 hybrid1120 maldet(26231): {update} checking for available updates... May 09 2025 02:29:36 hybrid1120 maldet(26231): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 09 2025 02:29:36 hybrid1120 maldet(26231): {update} hashing install files and checking against server... May 09 2025 02:29:36 hybrid1120 maldet(26231): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 09 2025 02:29:36 hybrid1120 maldet(26231): {update} latest version already installed. May 09 2025 02:29:36 hybrid1120 maldet(26340): {sigup} performing signature update check... May 09 2025 02:29:36 hybrid1120 maldet(26340): {sigup} local signature set is version 202505071163993 May 09 2025 02:29:37 hybrid1120 maldet(26340): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 09 2025 02:29:37 hybrid1120 maldet(26340): {sigup} latest signature set already installed May 09 2025 02:29:37 hybrid1120 maldet(26428): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 09 2025 02:29:37 hybrid1120 maldet(26428): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 09 2025 02:29:37 hybrid1120 maldet(26428): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 09 2025 02:29:37 hybrid1120 maldet(26428): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 09 2025 02:29:37 hybrid1120 maldet(26428): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 09 2025 02:37:01 hybrid1120 maldet(26428): {scan} file list completed in 444s, found 1503 files... May 09 2025 02:37:01 hybrid1120 maldet(26428): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1503 files) in progress... May 09 2025 02:37:52 hybrid1120 maldet(26428): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1503, malware hits 0, cleaned hits 0, time 495s May 09 2025 02:37:52 hybrid1120 maldet(26428): {scan} scan report saved, to view run: maldet --report 250509-0229.26428 May 10 2025 03:35:39 hybrid1120 maldet(26491): {update} checking for available updates... May 10 2025 03:35:40 hybrid1120 maldet(26491): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 10 2025 03:35:40 hybrid1120 maldet(26491): {update} hashing install files and checking against server... May 10 2025 03:35:40 hybrid1120 maldet(26491): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 10 2025 03:35:40 hybrid1120 maldet(26491): {update} latest version already installed. May 10 2025 03:35:40 hybrid1120 maldet(26614): {sigup} performing signature update check... May 10 2025 03:35:40 hybrid1120 maldet(26614): {sigup} local signature set is version 202505071163993 May 10 2025 03:35:41 hybrid1120 maldet(26614): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 10 2025 03:35:41 hybrid1120 maldet(26614): {sigup} latest signature set already installed May 10 2025 03:35:41 hybrid1120 maldet(26705): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 10 2025 03:35:41 hybrid1120 maldet(26705): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 10 2025 03:35:41 hybrid1120 maldet(26705): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 10 2025 03:35:41 hybrid1120 maldet(26705): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 10 2025 03:35:41 hybrid1120 maldet(26705): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 10 2025 03:41:28 hybrid1120 maldet(26705): {scan} file list completed in 347s, found 1719 files... May 10 2025 03:41:28 hybrid1120 maldet(26705): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1719 files) in progress... May 10 2025 03:42:17 hybrid1120 maldet(26705): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1719, malware hits 0, cleaned hits 0, time 396s May 10 2025 03:42:17 hybrid1120 maldet(26705): {scan} scan report saved, to view run: maldet --report 250510-0335.26705 May 11 2025 02:44:14 hybrid1120 maldet(9926): {update} checking for available updates... May 11 2025 02:44:14 hybrid1120 maldet(9926): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 11 2025 02:44:14 hybrid1120 maldet(9926): {update} hashing install files and checking against server... May 11 2025 02:44:15 hybrid1120 maldet(9926): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 11 2025 02:44:15 hybrid1120 maldet(9926): {update} latest version already installed. May 11 2025 02:44:15 hybrid1120 maldet(10036): {sigup} performing signature update check... May 11 2025 02:44:15 hybrid1120 maldet(10036): {sigup} local signature set is version 202505071163993 May 11 2025 02:44:15 hybrid1120 maldet(10036): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 11 2025 02:44:16 hybrid1120 maldet(10036): {sigup} new signature set 202505102039127 available May 11 2025 02:44:16 hybrid1120 maldet(10036): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 11 2025 02:44:16 hybrid1120 maldet(10036): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 11 2025 02:44:17 hybrid1120 maldet(10036): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 11 2025 02:44:17 hybrid1120 maldet(10036): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 11 2025 02:44:17 hybrid1120 maldet(10036): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 11 2025 02:44:18 hybrid1120 maldet(10036): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 11 2025 02:44:18 hybrid1120 maldet(10036): {sigup} verified md5sum of maldet-sigpack.tgz May 11 2025 02:44:18 hybrid1120 maldet(10036): {sigup} unpacked and installed maldet-sigpack.tgz May 11 2025 02:44:18 hybrid1120 maldet(10036): {sigup} verified md5sum of maldet-clean.tgz May 11 2025 02:44:18 hybrid1120 maldet(10036): {sigup} unpacked and installed maldet-clean.tgz May 11 2025 02:44:18 hybrid1120 maldet(10036): {sigup} signature set update completed May 11 2025 02:44:18 hybrid1120 maldet(10036): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 11 2025 02:44:18 hybrid1120 maldet(10307): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 11 2025 02:44:19 hybrid1120 maldet(10307): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 11 2025 02:44:19 hybrid1120 maldet(10307): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 11 2025 02:44:19 hybrid1120 maldet(10307): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 11 2025 02:44:19 hybrid1120 maldet(10307): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 11 2025 02:50:48 hybrid1120 maldet(10307): {scan} file list completed in 389s, found 1242 files... May 11 2025 02:50:48 hybrid1120 maldet(10307): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1242 files) in progress... May 11 2025 02:51:24 hybrid1120 maldet(10307): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1242, malware hits 0, cleaned hits 0, time 426s May 11 2025 02:51:24 hybrid1120 maldet(10307): {scan} scan report saved, to view run: maldet --report 250511-0244.10307 May 12 2025 03:21:35 hybrid1120 maldet(29619): {update} checking for available updates... May 12 2025 03:21:36 hybrid1120 maldet(29619): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 12 2025 03:21:36 hybrid1120 maldet(29619): {update} hashing install files and checking against server... May 12 2025 03:21:37 hybrid1120 maldet(29619): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 12 2025 03:21:37 hybrid1120 maldet(29619): {update} latest version already installed. May 12 2025 03:21:37 hybrid1120 maldet(29745): {sigup} performing signature update check... May 12 2025 03:21:37 hybrid1120 maldet(29745): {sigup} local signature set is version 202505102039127 May 12 2025 03:21:37 hybrid1120 maldet(29745): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 12 2025 03:21:37 hybrid1120 maldet(29745): {sigup} latest signature set already installed May 12 2025 03:21:37 hybrid1120 maldet(29833): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 12 2025 03:21:38 hybrid1120 maldet(29833): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 12 2025 03:21:38 hybrid1120 maldet(29833): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 12 2025 03:21:38 hybrid1120 maldet(29833): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 12 2025 03:21:38 hybrid1120 maldet(29833): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 12 2025 03:28:51 hybrid1120 maldet(29833): {scan} file list completed in 433s, found 1615 files... May 12 2025 03:28:51 hybrid1120 maldet(29833): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1615 files) in progress... May 12 2025 03:29:47 hybrid1120 maldet(29833): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1615, malware hits 0, cleaned hits 0, time 490s May 12 2025 03:29:47 hybrid1120 maldet(29833): {scan} scan report saved, to view run: maldet --report 250512-0321.29833 May 13 2025 03:05:27 hybrid1120 maldet(10800): {update} checking for available updates... May 13 2025 03:06:13 hybrid1120 maldet(10800): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 13 2025 03:06:13 hybrid1120 maldet(10800): {update} hashing install files and checking against server... May 13 2025 03:06:51 hybrid1120 maldet(10800): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 13 2025 03:06:51 hybrid1120 maldet(10800): {update} latest version already installed. May 13 2025 03:06:51 hybrid1120 maldet(11940): {sigup} performing signature update check... May 13 2025 03:06:51 hybrid1120 maldet(11940): {sigup} local signature set is version 202505102039127 May 13 2025 03:07:20 hybrid1120 maldet(11940): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 13 2025 03:07:20 hybrid1120 maldet(11940): {sigup} latest signature set already installed May 13 2025 03:07:20 hybrid1120 maldet(12180): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 13 2025 03:07:20 hybrid1120 maldet(12180): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 13 2025 03:07:20 hybrid1120 maldet(12180): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 13 2025 03:07:20 hybrid1120 maldet(12180): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 13 2025 03:07:20 hybrid1120 maldet(12180): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 13 2025 03:14:33 hybrid1120 maldet(12180): {scan} file list completed in 433s, found 1435 files... May 13 2025 03:14:33 hybrid1120 maldet(12180): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1435 files) in progress... May 13 2025 03:15:16 hybrid1120 maldet(12180): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1435, malware hits 0, cleaned hits 0, time 476s May 13 2025 03:15:16 hybrid1120 maldet(12180): {scan} scan report saved, to view run: maldet --report 250513-0307.12180 May 14 2025 04:42:49 hybrid1120 maldet(17223): {update} checking for available updates... May 14 2025 04:42:49 hybrid1120 maldet(17223): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 14 2025 04:42:49 hybrid1120 maldet(17223): {update} hashing install files and checking against server... May 14 2025 04:42:50 hybrid1120 maldet(17223): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 14 2025 04:42:50 hybrid1120 maldet(17223): {update} latest version already installed. May 14 2025 04:42:50 hybrid1120 maldet(17336): {sigup} performing signature update check... May 14 2025 04:42:50 hybrid1120 maldet(17336): {sigup} local signature set is version 202505102039127 May 14 2025 04:42:51 hybrid1120 maldet(17336): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 14 2025 04:42:51 hybrid1120 maldet(17336): {sigup} new signature set 202505133012176 available May 14 2025 04:42:51 hybrid1120 maldet(17336): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 14 2025 04:42:52 hybrid1120 maldet(17336): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 14 2025 04:42:52 hybrid1120 maldet(17336): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 14 2025 04:42:52 hybrid1120 maldet(17336): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 14 2025 04:42:53 hybrid1120 maldet(17336): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 14 2025 04:42:53 hybrid1120 maldet(17336): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 14 2025 04:42:53 hybrid1120 maldet(17336): {sigup} verified md5sum of maldet-sigpack.tgz May 14 2025 04:42:54 hybrid1120 maldet(17336): {sigup} unpacked and installed maldet-sigpack.tgz May 14 2025 04:42:54 hybrid1120 maldet(17336): {sigup} verified md5sum of maldet-clean.tgz May 14 2025 04:42:54 hybrid1120 maldet(17336): {sigup} unpacked and installed maldet-clean.tgz May 14 2025 04:42:54 hybrid1120 maldet(17336): {sigup} signature set update completed May 14 2025 04:42:54 hybrid1120 maldet(17336): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 14 2025 04:42:54 hybrid1120 maldet(17557): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 14 2025 04:42:54 hybrid1120 maldet(17557): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 14 2025 04:42:54 hybrid1120 maldet(17557): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 14 2025 04:42:54 hybrid1120 maldet(17557): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 14 2025 04:42:54 hybrid1120 maldet(17557): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 14 2025 04:48:19 hybrid1120 maldet(17557): {scan} file list completed in 325s, found 1143 files... May 14 2025 04:48:19 hybrid1120 maldet(17557): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1143 files) in progress... May 14 2025 04:49:04 hybrid1120 maldet(17557): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1143, malware hits 0, cleaned hits 0, time 370s May 14 2025 04:49:04 hybrid1120 maldet(17557): {scan} scan report saved, to view run: maldet --report 250514-0442.17557 May 15 2025 03:14:39 hybrid1120 maldet(23194): {update} checking for available updates... May 15 2025 03:14:39 hybrid1120 maldet(23194): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 15 2025 03:14:39 hybrid1120 maldet(23194): {update} hashing install files and checking against server... May 15 2025 03:14:40 hybrid1120 maldet(23194): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 15 2025 03:14:40 hybrid1120 maldet(23194): {update} latest version already installed. May 15 2025 03:14:40 hybrid1120 maldet(23305): {sigup} performing signature update check... May 15 2025 03:14:40 hybrid1120 maldet(23305): {sigup} local signature set is version 202505133012176 May 15 2025 03:14:40 hybrid1120 maldet(23305): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 15 2025 03:14:41 hybrid1120 maldet(23305): {sigup} latest signature set already installed May 15 2025 03:14:41 hybrid1120 maldet(23393): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 15 2025 03:14:41 hybrid1120 maldet(23393): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 15 2025 03:14:41 hybrid1120 maldet(23393): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 15 2025 03:14:41 hybrid1120 maldet(23393): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 15 2025 03:14:41 hybrid1120 maldet(23393): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 15 2025 03:21:15 hybrid1120 maldet(23393): {scan} file list completed in 394s, found 1346 files... May 15 2025 03:21:15 hybrid1120 maldet(23393): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1346 files) in progress... May 15 2025 03:21:53 hybrid1120 maldet(23393): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1346, malware hits 0, cleaned hits 0, time 432s May 15 2025 03:21:53 hybrid1120 maldet(23393): {scan} scan report saved, to view run: maldet --report 250515-0314.23393 May 16 2025 02:36:03 hybrid1120 maldet(24065): {update} checking for available updates... May 16 2025 02:36:03 hybrid1120 maldet(24065): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 16 2025 02:36:03 hybrid1120 maldet(24065): {update} hashing install files and checking against server... May 16 2025 02:36:04 hybrid1120 maldet(24065): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 16 2025 02:36:04 hybrid1120 maldet(24065): {update} latest version already installed. May 16 2025 02:36:04 hybrid1120 maldet(24198): {sigup} performing signature update check... May 16 2025 02:36:04 hybrid1120 maldet(24198): {sigup} local signature set is version 202505133012176 May 16 2025 02:36:04 hybrid1120 maldet(24198): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 16 2025 02:36:04 hybrid1120 maldet(24198): {sigup} latest signature set already installed May 16 2025 02:36:05 hybrid1120 maldet(24286): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 16 2025 02:36:05 hybrid1120 maldet(24286): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 16 2025 02:36:05 hybrid1120 maldet(24286): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 16 2025 02:36:05 hybrid1120 maldet(24286): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 16 2025 02:36:05 hybrid1120 maldet(24286): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 16 2025 02:42:25 hybrid1120 maldet(24286): {scan} file list completed in 380s, found 1487 files... May 16 2025 02:42:25 hybrid1120 maldet(24286): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1487 files) in progress... May 16 2025 02:43:11 hybrid1120 maldet(24286): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1487, malware hits 0, cleaned hits 0, time 425s May 16 2025 02:43:11 hybrid1120 maldet(24286): {scan} scan report saved, to view run: maldet --report 250516-0236.24286 May 17 2025 02:56:33 hybrid1120 maldet(5722): {update} checking for available updates... May 17 2025 02:56:33 hybrid1120 maldet(5722): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 17 2025 02:56:33 hybrid1120 maldet(5722): {update} hashing install files and checking against server... May 17 2025 02:56:34 hybrid1120 maldet(5722): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 17 2025 02:56:34 hybrid1120 maldet(5722): {update} latest version already installed. May 17 2025 02:56:34 hybrid1120 maldet(5845): {sigup} performing signature update check... May 17 2025 02:56:34 hybrid1120 maldet(5845): {sigup} local signature set is version 202505133012176 May 17 2025 02:56:34 hybrid1120 maldet(5845): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 17 2025 02:56:34 hybrid1120 maldet(5845): {sigup} new signature set 202505163985107 available May 17 2025 02:56:34 hybrid1120 maldet(5845): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 17 2025 02:56:35 hybrid1120 maldet(5845): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 17 2025 02:56:36 hybrid1120 maldet(5845): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 17 2025 02:56:36 hybrid1120 maldet(5845): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 17 2025 02:56:36 hybrid1120 maldet(5845): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 17 2025 02:56:37 hybrid1120 maldet(5845): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 17 2025 02:56:37 hybrid1120 maldet(5845): {sigup} verified md5sum of maldet-sigpack.tgz May 17 2025 02:56:37 hybrid1120 maldet(5845): {sigup} unpacked and installed maldet-sigpack.tgz May 17 2025 02:56:37 hybrid1120 maldet(5845): {sigup} verified md5sum of maldet-clean.tgz May 17 2025 02:56:37 hybrid1120 maldet(5845): {sigup} unpacked and installed maldet-clean.tgz May 17 2025 02:56:37 hybrid1120 maldet(5845): {sigup} signature set update completed May 17 2025 02:56:37 hybrid1120 maldet(5845): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 17 2025 02:56:37 hybrid1120 maldet(6079): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 17 2025 02:56:38 hybrid1120 maldet(6079): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 17 2025 02:56:38 hybrid1120 maldet(6079): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 17 2025 02:56:38 hybrid1120 maldet(6079): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 17 2025 02:56:38 hybrid1120 maldet(6079): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 17 2025 03:02:24 hybrid1120 maldet(6079): {scan} file list completed in 346s, found 1652 files... May 17 2025 03:02:24 hybrid1120 maldet(6079): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1652 files) in progress... May 17 2025 03:03:11 hybrid1120 maldet(6079): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1652, malware hits 0, cleaned hits 0, time 394s May 17 2025 03:03:11 hybrid1120 maldet(6079): {scan} scan report saved, to view run: maldet --report 250517-0256.6079 May 18 2025 03:52:09 hybrid1120 maldet(21284): {update} checking for available updates... May 18 2025 03:52:10 hybrid1120 maldet(21284): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 18 2025 03:52:10 hybrid1120 maldet(21284): {update} hashing install files and checking against server... May 18 2025 03:52:10 hybrid1120 maldet(21284): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 18 2025 03:52:10 hybrid1120 maldet(21284): {update} latest version already installed. May 18 2025 03:52:10 hybrid1120 maldet(21925): {sigup} performing signature update check... May 18 2025 03:52:10 hybrid1120 maldet(21925): {sigup} local signature set is version 202505163985107 May 18 2025 03:52:11 hybrid1120 maldet(21925): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 18 2025 03:52:11 hybrid1120 maldet(21925): {sigup} latest signature set already installed May 18 2025 03:52:11 hybrid1120 maldet(22013): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 18 2025 03:52:11 hybrid1120 maldet(22013): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 18 2025 03:52:11 hybrid1120 maldet(22013): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 18 2025 03:52:11 hybrid1120 maldet(22013): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 18 2025 03:52:11 hybrid1120 maldet(22013): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 18 2025 03:57:06 hybrid1120 maldet(22013): {scan} file list completed in 295s, found 1467 files... May 18 2025 03:57:06 hybrid1120 maldet(22013): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1467 files) in progress... May 18 2025 03:57:53 hybrid1120 maldet(22013): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1467, malware hits 0, cleaned hits 0, time 341s May 18 2025 03:57:53 hybrid1120 maldet(22013): {scan} scan report saved, to view run: maldet --report 250518-0352.22013 May 19 2025 03:53:41 hybrid1120 maldet(13819): {update} checking for available updates... May 19 2025 03:53:42 hybrid1120 maldet(13819): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 19 2025 03:53:42 hybrid1120 maldet(13819): {update} hashing install files and checking against server... May 19 2025 03:53:42 hybrid1120 maldet(13819): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 19 2025 03:53:42 hybrid1120 maldet(13819): {update} latest version already installed. May 19 2025 03:53:42 hybrid1120 maldet(13930): {sigup} performing signature update check... May 19 2025 03:53:42 hybrid1120 maldet(13930): {sigup} local signature set is version 202505163985107 May 19 2025 03:53:43 hybrid1120 maldet(13930): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 19 2025 03:53:43 hybrid1120 maldet(13930): {sigup} latest signature set already installed May 19 2025 03:53:43 hybrid1120 maldet(14018): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 19 2025 03:53:43 hybrid1120 maldet(14018): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 19 2025 03:53:43 hybrid1120 maldet(14018): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 19 2025 03:53:43 hybrid1120 maldet(14018): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 19 2025 03:53:43 hybrid1120 maldet(14018): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 19 2025 03:59:11 hybrid1120 maldet(14018): {scan} file list completed in 328s, found 2077 files... May 19 2025 03:59:11 hybrid1120 maldet(14018): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2077 files) in progress... May 19 2025 04:00:18 hybrid1120 maldet(14018): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2077, malware hits 0, cleaned hits 0, time 395s May 19 2025 04:00:18 hybrid1120 maldet(14018): {scan} scan report saved, to view run: maldet --report 250519-0353.14018 May 20 2025 03:29:40 hybrid1120 maldet(27179): {update} checking for available updates... May 20 2025 03:29:41 hybrid1120 maldet(27179): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 20 2025 03:29:41 hybrid1120 maldet(27179): {update} hashing install files and checking against server... May 20 2025 03:29:41 hybrid1120 maldet(27179): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 20 2025 03:29:41 hybrid1120 maldet(27179): {update} latest version already installed. May 20 2025 03:29:41 hybrid1120 maldet(27288): {sigup} performing signature update check... May 20 2025 03:29:41 hybrid1120 maldet(27288): {sigup} local signature set is version 202505163985107 May 20 2025 03:29:42 hybrid1120 maldet(27288): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 20 2025 03:29:42 hybrid1120 maldet(27288): {sigup} new signature set 20250519762470 available May 20 2025 03:29:42 hybrid1120 maldet(27288): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 20 2025 03:29:43 hybrid1120 maldet(27288): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 20 2025 03:29:43 hybrid1120 maldet(27288): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 20 2025 03:29:43 hybrid1120 maldet(27288): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 20 2025 03:29:44 hybrid1120 maldet(27288): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 20 2025 03:29:44 hybrid1120 maldet(27288): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 20 2025 03:29:45 hybrid1120 maldet(27288): {sigup} verified md5sum of maldet-sigpack.tgz May 20 2025 03:29:45 hybrid1120 maldet(27288): {sigup} unpacked and installed maldet-sigpack.tgz May 20 2025 03:29:45 hybrid1120 maldet(27288): {sigup} verified md5sum of maldet-clean.tgz May 20 2025 03:29:45 hybrid1120 maldet(27288): {sigup} unpacked and installed maldet-clean.tgz May 20 2025 03:29:45 hybrid1120 maldet(27288): {sigup} signature set update completed May 20 2025 03:29:45 hybrid1120 maldet(27288): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 20 2025 03:29:45 hybrid1120 maldet(27507): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 20 2025 03:29:46 hybrid1120 maldet(27507): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 20 2025 03:29:46 hybrid1120 maldet(27507): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 20 2025 03:29:46 hybrid1120 maldet(27507): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 20 2025 03:29:46 hybrid1120 maldet(27507): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 20 2025 03:34:23 hybrid1120 maldet(27507): {scan} file list completed in 277s, found 4081 files... May 20 2025 03:34:23 hybrid1120 maldet(27507): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (4081 files) in progress... May 20 2025 03:36:17 hybrid1120 maldet(27507): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 4081, malware hits 0, cleaned hits 0, time 392s May 20 2025 03:36:17 hybrid1120 maldet(27507): {scan} scan report saved, to view run: maldet --report 250520-0329.27507 May 21 2025 02:55:07 hybrid1120 maldet(30639): {update} checking for available updates... May 21 2025 02:55:08 hybrid1120 maldet(30639): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 21 2025 02:55:08 hybrid1120 maldet(30639): {update} hashing install files and checking against server... May 21 2025 02:55:08 hybrid1120 maldet(30639): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 21 2025 02:55:08 hybrid1120 maldet(30639): {update} latest version already installed. May 21 2025 02:55:09 hybrid1120 maldet(30785): {sigup} performing signature update check... May 21 2025 02:55:09 hybrid1120 maldet(30785): {sigup} local signature set is version 20250519762470 May 21 2025 02:55:09 hybrid1120 maldet(30785): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 21 2025 02:55:09 hybrid1120 maldet(30785): {sigup} latest signature set already installed May 21 2025 02:55:09 hybrid1120 maldet(30873): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 21 2025 02:55:09 hybrid1120 maldet(30873): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 21 2025 02:55:09 hybrid1120 maldet(30873): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 21 2025 02:55:10 hybrid1120 maldet(30873): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 21 2025 02:55:10 hybrid1120 maldet(30873): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 21 2025 03:00:45 hybrid1120 maldet(30873): {scan} file list completed in 335s, found 2269 files... May 21 2025 03:00:45 hybrid1120 maldet(30873): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2269 files) in progress... May 21 2025 03:02:01 hybrid1120 maldet(30873): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2269, malware hits 0, cleaned hits 0, time 412s May 21 2025 03:02:01 hybrid1120 maldet(30873): {scan} scan report saved, to view run: maldet --report 250521-0255.30873 May 22 2025 04:41:28 hybrid1120 maldet(31384): {update} checking for available updates... May 22 2025 04:41:29 hybrid1120 maldet(31384): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 22 2025 04:41:29 hybrid1120 maldet(31384): {update} hashing install files and checking against server... May 22 2025 04:41:29 hybrid1120 maldet(31384): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 22 2025 04:41:29 hybrid1120 maldet(31384): {update} latest version already installed. May 22 2025 04:41:29 hybrid1120 maldet(31494): {sigup} performing signature update check... May 22 2025 04:41:29 hybrid1120 maldet(31494): {sigup} local signature set is version 20250519762470 May 22 2025 04:41:30 hybrid1120 maldet(31494): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 22 2025 04:41:30 hybrid1120 maldet(31494): {sigup} latest signature set already installed May 22 2025 04:41:30 hybrid1120 maldet(31591): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 22 2025 04:41:30 hybrid1120 maldet(31591): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 22 2025 04:41:30 hybrid1120 maldet(31591): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 22 2025 04:41:30 hybrid1120 maldet(31591): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 22 2025 04:41:30 hybrid1120 maldet(31591): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 22 2025 04:46:13 hybrid1120 maldet(31591): {scan} file list completed in 283s, found 2269 files... May 22 2025 04:46:13 hybrid1120 maldet(31591): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2269 files) in progress... May 22 2025 04:47:37 hybrid1120 maldet(31591): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2269, malware hits 0, cleaned hits 0, time 367s May 22 2025 04:47:37 hybrid1120 maldet(31591): {scan} scan report saved, to view run: maldet --report 250522-0441.31591 May 23 2025 03:59:28 hybrid1120 maldet(19198): {update} checking for available updates... May 23 2025 03:59:28 hybrid1120 maldet(19198): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 23 2025 03:59:28 hybrid1120 maldet(19198): {update} hashing install files and checking against server... May 23 2025 03:59:29 hybrid1120 maldet(19198): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 23 2025 03:59:29 hybrid1120 maldet(19198): {update} latest version already installed. May 23 2025 03:59:29 hybrid1120 maldet(19320): {sigup} performing signature update check... May 23 2025 03:59:29 hybrid1120 maldet(19320): {sigup} local signature set is version 20250519762470 May 23 2025 03:59:29 hybrid1120 maldet(19320): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 23 2025 03:59:29 hybrid1120 maldet(19320): {sigup} new signature set 202505221736773 available May 23 2025 03:59:29 hybrid1120 maldet(19320): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 23 2025 03:59:30 hybrid1120 maldet(19320): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 23 2025 03:59:31 hybrid1120 maldet(19320): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 23 2025 03:59:31 hybrid1120 maldet(19320): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 23 2025 03:59:31 hybrid1120 maldet(19320): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 23 2025 03:59:32 hybrid1120 maldet(19320): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 23 2025 03:59:32 hybrid1120 maldet(19320): {sigup} verified md5sum of maldet-sigpack.tgz May 23 2025 03:59:32 hybrid1120 maldet(19320): {sigup} unpacked and installed maldet-sigpack.tgz May 23 2025 03:59:32 hybrid1120 maldet(19320): {sigup} verified md5sum of maldet-clean.tgz May 23 2025 03:59:32 hybrid1120 maldet(19320): {sigup} unpacked and installed maldet-clean.tgz May 23 2025 03:59:32 hybrid1120 maldet(19320): {sigup} signature set update completed May 23 2025 03:59:32 hybrid1120 maldet(19320): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 23 2025 03:59:32 hybrid1120 maldet(19581): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 23 2025 03:59:33 hybrid1120 maldet(19581): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 23 2025 03:59:33 hybrid1120 maldet(19581): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 23 2025 03:59:33 hybrid1120 maldet(19581): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 23 2025 03:59:33 hybrid1120 maldet(19581): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 23 2025 04:06:18 hybrid1120 maldet(19581): {scan} file list completed in 405s, found 1651 files... May 23 2025 04:06:18 hybrid1120 maldet(19581): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1651 files) in progress... May 23 2025 04:07:16 hybrid1120 maldet(19581): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1651, malware hits 0, cleaned hits 0, time 464s May 23 2025 04:07:16 hybrid1120 maldet(19581): {scan} scan report saved, to view run: maldet --report 250523-0359.19581 May 24 2025 03:27:51 hybrid1120 maldet(5097): {update} checking for available updates... May 24 2025 03:27:52 hybrid1120 maldet(5097): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 24 2025 03:27:52 hybrid1120 maldet(5097): {update} hashing install files and checking against server... May 24 2025 03:27:52 hybrid1120 maldet(5097): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 24 2025 03:27:52 hybrid1120 maldet(5097): {update} latest version already installed. May 24 2025 03:27:52 hybrid1120 maldet(5211): {sigup} performing signature update check... May 24 2025 03:27:52 hybrid1120 maldet(5211): {sigup} local signature set is version 202505221736773 May 24 2025 03:27:53 hybrid1120 maldet(5211): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 24 2025 03:27:53 hybrid1120 maldet(5211): {sigup} latest signature set already installed May 24 2025 03:27:53 hybrid1120 maldet(5302): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 24 2025 03:27:53 hybrid1120 maldet(5302): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 24 2025 03:27:53 hybrid1120 maldet(5302): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 24 2025 03:27:53 hybrid1120 maldet(5302): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 24 2025 03:27:53 hybrid1120 maldet(5302): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 24 2025 03:35:11 hybrid1120 maldet(5302): {scan} file list completed in 438s, found 2082 files... May 24 2025 03:35:11 hybrid1120 maldet(5302): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2082 files) in progress... May 24 2025 03:36:19 hybrid1120 maldet(5302): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2082, malware hits 0, cleaned hits 0, time 506s May 24 2025 03:36:19 hybrid1120 maldet(5302): {scan} scan report saved, to view run: maldet --report 250524-0327.5302 May 25 2025 03:41:03 hybrid1120 maldet(23108): {update} checking for available updates... May 25 2025 03:41:03 hybrid1120 maldet(23108): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 25 2025 03:41:03 hybrid1120 maldet(23108): {update} hashing install files and checking against server... May 25 2025 03:41:04 hybrid1120 maldet(23108): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 25 2025 03:41:04 hybrid1120 maldet(23108): {update} latest version already installed. May 25 2025 03:41:04 hybrid1120 maldet(23225): {sigup} performing signature update check... May 25 2025 03:41:04 hybrid1120 maldet(23225): {sigup} local signature set is version 202505221736773 May 25 2025 03:41:04 hybrid1120 maldet(23225): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 25 2025 03:41:04 hybrid1120 maldet(23225): {sigup} latest signature set already installed May 25 2025 03:41:04 hybrid1120 maldet(23313): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 25 2025 03:41:05 hybrid1120 maldet(23313): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 25 2025 03:41:05 hybrid1120 maldet(23313): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 25 2025 03:41:05 hybrid1120 maldet(23313): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 25 2025 03:41:05 hybrid1120 maldet(23313): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 25 2025 03:47:07 hybrid1120 maldet(23313): {scan} file list completed in 362s, found 1476 files... May 25 2025 03:47:07 hybrid1120 maldet(23313): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1476 files) in progress... May 25 2025 03:48:08 hybrid1120 maldet(23313): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1476, malware hits 0, cleaned hits 0, time 424s May 25 2025 03:48:08 hybrid1120 maldet(23313): {scan} scan report saved, to view run: maldet --report 250525-0341.23313 May 26 2025 02:38:11 hybrid1120 maldet(13478): {update} checking for available updates... May 26 2025 02:38:12 hybrid1120 maldet(13478): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 26 2025 02:38:12 hybrid1120 maldet(13478): {update} hashing install files and checking against server... May 26 2025 02:38:12 hybrid1120 maldet(13478): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 26 2025 02:38:12 hybrid1120 maldet(13478): {update} latest version already installed. May 26 2025 02:38:12 hybrid1120 maldet(13589): {sigup} performing signature update check... May 26 2025 02:38:12 hybrid1120 maldet(13589): {sigup} local signature set is version 202505221736773 May 26 2025 02:38:13 hybrid1120 maldet(13589): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 26 2025 02:38:13 hybrid1120 maldet(13589): {sigup} new signature set 202505252708832 available May 26 2025 02:38:13 hybrid1120 maldet(13589): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 26 2025 02:38:14 hybrid1120 maldet(13589): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 26 2025 02:38:15 hybrid1120 maldet(13589): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 26 2025 02:38:15 hybrid1120 maldet(13589): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 26 2025 02:38:15 hybrid1120 maldet(13589): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 26 2025 02:38:16 hybrid1120 maldet(13589): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 26 2025 02:38:16 hybrid1120 maldet(13589): {sigup} verified md5sum of maldet-sigpack.tgz May 26 2025 02:38:16 hybrid1120 maldet(13589): {sigup} unpacked and installed maldet-sigpack.tgz May 26 2025 02:38:16 hybrid1120 maldet(13589): {sigup} verified md5sum of maldet-clean.tgz May 26 2025 02:38:16 hybrid1120 maldet(13589): {sigup} unpacked and installed maldet-clean.tgz May 26 2025 02:38:16 hybrid1120 maldet(13589): {sigup} signature set update completed May 26 2025 02:38:16 hybrid1120 maldet(13589): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 26 2025 02:38:16 hybrid1120 maldet(13806): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 26 2025 02:38:17 hybrid1120 maldet(13806): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 26 2025 02:38:17 hybrid1120 maldet(13806): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 26 2025 02:38:17 hybrid1120 maldet(13806): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 26 2025 02:38:17 hybrid1120 maldet(13806): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 26 2025 02:43:52 hybrid1120 maldet(13806): {scan} file list completed in 335s, found 1350 files... May 26 2025 02:43:52 hybrid1120 maldet(13806): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1350 files) in progress... May 26 2025 02:44:46 hybrid1120 maldet(13806): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1350, malware hits 0, cleaned hits 0, time 390s May 26 2025 02:44:46 hybrid1120 maldet(13806): {scan} scan report saved, to view run: maldet --report 250526-0238.13806 May 27 2025 02:34:26 hybrid1120 maldet(4259): {update} checking for available updates... May 27 2025 02:34:27 hybrid1120 maldet(4259): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 27 2025 02:34:27 hybrid1120 maldet(4259): {update} hashing install files and checking against server... May 27 2025 02:34:27 hybrid1120 maldet(4259): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 27 2025 02:34:27 hybrid1120 maldet(4259): {update} latest version already installed. May 27 2025 02:34:27 hybrid1120 maldet(4373): {sigup} performing signature update check... May 27 2025 02:34:27 hybrid1120 maldet(4373): {sigup} local signature set is version 202505252708832 May 27 2025 02:34:28 hybrid1120 maldet(4373): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 27 2025 02:34:28 hybrid1120 maldet(4373): {sigup} latest signature set already installed May 27 2025 02:34:28 hybrid1120 maldet(4462): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 27 2025 02:34:29 hybrid1120 maldet(4462): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 27 2025 02:34:29 hybrid1120 maldet(4462): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 27 2025 02:34:29 hybrid1120 maldet(4462): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 27 2025 02:34:29 hybrid1120 maldet(4462): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 27 2025 02:41:44 hybrid1120 maldet(4462): {scan} file list completed in 435s, found 2016 files... May 27 2025 02:41:44 hybrid1120 maldet(4462): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2016 files) in progress... May 27 2025 02:42:59 hybrid1120 maldet(4462): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2016, malware hits 0, cleaned hits 0, time 511s May 27 2025 02:42:59 hybrid1120 maldet(4462): {scan} scan report saved, to view run: maldet --report 250527-0234.4462 May 28 2025 03:31:13 hybrid1120 maldet(3808): {update} checking for available updates... May 28 2025 03:31:14 hybrid1120 maldet(3808): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 28 2025 03:31:14 hybrid1120 maldet(3808): {update} hashing install files and checking against server... May 28 2025 03:31:14 hybrid1120 maldet(3808): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 28 2025 03:31:14 hybrid1120 maldet(3808): {update} latest version already installed. May 28 2025 03:31:14 hybrid1120 maldet(3944): {sigup} performing signature update check... May 28 2025 03:31:14 hybrid1120 maldet(3944): {sigup} local signature set is version 202505252708832 May 28 2025 03:31:15 hybrid1120 maldet(3944): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 28 2025 03:31:15 hybrid1120 maldet(3944): {sigup} latest signature set already installed May 28 2025 03:31:15 hybrid1120 maldet(4039): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 28 2025 03:31:15 hybrid1120 maldet(4039): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 28 2025 03:31:15 hybrid1120 maldet(4039): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 28 2025 03:31:15 hybrid1120 maldet(4039): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 28 2025 03:31:15 hybrid1120 maldet(4039): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 28 2025 03:37:32 hybrid1120 maldet(4039): {scan} file list completed in 377s, found 2049 files... May 28 2025 03:37:32 hybrid1120 maldet(4039): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2049 files) in progress... May 28 2025 03:38:49 hybrid1120 maldet(4039): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2049, malware hits 0, cleaned hits 0, time 454s May 28 2025 03:38:49 hybrid1120 maldet(4039): {scan} scan report saved, to view run: maldet --report 250528-0331.4039 May 29 2025 04:09:40 hybrid1120 maldet(31085): {update} checking for available updates... May 29 2025 04:09:41 hybrid1120 maldet(31085): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 29 2025 04:09:41 hybrid1120 maldet(31085): {update} hashing install files and checking against server... May 29 2025 04:09:41 hybrid1120 maldet(31085): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 29 2025 04:09:41 hybrid1120 maldet(31085): {update} latest version already installed. May 29 2025 04:09:41 hybrid1120 maldet(31194): {sigup} performing signature update check... May 29 2025 04:09:41 hybrid1120 maldet(31194): {sigup} local signature set is version 202505252708832 May 29 2025 04:09:42 hybrid1120 maldet(31194): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 29 2025 04:09:42 hybrid1120 maldet(31194): {sigup} new signature set 202505283679777 available May 29 2025 04:09:42 hybrid1120 maldet(31194): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 29 2025 04:09:43 hybrid1120 maldet(31194): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 29 2025 04:09:43 hybrid1120 maldet(31194): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 29 2025 04:09:43 hybrid1120 maldet(31194): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 29 2025 04:09:44 hybrid1120 maldet(31194): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 29 2025 04:09:44 hybrid1120 maldet(31194): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 29 2025 04:09:44 hybrid1120 maldet(31194): {sigup} verified md5sum of maldet-sigpack.tgz May 29 2025 04:09:45 hybrid1120 maldet(31194): {sigup} unpacked and installed maldet-sigpack.tgz May 29 2025 04:09:45 hybrid1120 maldet(31194): {sigup} verified md5sum of maldet-clean.tgz May 29 2025 04:09:45 hybrid1120 maldet(31194): {sigup} unpacked and installed maldet-clean.tgz May 29 2025 04:09:45 hybrid1120 maldet(31194): {sigup} signature set update completed May 29 2025 04:09:45 hybrid1120 maldet(31194): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 29 2025 04:09:45 hybrid1120 maldet(31440): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 29 2025 04:09:45 hybrid1120 maldet(31440): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 29 2025 04:09:45 hybrid1120 maldet(31440): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 29 2025 04:09:45 hybrid1120 maldet(31440): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 29 2025 04:09:45 hybrid1120 maldet(31440): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 29 2025 04:16:27 hybrid1120 maldet(31440): {scan} file list completed in 402s, found 1749 files... May 29 2025 04:16:27 hybrid1120 maldet(31440): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1749 files) in progress... May 29 2025 04:17:28 hybrid1120 maldet(31440): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1749, malware hits 0, cleaned hits 0, time 463s May 29 2025 04:17:28 hybrid1120 maldet(31440): {scan} scan report saved, to view run: maldet --report 250529-0409.31440 May 30 2025 03:43:48 hybrid1120 maldet(29174): {update} checking for available updates... May 30 2025 03:43:48 hybrid1120 maldet(29174): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 30 2025 03:43:48 hybrid1120 maldet(29174): {update} hashing install files and checking against server... May 30 2025 03:43:49 hybrid1120 maldet(29174): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 30 2025 03:43:49 hybrid1120 maldet(29174): {update} latest version already installed. May 30 2025 03:43:49 hybrid1120 maldet(29301): {sigup} performing signature update check... May 30 2025 03:43:49 hybrid1120 maldet(29301): {sigup} local signature set is version 202505283679777 May 30 2025 03:43:49 hybrid1120 maldet(29301): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 30 2025 03:43:49 hybrid1120 maldet(29301): {sigup} latest signature set already installed May 30 2025 03:43:50 hybrid1120 maldet(29389): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 30 2025 03:43:50 hybrid1120 maldet(29389): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 30 2025 03:43:50 hybrid1120 maldet(29389): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 30 2025 03:43:50 hybrid1120 maldet(29389): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 30 2025 03:43:50 hybrid1120 maldet(29389): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 30 2025 03:49:59 hybrid1120 maldet(29389): {scan} file list completed in 369s, found 1826 files... May 30 2025 03:49:59 hybrid1120 maldet(29389): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1826 files) in progress... May 30 2025 03:51:18 hybrid1120 maldet(29389): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1826, malware hits 0, cleaned hits 0, time 448s May 30 2025 03:51:18 hybrid1120 maldet(29389): {scan} scan report saved, to view run: maldet --report 250530-0343.29389 May 31 2025 03:16:42 hybrid1120 maldet(30588): {update} checking for available updates... May 31 2025 03:16:42 hybrid1120 maldet(30588): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 31 2025 03:16:42 hybrid1120 maldet(30588): {update} hashing install files and checking against server... May 31 2025 03:16:43 hybrid1120 maldet(30588): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 31 2025 03:16:43 hybrid1120 maldet(30588): {update} latest version already installed. May 31 2025 03:16:43 hybrid1120 maldet(30697): {sigup} performing signature update check... May 31 2025 03:16:43 hybrid1120 maldet(30697): {sigup} local signature set is version 202505283679777 May 31 2025 03:16:43 hybrid1120 maldet(30697): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 31 2025 03:16:43 hybrid1120 maldet(30697): {sigup} latest signature set already installed May 31 2025 03:16:43 hybrid1120 maldet(30785): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 31 2025 03:16:44 hybrid1120 maldet(30785): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 31 2025 03:16:44 hybrid1120 maldet(30785): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 31 2025 03:16:44 hybrid1120 maldet(30785): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 31 2025 03:16:44 hybrid1120 maldet(30785): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 31 2025 03:24:26 hybrid1120 maldet(30785): {scan} file list completed in 462s, found 1417 files... May 31 2025 03:24:26 hybrid1120 maldet(30785): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1417 files) in progress... May 31 2025 03:25:24 hybrid1120 maldet(30785): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1417, malware hits 0, cleaned hits 0, time 521s May 31 2025 03:25:24 hybrid1120 maldet(30785): {scan} scan report saved, to view run: maldet --report 250531-0316.30785 Jun 01 2025 03:31:12 hybrid1120 maldet(13781): {update} checking for available updates... Jun 01 2025 03:31:13 hybrid1120 maldet(13781): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 01 2025 03:31:13 hybrid1120 maldet(13781): {update} hashing install files and checking against server... Jun 01 2025 03:31:14 hybrid1120 maldet(13781): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 01 2025 03:31:14 hybrid1120 maldet(13781): {update} latest version already installed. Jun 01 2025 03:31:14 hybrid1120 maldet(13907): {sigup} performing signature update check... Jun 01 2025 03:31:14 hybrid1120 maldet(13907): {sigup} local signature set is version 202505283679777 Jun 01 2025 03:31:14 hybrid1120 maldet(13907): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 01 2025 03:31:14 hybrid1120 maldet(13907): {sigup} new signature set 20250531456902 available Jun 01 2025 03:31:14 hybrid1120 maldet(13907): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 01 2025 03:31:16 hybrid1120 maldet(13907): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 01 2025 03:31:16 hybrid1120 maldet(13907): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 01 2025 03:31:16 hybrid1120 maldet(13907): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 01 2025 03:31:17 hybrid1120 maldet(13907): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 01 2025 03:31:17 hybrid1120 maldet(13907): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 01 2025 03:31:17 hybrid1120 maldet(13907): {sigup} verified md5sum of maldet-sigpack.tgz Jun 01 2025 03:31:18 hybrid1120 maldet(13907): {sigup} unpacked and installed maldet-sigpack.tgz Jun 01 2025 03:31:18 hybrid1120 maldet(13907): {sigup} verified md5sum of maldet-clean.tgz Jun 01 2025 03:31:18 hybrid1120 maldet(13907): {sigup} unpacked and installed maldet-clean.tgz Jun 01 2025 03:31:18 hybrid1120 maldet(13907): {sigup} signature set update completed Jun 01 2025 03:31:18 hybrid1120 maldet(13907): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 01 2025 03:31:18 hybrid1120 maldet(14135): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 01 2025 03:31:18 hybrid1120 maldet(14135): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 01 2025 03:31:18 hybrid1120 maldet(14135): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 01 2025 03:31:18 hybrid1120 maldet(14135): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 01 2025 03:31:18 hybrid1120 maldet(14135): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 01 2025 03:38:40 hybrid1120 maldet(14135): {scan} file list completed in 442s, found 1352 files... Jun 01 2025 03:38:40 hybrid1120 maldet(14135): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1352 files) in progress... Jun 01 2025 03:39:36 hybrid1120 maldet(14135): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1352, malware hits 0, cleaned hits 0, time 498s Jun 01 2025 03:39:36 hybrid1120 maldet(14135): {scan} scan report saved, to view run: maldet --report 250601-0331.14135 Jun 02 2025 04:47:57 hybrid1120 maldet(30245): {update} checking for available updates... Jun 02 2025 04:48:02 hybrid1120 maldet(30245): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 02 2025 04:48:02 hybrid1120 maldet(30245): {update} hashing install files and checking against server... Jun 02 2025 04:48:07 hybrid1120 maldet(30245): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 02 2025 04:48:07 hybrid1120 maldet(30245): {update} latest version already installed. Jun 02 2025 04:48:07 hybrid1120 maldet(30405): {sigup} performing signature update check... Jun 02 2025 04:48:07 hybrid1120 maldet(30405): {sigup} local signature set is version 20250531456902 Jun 02 2025 04:48:12 hybrid1120 maldet(30405): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 02 2025 04:48:12 hybrid1120 maldet(30405): {sigup} new signature set 202506011196154 available Jun 02 2025 04:48:12 hybrid1120 maldet(30405): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 02 2025 04:48:17 hybrid1120 maldet(30405): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 02 2025 04:48:20 hybrid1120 maldet(30405): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 02 2025 04:48:20 hybrid1120 maldet(30405): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 02 2025 04:48:23 hybrid1120 maldet(30405): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 02 2025 04:48:25 hybrid1120 maldet(30405): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 02 2025 04:48:25 hybrid1120 maldet(30405): {sigup} verified md5sum of maldet-sigpack.tgz Jun 02 2025 04:48:25 hybrid1120 maldet(30405): {sigup} unpacked and installed maldet-sigpack.tgz Jun 02 2025 04:48:25 hybrid1120 maldet(30405): {sigup} verified md5sum of maldet-clean.tgz Jun 02 2025 04:48:25 hybrid1120 maldet(30405): {sigup} unpacked and installed maldet-clean.tgz Jun 02 2025 04:48:25 hybrid1120 maldet(30405): {sigup} signature set update completed Jun 02 2025 04:48:25 hybrid1120 maldet(30405): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 02 2025 04:48:25 hybrid1120 maldet(30668): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 02 2025 04:48:26 hybrid1120 maldet(30668): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 02 2025 04:48:26 hybrid1120 maldet(30668): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 02 2025 04:48:26 hybrid1120 maldet(30668): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 02 2025 04:48:26 hybrid1120 maldet(30668): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 02 2025 04:52:59 hybrid1120 maldet(30668): {scan} file list completed in 273s, found 1714 files... Jun 02 2025 04:52:59 hybrid1120 maldet(30668): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1714 files) in progress... Jun 02 2025 04:53:54 hybrid1120 maldet(30668): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1714, malware hits 0, cleaned hits 0, time 329s Jun 02 2025 04:53:54 hybrid1120 maldet(30668): {scan} scan report saved, to view run: maldet --report 250602-0448.30668 Jun 03 2025 04:45:26 hybrid1120 maldet(14489): {update} checking for available updates... Jun 03 2025 04:45:26 hybrid1120 maldet(14489): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 03 2025 04:45:26 hybrid1120 maldet(14489): {update} hashing install files and checking against server... Jun 03 2025 04:45:27 hybrid1120 maldet(14489): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 03 2025 04:45:27 hybrid1120 maldet(14489): {update} latest version already installed. Jun 03 2025 04:45:27 hybrid1120 maldet(14599): {sigup} performing signature update check... Jun 03 2025 04:45:27 hybrid1120 maldet(14599): {sigup} local signature set is version 202506011196154 Jun 03 2025 04:45:28 hybrid1120 maldet(14599): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 03 2025 04:45:28 hybrid1120 maldet(14599): {sigup} latest signature set already installed Jun 03 2025 04:45:28 hybrid1120 maldet(14702): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 03 2025 04:45:28 hybrid1120 maldet(14702): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 03 2025 04:45:28 hybrid1120 maldet(14702): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 03 2025 04:45:28 hybrid1120 maldet(14702): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 03 2025 04:45:28 hybrid1120 maldet(14702): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 03 2025 04:50:59 hybrid1120 maldet(14702): {scan} file list completed in 331s, found 1539 files... Jun 03 2025 04:50:59 hybrid1120 maldet(14702): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1539 files) in progress... Jun 03 2025 04:51:50 hybrid1120 maldet(14702): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1539, malware hits 0, cleaned hits 0, time 382s Jun 03 2025 04:51:50 hybrid1120 maldet(14702): {scan} scan report saved, to view run: maldet --report 250603-0445.14702 Jun 04 2025 03:50:57 hybrid1120 maldet(30152): {update} checking for available updates... Jun 04 2025 03:50:57 hybrid1120 maldet(30152): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 04 2025 03:50:57 hybrid1120 maldet(30152): {update} hashing install files and checking against server... Jun 04 2025 03:50:58 hybrid1120 maldet(30152): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 04 2025 03:50:58 hybrid1120 maldet(30152): {update} latest version already installed. Jun 04 2025 03:50:58 hybrid1120 maldet(30263): {sigup} performing signature update check... Jun 04 2025 03:50:58 hybrid1120 maldet(30263): {sigup} local signature set is version 202506011196154 Jun 04 2025 03:50:59 hybrid1120 maldet(30263): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 04 2025 03:50:59 hybrid1120 maldet(30263): {sigup} latest signature set already installed Jun 04 2025 03:50:59 hybrid1120 maldet(30351): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 04 2025 03:50:59 hybrid1120 maldet(30351): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 04 2025 03:50:59 hybrid1120 maldet(30351): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 04 2025 03:50:59 hybrid1120 maldet(30351): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 04 2025 03:50:59 hybrid1120 maldet(30351): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 04 2025 03:57:04 hybrid1120 maldet(30351): {scan} file list completed in 365s, found 1638 files... Jun 04 2025 03:57:04 hybrid1120 maldet(30351): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1638 files) in progress... Jun 04 2025 03:57:49 hybrid1120 maldet(30351): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1638, malware hits 0, cleaned hits 0, time 410s Jun 04 2025 03:57:49 hybrid1120 maldet(30351): {scan} scan report saved, to view run: maldet --report 250604-0350.30351 Jun 05 2025 03:59:31 hybrid1120 maldet(5787): {update} checking for available updates... Jun 05 2025 03:59:32 hybrid1120 maldet(5787): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 05 2025 03:59:32 hybrid1120 maldet(5787): {update} hashing install files and checking against server... Jun 05 2025 03:59:33 hybrid1120 maldet(5787): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 05 2025 03:59:33 hybrid1120 maldet(5787): {update} latest version already installed. Jun 05 2025 03:59:33 hybrid1120 maldet(5930): {sigup} performing signature update check... Jun 05 2025 03:59:33 hybrid1120 maldet(5930): {sigup} local signature set is version 202506011196154 Jun 05 2025 03:59:33 hybrid1120 maldet(5930): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 05 2025 03:59:33 hybrid1120 maldet(5930): {sigup} new signature set 202506042164456 available Jun 05 2025 03:59:33 hybrid1120 maldet(5930): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 05 2025 03:59:34 hybrid1120 maldet(5930): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 05 2025 03:59:35 hybrid1120 maldet(5930): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 05 2025 03:59:35 hybrid1120 maldet(5930): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 05 2025 03:59:35 hybrid1120 maldet(5930): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 05 2025 03:59:36 hybrid1120 maldet(5930): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 05 2025 03:59:36 hybrid1120 maldet(5930): {sigup} verified md5sum of maldet-sigpack.tgz Jun 05 2025 03:59:36 hybrid1120 maldet(5930): {sigup} unpacked and installed maldet-sigpack.tgz Jun 05 2025 03:59:36 hybrid1120 maldet(5930): {sigup} verified md5sum of maldet-clean.tgz Jun 05 2025 03:59:36 hybrid1120 maldet(5930): {sigup} unpacked and installed maldet-clean.tgz Jun 05 2025 03:59:36 hybrid1120 maldet(5930): {sigup} signature set update completed Jun 05 2025 03:59:36 hybrid1120 maldet(5930): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 05 2025 03:59:36 hybrid1120 maldet(6199): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 05 2025 03:59:37 hybrid1120 maldet(6199): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 05 2025 03:59:37 hybrid1120 maldet(6199): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 05 2025 03:59:37 hybrid1120 maldet(6199): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 05 2025 03:59:37 hybrid1120 maldet(6199): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 05 2025 04:06:54 hybrid1120 maldet(6199): {scan} file list completed in 437s, found 1704 files... Jun 05 2025 04:06:54 hybrid1120 maldet(6199): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1704 files) in progress... Jun 05 2025 04:07:59 hybrid1120 maldet(6199): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1704, malware hits 0, cleaned hits 0, time 502s Jun 05 2025 04:07:59 hybrid1120 maldet(6199): {scan} scan report saved, to view run: maldet --report 250605-0359.6199 Jun 06 2025 02:53:53 hybrid1120 maldet(23290): {update} checking for available updates... Jun 06 2025 02:53:54 hybrid1120 maldet(23290): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 06 2025 02:53:54 hybrid1120 maldet(23290): {update} hashing install files and checking against server... Jun 06 2025 02:53:54 hybrid1120 maldet(23290): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 06 2025 02:53:54 hybrid1120 maldet(23290): {update} latest version already installed. Jun 06 2025 02:53:55 hybrid1120 maldet(23422): {sigup} performing signature update check... Jun 06 2025 02:53:55 hybrid1120 maldet(23422): {sigup} local signature set is version 202506042164456 Jun 06 2025 02:53:55 hybrid1120 maldet(23422): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 06 2025 02:53:55 hybrid1120 maldet(23422): {sigup} latest signature set already installed Jun 06 2025 02:53:55 hybrid1120 maldet(23530): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 06 2025 02:53:56 hybrid1120 maldet(23530): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 06 2025 02:53:56 hybrid1120 maldet(23530): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 06 2025 02:53:56 hybrid1120 maldet(23530): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 06 2025 02:53:56 hybrid1120 maldet(23530): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 06 2025 03:00:09 hybrid1120 maldet(23530): {scan} file list completed in 373s, found 1976 files... Jun 06 2025 03:00:09 hybrid1120 maldet(23530): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1976 files) in progress... Jun 06 2025 03:01:10 hybrid1120 maldet(23530): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1976, malware hits 0, cleaned hits 0, time 435s Jun 06 2025 03:01:10 hybrid1120 maldet(23530): {scan} scan report saved, to view run: maldet --report 250606-0253.23530 Jun 07 2025 04:35:09 hybrid1120 maldet(458): {update} checking for available updates... Jun 07 2025 04:35:10 hybrid1120 maldet(458): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 07 2025 04:35:10 hybrid1120 maldet(458): {update} hashing install files and checking against server... Jun 07 2025 04:35:10 hybrid1120 maldet(458): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 07 2025 04:35:10 hybrid1120 maldet(458): {update} latest version already installed. Jun 07 2025 04:35:10 hybrid1120 maldet(632): {sigup} performing signature update check... Jun 07 2025 04:35:10 hybrid1120 maldet(632): {sigup} local signature set is version 202506042164456 Jun 07 2025 04:35:11 hybrid1120 maldet(632): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 07 2025 04:35:11 hybrid1120 maldet(632): {sigup} latest signature set already installed Jun 07 2025 04:35:11 hybrid1120 maldet(794): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 07 2025 04:35:11 hybrid1120 maldet(794): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 07 2025 04:35:11 hybrid1120 maldet(794): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 07 2025 04:35:11 hybrid1120 maldet(794): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 07 2025 04:35:11 hybrid1120 maldet(794): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 07 2025 04:40:10 hybrid1120 maldet(794): {scan} file list completed in 298s, found 1892 files... Jun 07 2025 04:40:10 hybrid1120 maldet(794): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1892 files) in progress... Jun 07 2025 04:41:10 hybrid1120 maldet(794): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1892, malware hits 0, cleaned hits 0, time 358s Jun 07 2025 04:41:10 hybrid1120 maldet(794): {scan} scan report saved, to view run: maldet --report 250607-0435.794 Jun 08 2025 04:24:17 hybrid1120 maldet(9424): {update} checking for available updates... Jun 08 2025 04:24:17 hybrid1120 maldet(9424): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 08 2025 04:24:17 hybrid1120 maldet(9424): {update} hashing install files and checking against server... Jun 08 2025 04:24:18 hybrid1120 maldet(9424): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 08 2025 04:24:18 hybrid1120 maldet(9424): {update} latest version already installed. Jun 08 2025 04:24:18 hybrid1120 maldet(9535): {sigup} performing signature update check... Jun 08 2025 04:24:18 hybrid1120 maldet(9535): {sigup} local signature set is version 202506042164456 Jun 08 2025 04:24:19 hybrid1120 maldet(9535): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 08 2025 04:24:19 hybrid1120 maldet(9535): {sigup} new signature set 20250607589111 available Jun 08 2025 04:24:19 hybrid1120 maldet(9535): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 08 2025 04:24:20 hybrid1120 maldet(9535): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 08 2025 04:24:20 hybrid1120 maldet(9535): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 08 2025 04:24:20 hybrid1120 maldet(9535): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 08 2025 04:24:21 hybrid1120 maldet(9535): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 08 2025 04:24:21 hybrid1120 maldet(9535): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 08 2025 04:24:21 hybrid1120 maldet(9535): {sigup} verified md5sum of maldet-sigpack.tgz Jun 08 2025 04:24:22 hybrid1120 maldet(9535): {sigup} unpacked and installed maldet-sigpack.tgz Jun 08 2025 04:24:22 hybrid1120 maldet(9535): {sigup} verified md5sum of maldet-clean.tgz Jun 08 2025 04:24:22 hybrid1120 maldet(9535): {sigup} unpacked and installed maldet-clean.tgz Jun 08 2025 04:24:22 hybrid1120 maldet(9535): {sigup} signature set update completed Jun 08 2025 04:24:22 hybrid1120 maldet(9535): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 08 2025 04:24:22 hybrid1120 maldet(9754): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 08 2025 04:24:22 hybrid1120 maldet(9754): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 08 2025 04:24:22 hybrid1120 maldet(9754): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 08 2025 04:24:22 hybrid1120 maldet(9754): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 08 2025 04:24:22 hybrid1120 maldet(9754): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 08 2025 04:28:47 hybrid1120 maldet(9754): {scan} file list completed in 265s, found 2237 files... Jun 08 2025 04:28:47 hybrid1120 maldet(9754): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2237 files) in progress... Jun 08 2025 04:29:49 hybrid1120 maldet(9754): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2237, malware hits 0, cleaned hits 0, time 327s Jun 08 2025 04:29:49 hybrid1120 maldet(9754): {scan} scan report saved, to view run: maldet --report 250608-0424.9754 Jun 09 2025 03:25:46 hybrid1120 maldet(17201): {update} checking for available updates... Jun 09 2025 03:25:46 hybrid1120 maldet(17201): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 09 2025 03:25:46 hybrid1120 maldet(17201): {update} hashing install files and checking against server... Jun 09 2025 03:25:47 hybrid1120 maldet(17201): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 09 2025 03:25:47 hybrid1120 maldet(17201): {update} latest version already installed. Jun 09 2025 03:25:47 hybrid1120 maldet(17318): {sigup} performing signature update check... Jun 09 2025 03:25:47 hybrid1120 maldet(17318): {sigup} local signature set is version 20250607589111 Jun 09 2025 03:25:47 hybrid1120 maldet(17318): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 09 2025 03:25:47 hybrid1120 maldet(17318): {sigup} latest signature set already installed Jun 09 2025 03:25:48 hybrid1120 maldet(17410): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 09 2025 03:25:48 hybrid1120 maldet(17410): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 09 2025 03:25:48 hybrid1120 maldet(17410): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 09 2025 03:25:48 hybrid1120 maldet(17410): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 09 2025 03:25:48 hybrid1120 maldet(17410): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 09 2025 03:33:03 hybrid1120 maldet(17410): {scan} file list completed in 435s, found 2386 files... Jun 09 2025 03:33:03 hybrid1120 maldet(17410): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2386 files) in progress... Jun 09 2025 03:34:14 hybrid1120 maldet(17410): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2386, malware hits 0, cleaned hits 0, time 506s Jun 09 2025 03:34:14 hybrid1120 maldet(17410): {scan} scan report saved, to view run: maldet --report 250609-0325.17410 Jun 10 2025 03:59:44 hybrid1120 maldet(4720): {update} checking for available updates... Jun 10 2025 03:59:44 hybrid1120 maldet(4720): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 10 2025 03:59:44 hybrid1120 maldet(4720): {update} hashing install files and checking against server... Jun 10 2025 03:59:45 hybrid1120 maldet(4720): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 10 2025 03:59:45 hybrid1120 maldet(4720): {update} latest version already installed. Jun 10 2025 03:59:45 hybrid1120 maldet(4835): {sigup} performing signature update check... Jun 10 2025 03:59:45 hybrid1120 maldet(4835): {sigup} local signature set is version 20250607589111 Jun 10 2025 03:59:45 hybrid1120 maldet(4835): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 10 2025 03:59:45 hybrid1120 maldet(4835): {sigup} latest signature set already installed Jun 10 2025 03:59:45 hybrid1120 maldet(4934): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 10 2025 03:59:46 hybrid1120 maldet(4934): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 10 2025 03:59:46 hybrid1120 maldet(4934): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 10 2025 03:59:46 hybrid1120 maldet(4934): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 10 2025 03:59:46 hybrid1120 maldet(4934): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 10 2025 04:06:58 hybrid1120 maldet(4934): {scan} file list completed in 432s, found 2285 files... Jun 10 2025 04:06:58 hybrid1120 maldet(4934): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2285 files) in progress... Jun 10 2025 04:08:00 hybrid1120 maldet(4934): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2285, malware hits 0, cleaned hits 0, time 495s Jun 10 2025 04:08:00 hybrid1120 maldet(4934): {scan} scan report saved, to view run: maldet --report 250610-0359.4934 Jun 11 2025 03:19:47 hybrid1120 maldet(24397): {update} checking for available updates... Jun 11 2025 03:19:48 hybrid1120 maldet(24397): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 11 2025 03:19:48 hybrid1120 maldet(24397): {update} hashing install files and checking against server... Jun 11 2025 03:19:49 hybrid1120 maldet(24397): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 11 2025 03:19:49 hybrid1120 maldet(24397): {update} latest version already installed. Jun 11 2025 03:19:49 hybrid1120 maldet(24509): {sigup} performing signature update check... Jun 11 2025 03:19:49 hybrid1120 maldet(24509): {sigup} local signature set is version 20250607589111 Jun 11 2025 03:19:49 hybrid1120 maldet(24509): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 11 2025 03:19:50 hybrid1120 maldet(24509): {sigup} new signature set 20250610484586 available Jun 11 2025 03:19:50 hybrid1120 maldet(24509): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 11 2025 03:19:51 hybrid1120 maldet(24509): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 11 2025 03:19:51 hybrid1120 maldet(24509): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 11 2025 03:19:51 hybrid1120 maldet(24509): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 11 2025 03:19:52 hybrid1120 maldet(24509): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 11 2025 03:19:52 hybrid1120 maldet(24509): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 11 2025 03:19:52 hybrid1120 maldet(24509): {sigup} verified md5sum of maldet-sigpack.tgz Jun 11 2025 03:19:53 hybrid1120 maldet(24509): {sigup} unpacked and installed maldet-sigpack.tgz Jun 11 2025 03:19:53 hybrid1120 maldet(24509): {sigup} verified md5sum of maldet-clean.tgz Jun 11 2025 03:19:53 hybrid1120 maldet(24509): {sigup} unpacked and installed maldet-clean.tgz Jun 11 2025 03:19:53 hybrid1120 maldet(24509): {sigup} signature set update completed Jun 11 2025 03:19:53 hybrid1120 maldet(24509): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 11 2025 03:19:53 hybrid1120 maldet(24750): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 11 2025 03:19:53 hybrid1120 maldet(24750): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 11 2025 03:19:53 hybrid1120 maldet(24750): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 11 2025 03:19:53 hybrid1120 maldet(24750): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 11 2025 03:19:53 hybrid1120 maldet(24750): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 11 2025 03:25:54 hybrid1120 maldet(24750): {scan} file list completed in 361s, found 2506 files... Jun 11 2025 03:25:54 hybrid1120 maldet(24750): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2506 files) in progress... Jun 11 2025 03:27:03 hybrid1120 maldet(24750): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2506, malware hits 0, cleaned hits 0, time 430s Jun 11 2025 03:27:03 hybrid1120 maldet(24750): {scan} scan report saved, to view run: maldet --report 250611-0319.24750 Jun 12 2025 02:59:22 hybrid1120 maldet(24058): {update} checking for available updates... Jun 12 2025 02:59:22 hybrid1120 maldet(24058): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 12 2025 02:59:22 hybrid1120 maldet(24058): {update} hashing install files and checking against server... Jun 12 2025 02:59:23 hybrid1120 maldet(24058): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 12 2025 02:59:23 hybrid1120 maldet(24058): {update} latest version already installed. Jun 12 2025 02:59:23 hybrid1120 maldet(24182): {sigup} performing signature update check... Jun 12 2025 02:59:23 hybrid1120 maldet(24182): {sigup} local signature set is version 20250610484586 Jun 12 2025 02:59:24 hybrid1120 maldet(24182): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 12 2025 02:59:24 hybrid1120 maldet(24182): {sigup} latest signature set already installed Jun 12 2025 02:59:24 hybrid1120 maldet(24270): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 12 2025 02:59:24 hybrid1120 maldet(24270): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 12 2025 02:59:24 hybrid1120 maldet(24270): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 12 2025 02:59:24 hybrid1120 maldet(24270): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 12 2025 02:59:24 hybrid1120 maldet(24270): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 12 2025 03:05:23 hybrid1120 maldet(24270): {scan} file list completed in 359s, found 2611 files... Jun 12 2025 03:05:23 hybrid1120 maldet(24270): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2611 files) in progress... Jun 12 2025 03:06:40 hybrid1120 maldet(24270): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2611, malware hits 0, cleaned hits 0, time 436s Jun 12 2025 03:06:40 hybrid1120 maldet(24270): {scan} scan report saved, to view run: maldet --report 250612-0259.24270 Jun 13 2025 03:59:06 hybrid1120 maldet(15213): {update} checking for available updates... Jun 13 2025 03:59:07 hybrid1120 maldet(15213): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 13 2025 03:59:07 hybrid1120 maldet(15213): {update} hashing install files and checking against server... Jun 13 2025 03:59:08 hybrid1120 maldet(15213): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 13 2025 03:59:08 hybrid1120 maldet(15213): {update} latest version already installed. Jun 13 2025 03:59:08 hybrid1120 maldet(15322): {sigup} performing signature update check... Jun 13 2025 03:59:08 hybrid1120 maldet(15322): {sigup} local signature set is version 20250610484586 Jun 13 2025 03:59:08 hybrid1120 maldet(15322): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 13 2025 03:59:08 hybrid1120 maldet(15322): {sigup} latest signature set already installed Jun 13 2025 03:59:08 hybrid1120 maldet(15414): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 13 2025 03:59:08 hybrid1120 maldet(15414): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 13 2025 03:59:08 hybrid1120 maldet(15414): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 13 2025 03:59:08 hybrid1120 maldet(15414): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 13 2025 03:59:08 hybrid1120 maldet(15414): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 13 2025 04:05:32 hybrid1120 maldet(15414): {scan} file list completed in 384s, found 2447 files... Jun 13 2025 04:05:32 hybrid1120 maldet(15414): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2447 files) in progress... Jun 13 2025 04:06:41 hybrid1120 maldet(15414): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2447, malware hits 0, cleaned hits 0, time 453s Jun 13 2025 04:06:41 hybrid1120 maldet(15414): {scan} scan report saved, to view run: maldet --report 250613-0359.15414 Jun 14 2025 03:59:11 hybrid1120 maldet(25062): {update} checking for available updates... Jun 14 2025 03:59:12 hybrid1120 maldet(25062): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 14 2025 03:59:12 hybrid1120 maldet(25062): {update} hashing install files and checking against server... Jun 14 2025 03:59:12 hybrid1120 maldet(25062): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 14 2025 03:59:12 hybrid1120 maldet(25062): {update} latest version already installed. Jun 14 2025 03:59:12 hybrid1120 maldet(25171): {sigup} performing signature update check... Jun 14 2025 03:59:12 hybrid1120 maldet(25171): {sigup} local signature set is version 20250610484586 Jun 14 2025 03:59:13 hybrid1120 maldet(25171): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 14 2025 03:59:13 hybrid1120 maldet(25171): {sigup} new signature set 20250613705251 available Jun 14 2025 03:59:13 hybrid1120 maldet(25171): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 14 2025 03:59:14 hybrid1120 maldet(25171): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 14 2025 03:59:15 hybrid1120 maldet(25171): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 14 2025 03:59:15 hybrid1120 maldet(25171): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 14 2025 03:59:15 hybrid1120 maldet(25171): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 14 2025 03:59:16 hybrid1120 maldet(25171): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 14 2025 03:59:16 hybrid1120 maldet(25171): {sigup} verified md5sum of maldet-sigpack.tgz Jun 14 2025 03:59:16 hybrid1120 maldet(25171): {sigup} unpacked and installed maldet-sigpack.tgz Jun 14 2025 03:59:16 hybrid1120 maldet(25171): {sigup} verified md5sum of maldet-clean.tgz Jun 14 2025 03:59:16 hybrid1120 maldet(25171): {sigup} unpacked and installed maldet-clean.tgz Jun 14 2025 03:59:16 hybrid1120 maldet(25171): {sigup} signature set update completed Jun 14 2025 03:59:16 hybrid1120 maldet(25171): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 14 2025 03:59:16 hybrid1120 maldet(25387): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 14 2025 03:59:16 hybrid1120 maldet(25387): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 14 2025 03:59:16 hybrid1120 maldet(25387): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 14 2025 03:59:16 hybrid1120 maldet(25387): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 14 2025 03:59:16 hybrid1120 maldet(25387): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 14 2025 04:05:15 hybrid1120 maldet(25387): {scan} file list completed in 359s, found 2455 files... Jun 14 2025 04:05:15 hybrid1120 maldet(25387): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2455 files) in progress... Jun 14 2025 04:06:25 hybrid1120 maldet(25387): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2455, malware hits 0, cleaned hits 0, time 429s Jun 14 2025 04:06:25 hybrid1120 maldet(25387): {scan} scan report saved, to view run: maldet --report 250614-0359.25387 Jun 15 2025 04:57:00 hybrid1120 maldet(16541): {update} checking for available updates... Jun 15 2025 04:57:00 hybrid1120 maldet(16541): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 15 2025 04:57:00 hybrid1120 maldet(16541): {update} hashing install files and checking against server... Jun 15 2025 04:57:01 hybrid1120 maldet(16541): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 15 2025 04:57:01 hybrid1120 maldet(16541): {update} latest version already installed. Jun 15 2025 04:57:01 hybrid1120 maldet(16670): {sigup} performing signature update check... Jun 15 2025 04:57:01 hybrid1120 maldet(16670): {sigup} local signature set is version 20250613705251 Jun 15 2025 04:57:01 hybrid1120 maldet(16670): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 15 2025 04:57:01 hybrid1120 maldet(16670): {sigup} latest signature set already installed Jun 15 2025 04:57:01 hybrid1120 maldet(16770): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 15 2025 04:57:02 hybrid1120 maldet(16770): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 15 2025 04:57:02 hybrid1120 maldet(16770): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 15 2025 04:57:02 hybrid1120 maldet(16770): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 15 2025 04:57:02 hybrid1120 maldet(16770): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 15 2025 05:02:02 hybrid1120 maldet(16770): {scan} file list completed in 300s, found 1526 files... Jun 15 2025 05:02:02 hybrid1120 maldet(16770): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1526 files) in progress... Jun 15 2025 05:02:45 hybrid1120 maldet(16770): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1526, malware hits 0, cleaned hits 0, time 344s Jun 15 2025 05:02:45 hybrid1120 maldet(16770): {scan} scan report saved, to view run: maldet --report 250615-0457.16770 Jun 16 2025 02:54:24 hybrid1120 maldet(11254): {update} checking for available updates... Jun 16 2025 02:54:24 hybrid1120 maldet(11254): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 16 2025 02:54:24 hybrid1120 maldet(11254): {update} hashing install files and checking against server... Jun 16 2025 02:54:25 hybrid1120 maldet(11254): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 16 2025 02:54:25 hybrid1120 maldet(11254): {update} latest version already installed. Jun 16 2025 02:54:25 hybrid1120 maldet(11365): {sigup} performing signature update check... Jun 16 2025 02:54:25 hybrid1120 maldet(11365): {sigup} local signature set is version 20250613705251 Jun 16 2025 02:54:25 hybrid1120 maldet(11365): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 16 2025 02:54:25 hybrid1120 maldet(11365): {sigup} latest signature set already installed Jun 16 2025 02:54:26 hybrid1120 maldet(11455): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 16 2025 02:54:26 hybrid1120 maldet(11455): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 16 2025 02:54:26 hybrid1120 maldet(11455): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 16 2025 02:54:26 hybrid1120 maldet(11455): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 16 2025 02:54:26 hybrid1120 maldet(11455): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 16 2025 03:00:12 hybrid1120 maldet(11455): {scan} file list completed in 346s, found 1674 files... Jun 16 2025 03:00:12 hybrid1120 maldet(11455): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1674 files) in progress... Jun 16 2025 03:00:59 hybrid1120 maldet(11455): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1674, malware hits 0, cleaned hits 0, time 393s Jun 16 2025 03:00:59 hybrid1120 maldet(11455): {scan} scan report saved, to view run: maldet --report 250616-0254.11455 Jun 17 2025 03:41:34 hybrid1120 maldet(12334): {update} checking for available updates... Jun 17 2025 03:41:34 hybrid1120 maldet(12334): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 17 2025 03:41:34 hybrid1120 maldet(12334): {update} hashing install files and checking against server... Jun 17 2025 03:41:35 hybrid1120 maldet(12334): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 17 2025 03:41:35 hybrid1120 maldet(12334): {update} latest version already installed. Jun 17 2025 03:41:35 hybrid1120 maldet(12445): {sigup} performing signature update check... Jun 17 2025 03:41:35 hybrid1120 maldet(12445): {sigup} local signature set is version 20250613705251 Jun 17 2025 03:41:35 hybrid1120 maldet(12445): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 17 2025 03:41:35 hybrid1120 maldet(12445): {sigup} new signature set 20250616812462 available Jun 17 2025 03:41:35 hybrid1120 maldet(12445): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 17 2025 03:41:36 hybrid1120 maldet(12445): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 17 2025 03:41:37 hybrid1120 maldet(12445): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 17 2025 03:41:37 hybrid1120 maldet(12445): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 17 2025 03:41:37 hybrid1120 maldet(12445): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 17 2025 03:41:38 hybrid1120 maldet(12445): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 17 2025 03:41:38 hybrid1120 maldet(12445): {sigup} verified md5sum of maldet-sigpack.tgz Jun 17 2025 03:41:38 hybrid1120 maldet(12445): {sigup} unpacked and installed maldet-sigpack.tgz Jun 17 2025 03:41:38 hybrid1120 maldet(12445): {sigup} verified md5sum of maldet-clean.tgz Jun 17 2025 03:41:38 hybrid1120 maldet(12445): {sigup} unpacked and installed maldet-clean.tgz Jun 17 2025 03:41:38 hybrid1120 maldet(12445): {sigup} signature set update completed Jun 17 2025 03:41:38 hybrid1120 maldet(12445): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 17 2025 03:41:38 hybrid1120 maldet(12647): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 17 2025 03:41:39 hybrid1120 maldet(12647): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 17 2025 03:41:39 hybrid1120 maldet(12647): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 17 2025 03:41:39 hybrid1120 maldet(12647): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 17 2025 03:41:39 hybrid1120 maldet(12647): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 17 2025 03:47:34 hybrid1120 maldet(12647): {scan} file list completed in 355s, found 2323 files... Jun 17 2025 03:47:34 hybrid1120 maldet(12647): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2323 files) in progress... Jun 17 2025 03:48:47 hybrid1120 maldet(12647): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2323, malware hits 0, cleaned hits 0, time 429s Jun 17 2025 03:48:47 hybrid1120 maldet(12647): {scan} scan report saved, to view run: maldet --report 250617-0341.12647 Jun 18 2025 02:45:49 hybrid1120 maldet(32684): {update} checking for available updates... Jun 18 2025 02:45:49 hybrid1120 maldet(32684): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 18 2025 02:45:49 hybrid1120 maldet(32684): {update} hashing install files and checking against server... Jun 18 2025 02:45:50 hybrid1120 maldet(32684): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 18 2025 02:45:50 hybrid1120 maldet(32684): {update} latest version already installed. Jun 18 2025 02:45:50 hybrid1120 maldet(347): {sigup} performing signature update check... Jun 18 2025 02:45:50 hybrid1120 maldet(347): {sigup} local signature set is version 20250616812462 Jun 18 2025 02:45:50 hybrid1120 maldet(347): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 18 2025 02:45:50 hybrid1120 maldet(347): {sigup} latest signature set already installed Jun 18 2025 02:45:50 hybrid1120 maldet(436): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 18 2025 02:45:51 hybrid1120 maldet(436): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 18 2025 02:45:51 hybrid1120 maldet(436): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 18 2025 02:45:51 hybrid1120 maldet(436): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 18 2025 02:45:51 hybrid1120 maldet(436): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 18 2025 02:53:16 hybrid1120 maldet(436): {scan} file list completed in 445s, found 2410 files... Jun 18 2025 02:53:16 hybrid1120 maldet(436): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2410 files) in progress... Jun 18 2025 02:54:28 hybrid1120 maldet(436): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2410, malware hits 0, cleaned hits 0, time 518s Jun 18 2025 02:54:28 hybrid1120 maldet(436): {scan} scan report saved, to view run: maldet --report 250618-0245.436 Jun 19 2025 03:37:28 hybrid1120 maldet(19279): {update} checking for available updates... Jun 19 2025 03:37:29 hybrid1120 maldet(19279): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 19 2025 03:37:29 hybrid1120 maldet(19279): {update} hashing install files and checking against server... Jun 19 2025 03:37:29 hybrid1120 maldet(19279): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 19 2025 03:37:29 hybrid1120 maldet(19279): {update} latest version already installed. Jun 19 2025 03:37:29 hybrid1120 maldet(19390): {sigup} performing signature update check... Jun 19 2025 03:37:29 hybrid1120 maldet(19390): {sigup} local signature set is version 20250616812462 Jun 19 2025 03:37:30 hybrid1120 maldet(19390): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 19 2025 03:37:30 hybrid1120 maldet(19390): {sigup} latest signature set already installed Jun 19 2025 03:37:30 hybrid1120 maldet(19478): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 19 2025 03:37:30 hybrid1120 maldet(19478): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 19 2025 03:37:30 hybrid1120 maldet(19478): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 19 2025 03:37:30 hybrid1120 maldet(19478): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 19 2025 03:37:30 hybrid1120 maldet(19478): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 19 2025 03:44:37 hybrid1120 maldet(19478): {scan} file list completed in 427s, found 2651 files... Jun 19 2025 03:44:37 hybrid1120 maldet(19478): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2651 files) in progress... Jun 19 2025 03:46:02 hybrid1120 maldet(19478): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2651, malware hits 0, cleaned hits 0, time 512s Jun 19 2025 03:46:02 hybrid1120 maldet(19478): {scan} scan report saved, to view run: maldet --report 250619-0337.19478 Jun 20 2025 04:13:02 hybrid1120 maldet(17193): {update} checking for available updates... Jun 20 2025 04:13:02 hybrid1120 maldet(17193): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 20 2025 04:13:02 hybrid1120 maldet(17193): {update} hashing install files and checking against server... Jun 20 2025 04:13:03 hybrid1120 maldet(17193): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 20 2025 04:13:03 hybrid1120 maldet(17193): {update} latest version already installed. Jun 20 2025 04:13:03 hybrid1120 maldet(17304): {sigup} performing signature update check... Jun 20 2025 04:13:03 hybrid1120 maldet(17304): {sigup} local signature set is version 20250616812462 Jun 20 2025 04:13:04 hybrid1120 maldet(17304): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 20 2025 04:13:04 hybrid1120 maldet(17304): {sigup} new signature set 202506191777955 available Jun 20 2025 04:13:04 hybrid1120 maldet(17304): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 20 2025 04:13:05 hybrid1120 maldet(17304): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 20 2025 04:13:06 hybrid1120 maldet(17304): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 20 2025 04:13:06 hybrid1120 maldet(17304): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 20 2025 04:13:06 hybrid1120 maldet(17304): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 20 2025 04:13:07 hybrid1120 maldet(17304): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 20 2025 04:13:07 hybrid1120 maldet(17304): {sigup} verified md5sum of maldet-sigpack.tgz Jun 20 2025 04:13:07 hybrid1120 maldet(17304): {sigup} unpacked and installed maldet-sigpack.tgz Jun 20 2025 04:13:07 hybrid1120 maldet(17304): {sigup} verified md5sum of maldet-clean.tgz Jun 20 2025 04:13:07 hybrid1120 maldet(17304): {sigup} unpacked and installed maldet-clean.tgz Jun 20 2025 04:13:07 hybrid1120 maldet(17304): {sigup} signature set update completed Jun 20 2025 04:13:07 hybrid1120 maldet(17304): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 20 2025 04:13:07 hybrid1120 maldet(17514): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 20 2025 04:13:07 hybrid1120 maldet(17514): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 20 2025 04:13:07 hybrid1120 maldet(17514): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 20 2025 04:13:07 hybrid1120 maldet(17514): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 20 2025 04:13:07 hybrid1120 maldet(17514): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 20 2025 04:18:17 hybrid1120 maldet(17514): {scan} file list completed in 310s, found 2416 files... Jun 20 2025 04:18:17 hybrid1120 maldet(17514): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2416 files) in progress... Jun 20 2025 04:19:48 hybrid1120 maldet(17514): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2416, malware hits 0, cleaned hits 0, time 401s Jun 20 2025 04:19:48 hybrid1120 maldet(17514): {scan} scan report saved, to view run: maldet --report 250620-0413.17514 Jun 21 2025 04:12:20 hybrid1120 maldet(9729): {update} checking for available updates... Jun 21 2025 04:12:21 hybrid1120 maldet(9729): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 21 2025 04:12:21 hybrid1120 maldet(9729): {update} hashing install files and checking against server... Jun 21 2025 04:12:22 hybrid1120 maldet(9729): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 21 2025 04:12:22 hybrid1120 maldet(9729): {update} latest version already installed. Jun 21 2025 04:12:22 hybrid1120 maldet(9838): {sigup} performing signature update check... Jun 21 2025 04:12:22 hybrid1120 maldet(9838): {sigup} local signature set is version 202506191777955 Jun 21 2025 04:12:22 hybrid1120 maldet(9838): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 21 2025 04:12:22 hybrid1120 maldet(9838): {sigup} latest signature set already installed Jun 21 2025 04:12:22 hybrid1120 maldet(9926): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 21 2025 04:12:23 hybrid1120 maldet(9926): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 21 2025 04:12:23 hybrid1120 maldet(9926): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 21 2025 04:12:23 hybrid1120 maldet(9926): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 21 2025 04:12:23 hybrid1120 maldet(9926): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 21 2025 04:18:25 hybrid1120 maldet(9926): {scan} file list completed in 361s, found 2266 files... Jun 21 2025 04:18:25 hybrid1120 maldet(9926): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2266 files) in progress... Jun 21 2025 04:19:27 hybrid1120 maldet(9926): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2266, malware hits 0, cleaned hits 0, time 425s Jun 21 2025 04:19:27 hybrid1120 maldet(9926): {scan} scan report saved, to view run: maldet --report 250621-0412.9926 Jun 22 2025 04:44:38 hybrid1120 maldet(26204): {update} checking for available updates... Jun 22 2025 04:44:38 hybrid1120 maldet(26204): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 22 2025 04:44:38 hybrid1120 maldet(26204): {update} hashing install files and checking against server... Jun 22 2025 04:44:39 hybrid1120 maldet(26204): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 22 2025 04:44:39 hybrid1120 maldet(26204): {update} latest version already installed. Jun 22 2025 04:44:39 hybrid1120 maldet(26329): {sigup} performing signature update check... Jun 22 2025 04:44:39 hybrid1120 maldet(26329): {sigup} local signature set is version 202506191777955 Jun 22 2025 04:44:39 hybrid1120 maldet(26329): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 22 2025 04:44:39 hybrid1120 maldet(26329): {sigup} latest signature set already installed Jun 22 2025 04:44:39 hybrid1120 maldet(26420): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 22 2025 04:44:40 hybrid1120 maldet(26420): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 22 2025 04:44:40 hybrid1120 maldet(26420): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 22 2025 04:44:40 hybrid1120 maldet(26420): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 22 2025 04:44:40 hybrid1120 maldet(26420): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 22 2025 04:49:39 hybrid1120 maldet(26420): {scan} file list completed in 299s, found 10805 files... Jun 22 2025 04:49:39 hybrid1120 maldet(26420): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (10805 files) in progress... Jun 22 2025 04:56:03 hybrid1120 maldet(26420): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 10805, malware hits 0, cleaned hits 0, time 684s Jun 22 2025 04:56:03 hybrid1120 maldet(26420): {scan} scan report saved, to view run: maldet --report 250622-0444.26420 Jun 23 2025 02:41:17 hybrid1120 maldet(1993): {update} checking for available updates... Jun 23 2025 02:41:18 hybrid1120 maldet(1993): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 23 2025 02:41:18 hybrid1120 maldet(1993): {update} hashing install files and checking against server... Jun 23 2025 02:41:18 hybrid1120 maldet(1993): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 23 2025 02:41:18 hybrid1120 maldet(1993): {update} latest version already installed. Jun 23 2025 02:41:18 hybrid1120 maldet(2109): {sigup} performing signature update check... Jun 23 2025 02:41:18 hybrid1120 maldet(2109): {sigup} local signature set is version 202506191777955 Jun 23 2025 02:41:19 hybrid1120 maldet(2109): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 23 2025 02:41:19 hybrid1120 maldet(2109): {sigup} new signature set 202506222744524 available Jun 23 2025 02:41:19 hybrid1120 maldet(2109): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 23 2025 02:41:20 hybrid1120 maldet(2109): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 23 2025 02:41:21 hybrid1120 maldet(2109): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 23 2025 02:41:21 hybrid1120 maldet(2109): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 23 2025 02:41:21 hybrid1120 maldet(2109): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 23 2025 02:41:22 hybrid1120 maldet(2109): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 23 2025 02:41:22 hybrid1120 maldet(2109): {sigup} verified md5sum of maldet-sigpack.tgz Jun 23 2025 02:41:22 hybrid1120 maldet(2109): {sigup} unpacked and installed maldet-sigpack.tgz Jun 23 2025 02:41:22 hybrid1120 maldet(2109): {sigup} verified md5sum of maldet-clean.tgz Jun 23 2025 02:41:22 hybrid1120 maldet(2109): {sigup} unpacked and installed maldet-clean.tgz Jun 23 2025 02:41:22 hybrid1120 maldet(2109): {sigup} signature set update completed Jun 23 2025 02:41:22 hybrid1120 maldet(2109): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 23 2025 02:41:22 hybrid1120 maldet(2326): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 23 2025 02:41:23 hybrid1120 maldet(2326): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 23 2025 02:41:23 hybrid1120 maldet(2326): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 23 2025 02:41:23 hybrid1120 maldet(2326): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 23 2025 02:41:23 hybrid1120 maldet(2326): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 23 2025 02:47:29 hybrid1120 maldet(2326): {scan} file list completed in 366s, found 3090 files... Jun 23 2025 02:47:29 hybrid1120 maldet(2326): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (3090 files) in progress... Jun 23 2025 02:49:02 hybrid1120 maldet(2326): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 3090, malware hits 0, cleaned hits 0, time 460s Jun 23 2025 02:49:02 hybrid1120 maldet(2326): {scan} scan report saved, to view run: maldet --report 250623-0241.2326 Jun 23 2025 16:29:20 hybrid1120 maldet(1262): {mon} could not find monitor mode dependency 'ed' in PATH, please apt/yum/dnf install ed and try again. Jun 24 2025 04:14:49 hybrid1120 maldet(16945): {update} checking for available updates... Jun 24 2025 04:14:49 hybrid1120 maldet(16945): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 24 2025 04:14:49 hybrid1120 maldet(16945): {update} hashing install files and checking against server... Jun 24 2025 04:14:50 hybrid1120 maldet(16945): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 24 2025 04:14:50 hybrid1120 maldet(16945): {update} latest version already installed. Jun 24 2025 04:14:50 hybrid1120 maldet(17054): {sigup} performing signature update check... Jun 24 2025 04:14:50 hybrid1120 maldet(17054): {sigup} local signature set is version 202506222744524 Jun 24 2025 04:14:50 hybrid1120 maldet(17054): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 24 2025 04:14:50 hybrid1120 maldet(17054): {sigup} latest signature set already installed Jun 24 2025 04:14:50 hybrid1120 maldet(17166): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 24 2025 04:14:51 hybrid1120 maldet(17166): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 24 2025 04:14:51 hybrid1120 maldet(17166): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 24 2025 04:14:51 hybrid1120 maldet(17166): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 24 2025 04:14:51 hybrid1120 maldet(17166): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 24 2025 04:20:10 hybrid1120 maldet(17166): {scan} file list completed in 319s, found 2842 files... Jun 24 2025 04:20:10 hybrid1120 maldet(17166): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2842 files) in progress... Jun 24 2025 04:21:30 hybrid1120 maldet(17166): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2842, malware hits 0, cleaned hits 0, time 400s Jun 24 2025 04:21:30 hybrid1120 maldet(17166): {scan} scan report saved, to view run: maldet --report 250624-0414.17166 Jun 25 2025 03:23:32 hybrid1120 maldet(7505): {update} checking for available updates... Jun 25 2025 03:25:31 hybrid1120 maldet(7505): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 25 2025 03:25:31 hybrid1120 maldet(7505): {update} hashing install files and checking against server... Jun 25 2025 03:26:11 hybrid1120 maldet(7505): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 25 2025 03:26:11 hybrid1120 maldet(7505): {update} version check shows latest but hash check failed, forcing update... Jun 25 2025 03:26:11 hybrid1120 maldet(7505): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz Jun 25 2025 03:27:16 hybrid1120 maldet(7505): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz.md5 Jun 25 2025 03:27:16 hybrid1120 maldet(7505): {update} unable to verify md5sum of maldetect-current.tar.gz, update failed! Jun 25 2025 03:27:16 hybrid1120 maldet(9230): {sigup} performing signature update check... Jun 25 2025 03:27:16 hybrid1120 maldet(9230): {sigup} local signature set is version 202506222744524 Jun 25 2025 03:28:47 hybrid1120 maldet(9230): {sigup} could not download https://cdn.rfxn.com/downloads/maldet.sigs.ver, please try again later. Jun 25 2025 03:28:47 hybrid1120 maldet(9230): {sigup} could not download signature data from server, please try again later. Jun 25 2025 03:28:47 hybrid1120 maldet(9627): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 25 2025 03:28:47 hybrid1120 maldet(9627): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 25 2025 03:28:47 hybrid1120 maldet(9627): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 25 2025 03:28:47 hybrid1120 maldet(9627): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 25 2025 03:28:47 hybrid1120 maldet(9627): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 25 2025 03:36:24 hybrid1120 maldet(9627): {scan} file list completed in 457s, found 3437 files... Jun 25 2025 03:36:24 hybrid1120 maldet(9627): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (3437 files) in progress... Jun 25 2025 03:38:06 hybrid1120 maldet(9627): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 3437, malware hits 0, cleaned hits 0, time 559s Jun 25 2025 03:38:06 hybrid1120 maldet(9627): {scan} scan report saved, to view run: maldet --report 250625-0328.9627 Jun 26 2025 03:48:35 hybrid1120 maldet(18377): {update} checking for available updates... Jun 26 2025 03:48:36 hybrid1120 maldet(18377): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 26 2025 03:48:36 hybrid1120 maldet(18377): {update} hashing install files and checking against server... Jun 26 2025 03:48:36 hybrid1120 maldet(18377): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 26 2025 03:48:36 hybrid1120 maldet(18377): {update} latest version already installed. Jun 26 2025 03:48:36 hybrid1120 maldet(18502): {sigup} performing signature update check... Jun 26 2025 03:48:36 hybrid1120 maldet(18502): {sigup} local signature set is version 202506222744524 Jun 26 2025 03:48:37 hybrid1120 maldet(18502): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 26 2025 03:48:37 hybrid1120 maldet(18502): {sigup} new signature set 202506253712170 available Jun 26 2025 03:48:37 hybrid1120 maldet(18502): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 26 2025 03:48:38 hybrid1120 maldet(18502): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 26 2025 03:48:38 hybrid1120 maldet(18502): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 26 2025 03:48:38 hybrid1120 maldet(18502): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 26 2025 03:48:39 hybrid1120 maldet(18502): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 26 2025 03:48:39 hybrid1120 maldet(18502): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 26 2025 03:48:39 hybrid1120 maldet(18502): {sigup} verified md5sum of maldet-sigpack.tgz Jun 26 2025 03:48:40 hybrid1120 maldet(18502): {sigup} unpacked and installed maldet-sigpack.tgz Jun 26 2025 03:48:40 hybrid1120 maldet(18502): {sigup} verified md5sum of maldet-clean.tgz Jun 26 2025 03:48:40 hybrid1120 maldet(18502): {sigup} unpacked and installed maldet-clean.tgz Jun 26 2025 03:48:40 hybrid1120 maldet(18502): {sigup} signature set update completed Jun 26 2025 03:48:40 hybrid1120 maldet(18502): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 26 2025 03:48:40 hybrid1120 maldet(18709): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 26 2025 03:48:40 hybrid1120 maldet(18709): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 26 2025 03:48:40 hybrid1120 maldet(18709): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 26 2025 03:48:40 hybrid1120 maldet(18709): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 26 2025 03:48:40 hybrid1120 maldet(18709): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 26 2025 03:55:12 hybrid1120 maldet(18709): {scan} file list completed in 392s, found 1849 files... Jun 26 2025 03:55:12 hybrid1120 maldet(18709): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1849 files) in progress... Jun 26 2025 03:56:14 hybrid1120 maldet(18709): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1849, malware hits 0, cleaned hits 0, time 454s Jun 26 2025 03:56:14 hybrid1120 maldet(18709): {scan} scan report saved, to view run: maldet --report 250626-0348.18709 Jun 27 2025 03:50:41 hybrid1120 maldet(16739): {update} checking for available updates... Jun 27 2025 03:50:41 hybrid1120 maldet(16739): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 27 2025 03:50:41 hybrid1120 maldet(16739): {update} hashing install files and checking against server... Jun 27 2025 03:50:42 hybrid1120 maldet(16739): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 27 2025 03:50:42 hybrid1120 maldet(16739): {update} latest version already installed. Jun 27 2025 03:50:42 hybrid1120 maldet(16848): {sigup} performing signature update check... Jun 27 2025 03:50:42 hybrid1120 maldet(16848): {sigup} local signature set is version 202506253712170 Jun 27 2025 03:50:42 hybrid1120 maldet(16848): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 27 2025 03:50:42 hybrid1120 maldet(16848): {sigup} latest signature set already installed Jun 27 2025 03:50:43 hybrid1120 maldet(16936): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 27 2025 03:50:43 hybrid1120 maldet(16936): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 27 2025 03:50:43 hybrid1120 maldet(16936): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 27 2025 03:50:43 hybrid1120 maldet(16936): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 27 2025 03:50:43 hybrid1120 maldet(16936): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 27 2025 03:57:38 hybrid1120 maldet(16936): {scan} file list completed in 415s, found 1873 files... Jun 27 2025 03:57:38 hybrid1120 maldet(16936): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1873 files) in progress... Jun 27 2025 03:58:44 hybrid1120 maldet(16936): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1873, malware hits 0, cleaned hits 0, time 481s Jun 27 2025 03:58:44 hybrid1120 maldet(16936): {scan} scan report saved, to view run: maldet --report 250627-0350.16936 Jun 28 2025 02:53:48 hybrid1120 maldet(21579): {update} checking for available updates... Jun 28 2025 02:53:49 hybrid1120 maldet(21579): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 28 2025 02:53:49 hybrid1120 maldet(21579): {update} hashing install files and checking against server... Jun 28 2025 02:53:50 hybrid1120 maldet(21579): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 28 2025 02:53:50 hybrid1120 maldet(21579): {update} latest version already installed. Jun 28 2025 02:53:50 hybrid1120 maldet(21688): {sigup} performing signature update check... Jun 28 2025 02:53:50 hybrid1120 maldet(21688): {sigup} local signature set is version 202506253712170 Jun 28 2025 02:53:50 hybrid1120 maldet(21688): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 28 2025 02:53:50 hybrid1120 maldet(21688): {sigup} latest signature set already installed Jun 28 2025 02:53:50 hybrid1120 maldet(21792): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 28 2025 02:53:51 hybrid1120 maldet(21792): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 28 2025 02:53:51 hybrid1120 maldet(21792): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 28 2025 02:53:51 hybrid1120 maldet(21792): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 28 2025 02:53:51 hybrid1120 maldet(21792): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 28 2025 03:00:02 hybrid1120 maldet(21792): {scan} file list completed in 371s, found 2488 files... Jun 28 2025 03:00:02 hybrid1120 maldet(21792): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2488 files) in progress... Jun 28 2025 03:01:22 hybrid1120 maldet(21792): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2488, malware hits 0, cleaned hits 0, time 452s Jun 28 2025 03:01:22 hybrid1120 maldet(21792): {scan} scan report saved, to view run: maldet --report 250628-0253.21792 Jun 29 2025 03:22:32 hybrid1120 maldet(20976): {update} checking for available updates... Jun 29 2025 03:22:33 hybrid1120 maldet(20976): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 29 2025 03:22:33 hybrid1120 maldet(20976): {update} hashing install files and checking against server... Jun 29 2025 03:22:33 hybrid1120 maldet(20976): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 29 2025 03:22:33 hybrid1120 maldet(20976): {update} latest version already installed. Jun 29 2025 03:22:34 hybrid1120 maldet(21092): {sigup} performing signature update check... Jun 29 2025 03:22:34 hybrid1120 maldet(21092): {sigup} local signature set is version 202506253712170 Jun 29 2025 03:22:34 hybrid1120 maldet(21092): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 29 2025 03:22:34 hybrid1120 maldet(21092): {sigup} latest signature set already installed Jun 29 2025 03:22:34 hybrid1120 maldet(21189): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 29 2025 03:22:34 hybrid1120 maldet(21189): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 29 2025 03:22:34 hybrid1120 maldet(21189): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 29 2025 03:22:34 hybrid1120 maldet(21189): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 29 2025 03:22:34 hybrid1120 maldet(21189): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 29 2025 03:28:34 hybrid1120 maldet(21189): {scan} file list completed in 360s, found 2526 files... Jun 29 2025 03:28:34 hybrid1120 maldet(21189): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2526 files) in progress... Jun 29 2025 03:29:47 hybrid1120 maldet(21189): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2526, malware hits 0, cleaned hits 0, time 433s Jun 29 2025 03:29:47 hybrid1120 maldet(21189): {scan} scan report saved, to view run: maldet --report 250629-0322.21189 Jun 30 2025 03:09:43 hybrid1120 maldet(1449): {update} checking for available updates... Jun 30 2025 03:09:44 hybrid1120 maldet(1449): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 30 2025 03:09:44 hybrid1120 maldet(1449): {update} hashing install files and checking against server... Jun 30 2025 03:09:44 hybrid1120 maldet(1449): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 30 2025 03:09:44 hybrid1120 maldet(1449): {update} latest version already installed. Jun 30 2025 03:09:44 hybrid1120 maldet(1577): {sigup} performing signature update check... Jun 30 2025 03:09:44 hybrid1120 maldet(1577): {sigup} local signature set is version 202506253712170 Jun 30 2025 03:09:45 hybrid1120 maldet(1577): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 30 2025 03:09:45 hybrid1120 maldet(1577): {sigup} latest signature set already installed Jun 30 2025 03:09:45 hybrid1120 maldet(1675): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 30 2025 03:09:45 hybrid1120 maldet(1675): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 30 2025 03:09:45 hybrid1120 maldet(1675): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 30 2025 03:09:45 hybrid1120 maldet(1675): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 30 2025 03:09:45 hybrid1120 maldet(1675): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 30 2025 03:15:44 hybrid1120 maldet(1675): {scan} file list completed in 359s, found 1929 files... Jun 30 2025 03:15:44 hybrid1120 maldet(1675): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1929 files) in progress... Jun 30 2025 03:16:46 hybrid1120 maldet(1675): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1929, malware hits 0, cleaned hits 0, time 421s Jun 30 2025 03:16:46 hybrid1120 maldet(1675): {scan} scan report saved, to view run: maldet --report 250630-0309.1675 Jul 01 2025 03:28:42 hybrid1120 maldet(9573): {update} checking for available updates... Jul 01 2025 03:28:42 hybrid1120 maldet(9573): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 01 2025 03:28:42 hybrid1120 maldet(9573): {update} hashing install files and checking against server... Jul 01 2025 03:28:43 hybrid1120 maldet(9573): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 01 2025 03:28:43 hybrid1120 maldet(9573): {update} latest version already installed. Jul 01 2025 03:28:43 hybrid1120 maldet(9685): {sigup} performing signature update check... Jul 01 2025 03:28:43 hybrid1120 maldet(9685): {sigup} local signature set is version 202506253712170 Jul 01 2025 03:28:44 hybrid1120 maldet(9685): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 01 2025 03:28:44 hybrid1120 maldet(9685): {sigup} latest signature set already installed Jul 01 2025 03:28:44 hybrid1120 maldet(9773): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 01 2025 03:28:44 hybrid1120 maldet(9773): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 01 2025 03:28:44 hybrid1120 maldet(9773): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 01 2025 03:28:44 hybrid1120 maldet(9773): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 01 2025 03:28:44 hybrid1120 maldet(9773): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 01 2025 03:36:01 hybrid1120 maldet(9773): {scan} file list completed in 437s, found 1858 files... Jul 01 2025 03:36:01 hybrid1120 maldet(9773): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1858 files) in progress... Jul 01 2025 03:36:59 hybrid1120 maldet(9773): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1858, malware hits 0, cleaned hits 0, time 495s Jul 01 2025 03:36:59 hybrid1120 maldet(9773): {scan} scan report saved, to view run: maldet --report 250701-0328.9773 Jul 02 2025 03:57:35 hybrid1120 maldet(454): {update} checking for available updates... Jul 02 2025 03:57:35 hybrid1120 maldet(454): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 02 2025 03:57:35 hybrid1120 maldet(454): {update} hashing install files and checking against server... Jul 02 2025 03:57:36 hybrid1120 maldet(454): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 02 2025 03:57:36 hybrid1120 maldet(454): {update} latest version already installed. Jul 02 2025 03:57:36 hybrid1120 maldet(566): {sigup} performing signature update check... Jul 02 2025 03:57:36 hybrid1120 maldet(566): {sigup} local signature set is version 202506253712170 Jul 02 2025 03:57:37 hybrid1120 maldet(566): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 02 2025 03:57:37 hybrid1120 maldet(566): {sigup} new signature set 20250701819448 available Jul 02 2025 03:57:37 hybrid1120 maldet(566): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 02 2025 03:57:38 hybrid1120 maldet(566): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 02 2025 03:57:38 hybrid1120 maldet(566): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jul 02 2025 03:57:38 hybrid1120 maldet(566): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 02 2025 03:57:39 hybrid1120 maldet(566): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 02 2025 03:57:39 hybrid1120 maldet(566): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jul 02 2025 03:57:39 hybrid1120 maldet(566): {sigup} verified md5sum of maldet-sigpack.tgz Jul 02 2025 03:57:39 hybrid1120 maldet(566): {sigup} unpacked and installed maldet-sigpack.tgz Jul 02 2025 03:57:40 hybrid1120 maldet(566): {sigup} verified md5sum of maldet-clean.tgz Jul 02 2025 03:57:40 hybrid1120 maldet(566): {sigup} unpacked and installed maldet-clean.tgz Jul 02 2025 03:57:40 hybrid1120 maldet(566): {sigup} signature set update completed Jul 02 2025 03:57:40 hybrid1120 maldet(566): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 02 2025 03:57:40 hybrid1120 maldet(800): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 02 2025 03:57:40 hybrid1120 maldet(800): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 02 2025 03:57:40 hybrid1120 maldet(800): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 02 2025 03:57:40 hybrid1120 maldet(800): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 02 2025 03:57:40 hybrid1120 maldet(800): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 02 2025 04:03:01 hybrid1120 maldet(800): {scan} file list completed in 321s, found 3302 files... Jul 02 2025 04:03:01 hybrid1120 maldet(800): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (3302 files) in progress... Jul 02 2025 04:04:37 hybrid1120 maldet(800): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 3302, malware hits 0, cleaned hits 0, time 417s Jul 02 2025 04:04:37 hybrid1120 maldet(800): {scan} scan report saved, to view run: maldet --report 250702-0357.800 Jul 03 2025 04:18:29 hybrid1120 maldet(28286): {update} checking for available updates... Jul 03 2025 04:18:29 hybrid1120 maldet(28286): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 03 2025 04:18:29 hybrid1120 maldet(28286): {update} hashing install files and checking against server... Jul 03 2025 04:18:30 hybrid1120 maldet(28286): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 03 2025 04:18:30 hybrid1120 maldet(28286): {update} latest version already installed. Jul 03 2025 04:18:30 hybrid1120 maldet(28396): {sigup} performing signature update check... Jul 03 2025 04:18:30 hybrid1120 maldet(28396): {sigup} local signature set is version 20250701819448 Jul 03 2025 04:18:31 hybrid1120 maldet(28396): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 03 2025 04:18:31 hybrid1120 maldet(28396): {sigup} latest signature set already installed Jul 03 2025 04:18:31 hybrid1120 maldet(28487): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 03 2025 04:18:31 hybrid1120 maldet(28487): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 03 2025 04:18:31 hybrid1120 maldet(28487): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 03 2025 04:18:31 hybrid1120 maldet(28487): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 03 2025 04:18:31 hybrid1120 maldet(28487): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 03 2025 04:23:26 hybrid1120 maldet(28487): {scan} file list completed in 295s, found 2131 files... Jul 03 2025 04:23:26 hybrid1120 maldet(28487): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2131 files) in progress... Jul 03 2025 04:24:22 hybrid1120 maldet(28487): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2131, malware hits 0, cleaned hits 0, time 351s Jul 03 2025 04:24:22 hybrid1120 maldet(28487): {scan} scan report saved, to view run: maldet --report 250703-0418.28487 Jul 04 2025 03:09:36 hybrid1120 maldet(19191): {update} checking for available updates... Jul 04 2025 03:09:36 hybrid1120 maldet(19191): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 04 2025 03:09:36 hybrid1120 maldet(19191): {update} hashing install files and checking against server... Jul 04 2025 03:09:37 hybrid1120 maldet(19191): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 04 2025 03:09:37 hybrid1120 maldet(19191): {update} latest version already installed. Jul 04 2025 03:09:37 hybrid1120 maldet(19304): {sigup} performing signature update check... Jul 04 2025 03:09:37 hybrid1120 maldet(19304): {sigup} local signature set is version 20250701819448 Jul 04 2025 03:09:37 hybrid1120 maldet(19304): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 04 2025 03:09:37 hybrid1120 maldet(19304): {sigup} latest signature set already installed Jul 04 2025 03:09:37 hybrid1120 maldet(19394): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 04 2025 03:09:38 hybrid1120 maldet(19394): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 04 2025 03:09:38 hybrid1120 maldet(19394): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 04 2025 03:09:38 hybrid1120 maldet(19394): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 04 2025 03:09:38 hybrid1120 maldet(19394): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 04 2025 03:15:53 hybrid1120 maldet(19394): {scan} file list completed in 374s, found 2143 files... Jul 04 2025 03:15:53 hybrid1120 maldet(19394): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2143 files) in progress... Jul 04 2025 03:17:05 hybrid1120 maldet(19394): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2143, malware hits 0, cleaned hits 0, time 448s Jul 04 2025 03:17:05 hybrid1120 maldet(19394): {scan} scan report saved, to view run: maldet --report 250704-0309.19394 Jul 05 2025 05:20:27 hybrid1120 maldet(17331): {update} checking for available updates... Jul 05 2025 05:20:27 hybrid1120 maldet(17331): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 05 2025 05:20:27 hybrid1120 maldet(17331): {update} hashing install files and checking against server... Jul 05 2025 05:20:28 hybrid1120 maldet(17331): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 05 2025 05:20:28 hybrid1120 maldet(17331): {update} latest version already installed. Jul 05 2025 05:20:28 hybrid1120 maldet(17444): {sigup} performing signature update check... Jul 05 2025 05:20:28 hybrid1120 maldet(17444): {sigup} local signature set is version 20250701819448 Jul 05 2025 05:20:28 hybrid1120 maldet(17444): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 05 2025 05:20:28 hybrid1120 maldet(17444): {sigup} new signature set 202507041798016 available Jul 05 2025 05:20:28 hybrid1120 maldet(17444): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 05 2025 05:20:29 hybrid1120 maldet(17444): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 05 2025 05:20:30 hybrid1120 maldet(17444): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jul 05 2025 05:20:30 hybrid1120 maldet(17444): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 05 2025 05:20:30 hybrid1120 maldet(17444): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 05 2025 05:20:31 hybrid1120 maldet(17444): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jul 05 2025 05:20:31 hybrid1120 maldet(17444): {sigup} verified md5sum of maldet-sigpack.tgz Jul 05 2025 05:20:31 hybrid1120 maldet(17444): {sigup} unpacked and installed maldet-sigpack.tgz Jul 05 2025 05:20:31 hybrid1120 maldet(17444): {sigup} verified md5sum of maldet-clean.tgz Jul 05 2025 05:20:31 hybrid1120 maldet(17444): {sigup} unpacked and installed maldet-clean.tgz Jul 05 2025 05:20:31 hybrid1120 maldet(17444): {sigup} signature set update completed Jul 05 2025 05:20:31 hybrid1120 maldet(17444): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 05 2025 05:20:31 hybrid1120 maldet(17660): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 05 2025 05:20:31 hybrid1120 maldet(17660): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 05 2025 05:20:31 hybrid1120 maldet(17660): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 05 2025 05:20:31 hybrid1120 maldet(17660): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 05 2025 05:20:31 hybrid1120 maldet(17660): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 05 2025 05:24:21 hybrid1120 maldet(17660): {scan} file list completed in 230s, found 1074 files... Jul 05 2025 05:24:21 hybrid1120 maldet(17660): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1074 files) in progress... Jul 05 2025 05:24:54 hybrid1120 maldet(17660): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1074, malware hits 0, cleaned hits 0, time 263s Jul 05 2025 05:24:54 hybrid1120 maldet(17660): {scan} scan report saved, to view run: maldet --report 250705-0520.17660 Jul 06 2025 02:59:53 hybrid1120 maldet(5007): {update} checking for available updates... Jul 06 2025 02:59:53 hybrid1120 maldet(5007): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 06 2025 02:59:53 hybrid1120 maldet(5007): {update} hashing install files and checking against server... Jul 06 2025 02:59:54 hybrid1120 maldet(5007): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 06 2025 02:59:54 hybrid1120 maldet(5007): {update} latest version already installed. Jul 06 2025 02:59:54 hybrid1120 maldet(5120): {sigup} performing signature update check... Jul 06 2025 02:59:54 hybrid1120 maldet(5120): {sigup} local signature set is version 202507041798016 Jul 06 2025 02:59:54 hybrid1120 maldet(5120): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 06 2025 02:59:55 hybrid1120 maldet(5120): {sigup} latest signature set already installed Jul 06 2025 02:59:55 hybrid1120 maldet(5209): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 06 2025 02:59:55 hybrid1120 maldet(5209): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 06 2025 02:59:55 hybrid1120 maldet(5209): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 06 2025 02:59:55 hybrid1120 maldet(5209): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 06 2025 02:59:55 hybrid1120 maldet(5209): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 06 2025 03:05:10 hybrid1120 maldet(5209): {scan} file list completed in 315s, found 1168 files... Jul 06 2025 03:05:10 hybrid1120 maldet(5209): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1168 files) in progress... Jul 06 2025 03:05:46 hybrid1120 maldet(5209): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1168, malware hits 0, cleaned hits 0, time 350s Jul 06 2025 03:05:46 hybrid1120 maldet(5209): {scan} scan report saved, to view run: maldet --report 250706-0259.5209 Jul 07 2025 05:01:49 hybrid1120 maldet(12861): {update} checking for available updates... Jul 07 2025 05:01:50 hybrid1120 maldet(12861): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 07 2025 05:01:50 hybrid1120 maldet(12861): {update} hashing install files and checking against server... Jul 07 2025 05:01:50 hybrid1120 maldet(12861): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 07 2025 05:01:50 hybrid1120 maldet(12861): {update} latest version already installed. Jul 07 2025 05:01:50 hybrid1120 maldet(12981): {sigup} performing signature update check... Jul 07 2025 05:01:50 hybrid1120 maldet(12981): {sigup} local signature set is version 202507041798016 Jul 07 2025 05:01:51 hybrid1120 maldet(12981): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 07 2025 05:01:51 hybrid1120 maldet(12981): {sigup} latest signature set already installed Jul 07 2025 05:01:51 hybrid1120 maldet(13074): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 07 2025 05:01:51 hybrid1120 maldet(13074): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 07 2025 05:01:51 hybrid1120 maldet(13074): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 07 2025 05:01:51 hybrid1120 maldet(13074): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 07 2025 05:01:51 hybrid1120 maldet(13074): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 07 2025 05:05:09 hybrid1120 maldet(13074): {scan} file list completed in 198s, found 1766 files... Jul 07 2025 05:05:09 hybrid1120 maldet(13074): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1766 files) in progress... Jul 07 2025 05:05:56 hybrid1120 maldet(13074): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1766, malware hits 0, cleaned hits 0, time 245s Jul 07 2025 05:05:56 hybrid1120 maldet(13074): {scan} scan report saved, to view run: maldet --report 250707-0501.13074 Jul 08 2025 02:20:58 hybrid1120 maldet(24790): {update} checking for available updates... Jul 08 2025 02:20:59 hybrid1120 maldet(24790): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 08 2025 02:20:59 hybrid1120 maldet(24790): {update} hashing install files and checking against server... Jul 08 2025 02:20:59 hybrid1120 maldet(24790): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 08 2025 02:20:59 hybrid1120 maldet(24790): {update} latest version already installed. Jul 08 2025 02:20:59 hybrid1120 maldet(24905): {sigup} performing signature update check... Jul 08 2025 02:20:59 hybrid1120 maldet(24905): {sigup} local signature set is version 202507041798016 Jul 08 2025 02:21:00 hybrid1120 maldet(24905): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 08 2025 02:21:00 hybrid1120 maldet(24905): {sigup} new signature set 202507072770854 available Jul 08 2025 02:21:00 hybrid1120 maldet(24905): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 08 2025 02:21:01 hybrid1120 maldet(24905): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 08 2025 02:21:02 hybrid1120 maldet(24905): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jul 08 2025 02:21:02 hybrid1120 maldet(24905): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 08 2025 02:21:03 hybrid1120 maldet(24905): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 08 2025 02:21:05 hybrid1120 maldet(24905): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jul 08 2025 02:21:05 hybrid1120 maldet(24905): {sigup} verified md5sum of maldet-sigpack.tgz Jul 08 2025 02:21:05 hybrid1120 maldet(24905): {sigup} unpacked and installed maldet-sigpack.tgz Jul 08 2025 02:21:05 hybrid1120 maldet(24905): {sigup} verified md5sum of maldet-clean.tgz Jul 08 2025 02:21:05 hybrid1120 maldet(24905): {sigup} unpacked and installed maldet-clean.tgz Jul 08 2025 02:21:05 hybrid1120 maldet(24905): {sigup} signature set update completed Jul 08 2025 02:21:05 hybrid1120 maldet(24905): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 08 2025 02:21:05 hybrid1120 maldet(25146): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 08 2025 02:21:06 hybrid1120 maldet(25146): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 08 2025 02:21:06 hybrid1120 maldet(25146): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 08 2025 02:21:06 hybrid1120 maldet(25146): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 08 2025 02:21:06 hybrid1120 maldet(25146): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 08 2025 02:26:59 hybrid1120 maldet(25146): {scan} file list completed in 353s, found 1881 files... Jul 08 2025 02:26:59 hybrid1120 maldet(25146): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1881 files) in progress... Jul 08 2025 02:27:54 hybrid1120 maldet(25146): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1881, malware hits 0, cleaned hits 0, time 409s Jul 08 2025 02:27:54 hybrid1120 maldet(25146): {scan} scan report saved, to view run: maldet --report 250708-0221.25146 Jul 09 2025 03:41:29 hybrid1120 maldet(4429): {update} checking for available updates... Jul 09 2025 03:41:30 hybrid1120 maldet(4429): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 09 2025 03:41:30 hybrid1120 maldet(4429): {update} hashing install files and checking against server... Jul 09 2025 03:41:30 hybrid1120 maldet(4429): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 09 2025 03:41:30 hybrid1120 maldet(4429): {update} latest version already installed. Jul 09 2025 03:41:30 hybrid1120 maldet(4539): {sigup} performing signature update check... Jul 09 2025 03:41:30 hybrid1120 maldet(4539): {sigup} local signature set is version 202507072770854 Jul 09 2025 03:41:31 hybrid1120 maldet(4539): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 09 2025 03:41:31 hybrid1120 maldet(4539): {sigup} latest signature set already installed Jul 09 2025 03:41:31 hybrid1120 maldet(4629): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 09 2025 03:41:31 hybrid1120 maldet(4629): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 09 2025 03:41:31 hybrid1120 maldet(4629): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 09 2025 03:41:31 hybrid1120 maldet(4629): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 09 2025 03:41:31 hybrid1120 maldet(4629): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 09 2025 03:47:47 hybrid1120 maldet(4629): {scan} file list completed in 376s, found 2052 files... Jul 09 2025 03:47:47 hybrid1120 maldet(4629): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2052 files) in progress... Jul 09 2025 03:48:42 hybrid1120 maldet(4629): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2052, malware hits 0, cleaned hits 0, time 431s Jul 09 2025 03:48:42 hybrid1120 maldet(4629): {scan} scan report saved, to view run: maldet --report 250709-0341.4629 Jul 10 2025 03:17:03 hybrid1120 maldet(8071): {update} checking for available updates... Jul 10 2025 03:17:03 hybrid1120 maldet(8071): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 10 2025 03:17:03 hybrid1120 maldet(8071): {update} hashing install files and checking against server... Jul 10 2025 03:17:04 hybrid1120 maldet(8071): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 10 2025 03:17:04 hybrid1120 maldet(8071): {update} latest version already installed. Jul 10 2025 03:17:04 hybrid1120 maldet(8181): {sigup} performing signature update check... Jul 10 2025 03:17:04 hybrid1120 maldet(8181): {sigup} local signature set is version 202507072770854 Jul 10 2025 03:17:04 hybrid1120 maldet(8181): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 10 2025 03:17:04 hybrid1120 maldet(8181): {sigup} latest signature set already installed Jul 10 2025 03:17:05 hybrid1120 maldet(8270): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 10 2025 03:17:05 hybrid1120 maldet(8270): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 10 2025 03:17:05 hybrid1120 maldet(8270): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 10 2025 03:17:05 hybrid1120 maldet(8270): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 10 2025 03:17:05 hybrid1120 maldet(8270): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 10 2025 03:23:46 hybrid1120 maldet(8270): {scan} file list completed in 401s, found 2272 files... Jul 10 2025 03:23:46 hybrid1120 maldet(8270): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2272 files) in progress... Jul 10 2025 03:24:51 hybrid1120 maldet(8270): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2272, malware hits 0, cleaned hits 0, time 466s Jul 10 2025 03:24:51 hybrid1120 maldet(8270): {scan} scan report saved, to view run: maldet --report 250710-0317.8270 Jul 11 2025 03:09:18 hybrid1120 maldet(2345): {update} checking for available updates... Jul 11 2025 03:09:18 hybrid1120 maldet(2345): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 11 2025 03:09:18 hybrid1120 maldet(2345): {update} hashing install files and checking against server... Jul 11 2025 03:09:19 hybrid1120 maldet(2345): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 11 2025 03:09:19 hybrid1120 maldet(2345): {update} latest version already installed. Jul 11 2025 03:09:19 hybrid1120 maldet(2459): {sigup} performing signature update check... Jul 11 2025 03:09:19 hybrid1120 maldet(2459): {sigup} local signature set is version 202507072770854 Jul 11 2025 03:09:19 hybrid1120 maldet(2459): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 11 2025 03:09:19 hybrid1120 maldet(2459): {sigup} new signature set 202507103744209 available Jul 11 2025 03:09:19 hybrid1120 maldet(2459): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 11 2025 03:09:20 hybrid1120 maldet(2459): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 11 2025 03:09:21 hybrid1120 maldet(2459): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jul 11 2025 03:09:21 hybrid1120 maldet(2459): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 11 2025 03:09:21 hybrid1120 maldet(2459): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 11 2025 03:09:22 hybrid1120 maldet(2459): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jul 11 2025 03:09:22 hybrid1120 maldet(2459): {sigup} verified md5sum of maldet-sigpack.tgz Jul 11 2025 03:09:22 hybrid1120 maldet(2459): {sigup} unpacked and installed maldet-sigpack.tgz Jul 11 2025 03:09:22 hybrid1120 maldet(2459): {sigup} verified md5sum of maldet-clean.tgz Jul 11 2025 03:09:22 hybrid1120 maldet(2459): {sigup} unpacked and installed maldet-clean.tgz Jul 11 2025 03:09:22 hybrid1120 maldet(2459): {sigup} signature set update completed Jul 11 2025 03:09:22 hybrid1120 maldet(2459): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 11 2025 03:09:22 hybrid1120 maldet(2682): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 11 2025 03:09:23 hybrid1120 maldet(2682): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 11 2025 03:09:23 hybrid1120 maldet(2682): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 11 2025 03:09:23 hybrid1120 maldet(2682): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 11 2025 03:09:23 hybrid1120 maldet(2682): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 11 2025 03:14:35 hybrid1120 maldet(2682): {scan} file list completed in 312s, found 1739 files... Jul 11 2025 03:14:35 hybrid1120 maldet(2682): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1739 files) in progress... Jul 11 2025 03:15:43 hybrid1120 maldet(2682): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1739, malware hits 0, cleaned hits 0, time 381s Jul 11 2025 03:15:43 hybrid1120 maldet(2682): {scan} scan report saved, to view run: maldet --report 250711-0309.2682 Jul 12 2025 03:38:14 hybrid1120 maldet(21563): {update} checking for available updates... Jul 12 2025 03:38:14 hybrid1120 maldet(21563): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 12 2025 03:38:14 hybrid1120 maldet(21563): {update} hashing install files and checking against server... Jul 12 2025 03:38:15 hybrid1120 maldet(21563): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 12 2025 03:38:15 hybrid1120 maldet(21563): {update} latest version already installed. Jul 12 2025 03:38:15 hybrid1120 maldet(21672): {sigup} performing signature update check... Jul 12 2025 03:38:15 hybrid1120 maldet(21672): {sigup} local signature set is version 202507103744209 Jul 12 2025 03:38:15 hybrid1120 maldet(21672): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 12 2025 03:38:15 hybrid1120 maldet(21672): {sigup} latest signature set already installed Jul 12 2025 03:38:16 hybrid1120 maldet(21761): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 12 2025 03:38:16 hybrid1120 maldet(21761): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 12 2025 03:38:16 hybrid1120 maldet(21761): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 12 2025 03:38:16 hybrid1120 maldet(21761): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 12 2025 03:38:16 hybrid1120 maldet(21761): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 12 2025 03:43:13 hybrid1120 maldet(21761): {scan} file list completed in 296s, found 2260 files... Jul 12 2025 03:43:13 hybrid1120 maldet(21761): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2260 files) in progress... Jul 12 2025 03:44:13 hybrid1120 maldet(21761): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2260, malware hits 0, cleaned hits 0, time 357s Jul 12 2025 03:44:13 hybrid1120 maldet(21761): {scan} scan report saved, to view run: maldet --report 250712-0338.21761 Jul 13 2025 03:38:50 hybrid1120 maldet(2717): {update} checking for available updates... Jul 13 2025 03:38:50 hybrid1120 maldet(2717): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 13 2025 03:38:50 hybrid1120 maldet(2717): {update} hashing install files and checking against server... Jul 13 2025 03:38:51 hybrid1120 maldet(2717): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 13 2025 03:38:51 hybrid1120 maldet(2717): {update} latest version already installed. Jul 13 2025 03:38:51 hybrid1120 maldet(2827): {sigup} performing signature update check... Jul 13 2025 03:38:51 hybrid1120 maldet(2827): {sigup} local signature set is version 202507103744209 Jul 13 2025 03:38:51 hybrid1120 maldet(2827): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 13 2025 03:38:52 hybrid1120 maldet(2827): {sigup} latest signature set already installed Jul 13 2025 03:38:52 hybrid1120 maldet(2933): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 13 2025 03:38:52 hybrid1120 maldet(2933): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 13 2025 03:38:52 hybrid1120 maldet(2933): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 13 2025 03:38:52 hybrid1120 maldet(2933): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 13 2025 03:38:52 hybrid1120 maldet(2933): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 13 2025 03:44:41 hybrid1120 maldet(2933): {scan} file list completed in 349s, found 896 files... Jul 13 2025 03:44:41 hybrid1120 maldet(2933): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (896 files) in progress... Jul 13 2025 03:45:09 hybrid1120 maldet(2933): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 896, malware hits 0, cleaned hits 0, time 377s Jul 13 2025 03:45:09 hybrid1120 maldet(2933): {scan} scan report saved, to view run: maldet --report 250713-0338.2933 Jul 14 2025 04:36:52 hybrid1120 maldet(28744): {update} checking for available updates... Jul 14 2025 04:37:34 hybrid1120 maldet(28744): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 14 2025 04:37:34 hybrid1120 maldet(28744): {update} hashing install files and checking against server... Jul 14 2025 04:37:35 hybrid1120 maldet(28744): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 14 2025 04:37:35 hybrid1120 maldet(28744): {update} latest version already installed. Jul 14 2025 04:37:35 hybrid1120 maldet(29100): {sigup} performing signature update check... Jul 14 2025 04:37:35 hybrid1120 maldet(29100): {sigup} local signature set is version 202507103744209 Jul 14 2025 04:38:29 hybrid1120 maldet(29100): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 14 2025 04:38:29 hybrid1120 maldet(29100): {sigup} new signature set error code: 525 available Jul 14 2025 04:38:29 hybrid1120 maldet(29100): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 14 2025 04:38:30 hybrid1120 maldet(29100): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 14 2025 04:39:03 hybrid1120 maldet(29100): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jul 14 2025 04:39:03 hybrid1120 maldet(29100): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 14 2025 04:39:30 hybrid1120 maldet(29100): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 14 2025 04:40:04 hybrid1120 maldet(29100): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jul 14 2025 04:40:04 hybrid1120 maldet(29100): {sigup} verified md5sum of maldet-sigpack.tgz Jul 14 2025 04:40:04 hybrid1120 maldet(29100): {sigup} unpacked and installed maldet-sigpack.tgz Jul 14 2025 04:40:05 hybrid1120 maldet(29100): {sigup} verified md5sum of maldet-clean.tgz Jul 14 2025 04:40:05 hybrid1120 maldet(29100): {sigup} unpacked and installed maldet-clean.tgz Jul 14 2025 04:40:05 hybrid1120 maldet(29100): {sigup} signature set update completed Jul 14 2025 04:40:05 hybrid1120 maldet(29100): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 14 2025 04:40:05 hybrid1120 maldet(30761): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 14 2025 04:40:05 hybrid1120 maldet(30761): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 14 2025 04:40:05 hybrid1120 maldet(30761): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 14 2025 04:40:05 hybrid1120 maldet(30761): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 14 2025 04:40:05 hybrid1120 maldet(30761): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 14 2025 04:44:07 hybrid1120 maldet(30761): {scan} file list completed in 242s, found 1172 files... Jul 14 2025 04:44:07 hybrid1120 maldet(30761): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1172 files) in progress... Jul 14 2025 04:44:41 hybrid1120 maldet(30761): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1172, malware hits 0, cleaned hits 0, time 276s Jul 14 2025 04:44:41 hybrid1120 maldet(30761): {scan} scan report saved, to view run: maldet --report 250714-0440.30761 Jul 15 2025 03:51:11 hybrid1120 maldet(6984): {update} checking for available updates... Jul 15 2025 03:51:12 hybrid1120 maldet(6984): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 15 2025 03:51:12 hybrid1120 maldet(6984): {update} hashing install files and checking against server... Jul 15 2025 03:51:12 hybrid1120 maldet(6984): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 15 2025 03:51:12 hybrid1120 maldet(6984): {update} latest version already installed. Jul 15 2025 03:51:12 hybrid1120 maldet(7097): {sigup} performing signature update check... Jul 15 2025 03:51:12 hybrid1120 maldet(7097): {sigup} local signature set is version 20250713521977 Jul 15 2025 03:51:13 hybrid1120 maldet(7097): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 15 2025 03:51:13 hybrid1120 maldet(7097): {sigup} latest signature set already installed Jul 15 2025 03:51:13 hybrid1120 maldet(7194): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 15 2025 03:51:13 hybrid1120 maldet(7194): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 15 2025 03:51:13 hybrid1120 maldet(7194): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 15 2025 03:51:13 hybrid1120 maldet(7194): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 15 2025 03:51:13 hybrid1120 maldet(7194): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 15 2025 03:57:06 hybrid1120 maldet(7194): {scan} file list completed in 353s, found 1836 files... Jul 15 2025 03:57:06 hybrid1120 maldet(7194): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1836 files) in progress... Jul 15 2025 03:57:57 hybrid1120 maldet(7194): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1836, malware hits 0, cleaned hits 0, time 404s Jul 15 2025 03:57:57 hybrid1120 maldet(7194): {scan} scan report saved, to view run: maldet --report 250715-0351.7194 Jul 16 2025 03:22:46 hybrid1120 maldet(715): {update} checking for available updates... Jul 16 2025 03:22:47 hybrid1120 maldet(715): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 16 2025 03:22:47 hybrid1120 maldet(715): {update} hashing install files and checking against server... Jul 16 2025 03:22:48 hybrid1120 maldet(715): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 16 2025 03:22:48 hybrid1120 maldet(715): {update} latest version already installed. Jul 16 2025 03:22:48 hybrid1120 maldet(843): {sigup} performing signature update check... Jul 16 2025 03:22:48 hybrid1120 maldet(843): {sigup} local signature set is version 20250713521977 Jul 16 2025 03:22:48 hybrid1120 maldet(843): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 16 2025 03:22:48 hybrid1120 maldet(843): {sigup} latest signature set already installed Jul 16 2025 03:22:48 hybrid1120 maldet(957): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 16 2025 03:22:49 hybrid1120 maldet(957): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 16 2025 03:22:49 hybrid1120 maldet(957): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 16 2025 03:22:49 hybrid1120 maldet(957): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 16 2025 03:22:49 hybrid1120 maldet(957): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 16 2025 03:29:27 hybrid1120 maldet(957): {scan} file list completed in 398s, found 2128 files... Jul 16 2025 03:29:27 hybrid1120 maldet(957): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2128 files) in progress... Jul 16 2025 03:30:30 hybrid1120 maldet(957): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2128, malware hits 0, cleaned hits 0, time 462s Jul 16 2025 03:30:30 hybrid1120 maldet(957): {scan} scan report saved, to view run: maldet --report 250716-0322.957 Jul 17 2025 04:24:45 hybrid1120 maldet(19345): {update} checking for available updates... Jul 17 2025 04:24:45 hybrid1120 maldet(19345): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 17 2025 04:24:45 hybrid1120 maldet(19345): {update} hashing install files and checking against server... Jul 17 2025 04:24:46 hybrid1120 maldet(19345): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 17 2025 04:24:46 hybrid1120 maldet(19345): {update} latest version already installed. Jul 17 2025 04:24:46 hybrid1120 maldet(19455): {sigup} performing signature update check... Jul 17 2025 04:24:46 hybrid1120 maldet(19455): {sigup} local signature set is version 20250713521977 Jul 17 2025 04:24:47 hybrid1120 maldet(19455): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 17 2025 04:24:47 hybrid1120 maldet(19455): {sigup} new signature set 202507161493482 available Jul 17 2025 04:24:47 hybrid1120 maldet(19455): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 17 2025 04:24:48 hybrid1120 maldet(19455): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 17 2025 04:24:48 hybrid1120 maldet(19455): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jul 17 2025 04:24:48 hybrid1120 maldet(19455): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 17 2025 04:24:49 hybrid1120 maldet(19455): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 17 2025 04:24:49 hybrid1120 maldet(19455): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jul 17 2025 04:24:49 hybrid1120 maldet(19455): {sigup} verified md5sum of maldet-sigpack.tgz Jul 17 2025 04:24:49 hybrid1120 maldet(19455): {sigup} unpacked and installed maldet-sigpack.tgz Jul 17 2025 04:24:49 hybrid1120 maldet(19455): {sigup} verified md5sum of maldet-clean.tgz Jul 17 2025 04:24:49 hybrid1120 maldet(19455): {sigup} unpacked and installed maldet-clean.tgz Jul 17 2025 04:24:49 hybrid1120 maldet(19455): {sigup} signature set update completed Jul 17 2025 04:24:49 hybrid1120 maldet(19455): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 17 2025 04:24:50 hybrid1120 maldet(19676): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 17 2025 04:24:50 hybrid1120 maldet(19676): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 17 2025 04:24:50 hybrid1120 maldet(19676): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 17 2025 04:24:50 hybrid1120 maldet(19676): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 17 2025 04:24:50 hybrid1120 maldet(19676): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 17 2025 04:29:18 hybrid1120 maldet(19676): {scan} file list completed in 268s, found 2042 files... Jul 17 2025 04:29:18 hybrid1120 maldet(19676): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2042 files) in progress... Jul 17 2025 04:30:26 hybrid1120 maldet(19676): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2042, malware hits 0, cleaned hits 0, time 336s Jul 17 2025 04:30:26 hybrid1120 maldet(19676): {scan} scan report saved, to view run: maldet --report 250717-0424.19676 Jul 18 2025 04:04:21 hybrid1120 maldet(23242): {update} checking for available updates... Jul 18 2025 04:04:21 hybrid1120 maldet(23242): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 18 2025 04:04:21 hybrid1120 maldet(23242): {update} hashing install files and checking against server... Jul 18 2025 04:04:22 hybrid1120 maldet(23242): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 18 2025 04:04:22 hybrid1120 maldet(23242): {update} latest version already installed. Jul 18 2025 04:04:22 hybrid1120 maldet(23351): {sigup} performing signature update check... Jul 18 2025 04:04:22 hybrid1120 maldet(23351): {sigup} local signature set is version 202507161493482 Jul 18 2025 04:04:22 hybrid1120 maldet(23351): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 18 2025 04:04:22 hybrid1120 maldet(23351): {sigup} latest signature set already installed Jul 18 2025 04:04:23 hybrid1120 maldet(23439): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 18 2025 04:04:23 hybrid1120 maldet(23439): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 18 2025 04:04:23 hybrid1120 maldet(23439): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 18 2025 04:04:23 hybrid1120 maldet(23439): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 18 2025 04:04:23 hybrid1120 maldet(23439): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 18 2025 04:10:19 hybrid1120 maldet(23439): {scan} file list completed in 356s, found 1685 files... Jul 18 2025 04:10:19 hybrid1120 maldet(23439): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1685 files) in progress... Jul 18 2025 04:11:17 hybrid1120 maldet(23439): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1685, malware hits 0, cleaned hits 0, time 414s Jul 18 2025 04:11:17 hybrid1120 maldet(23439): {scan} scan report saved, to view run: maldet --report 250718-0404.23439 Jul 19 2025 03:33:41 hybrid1120 maldet(14545): {update} checking for available updates... Jul 19 2025 03:33:41 hybrid1120 maldet(14545): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 19 2025 03:33:41 hybrid1120 maldet(14545): {update} hashing install files and checking against server... Jul 19 2025 03:33:42 hybrid1120 maldet(14545): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 19 2025 03:33:42 hybrid1120 maldet(14545): {update} latest version already installed. Jul 19 2025 03:33:42 hybrid1120 maldet(14656): {sigup} performing signature update check... Jul 19 2025 03:33:42 hybrid1120 maldet(14656): {sigup} local signature set is version 202507161493482 Jul 19 2025 03:33:42 hybrid1120 maldet(14656): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 19 2025 03:33:43 hybrid1120 maldet(14656): {sigup} latest signature set already installed Jul 19 2025 03:33:43 hybrid1120 maldet(14744): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 19 2025 03:33:43 hybrid1120 maldet(14744): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 19 2025 03:33:43 hybrid1120 maldet(14744): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 19 2025 03:33:43 hybrid1120 maldet(14744): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 19 2025 03:33:43 hybrid1120 maldet(14744): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 19 2025 03:39:29 hybrid1120 maldet(14744): {scan} file list completed in 346s, found 2185 files... Jul 19 2025 03:39:29 hybrid1120 maldet(14744): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2185 files) in progress... Jul 19 2025 03:40:40 hybrid1120 maldet(14744): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2185, malware hits 0, cleaned hits 0, time 417s Jul 19 2025 03:40:40 hybrid1120 maldet(14744): {scan} scan report saved, to view run: maldet --report 250719-0333.14744 Jul 20 2025 04:55:12 hybrid1120 maldet(6279): {update} checking for available updates... Jul 20 2025 04:55:13 hybrid1120 maldet(6279): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 20 2025 04:55:13 hybrid1120 maldet(6279): {update} hashing install files and checking against server... Jul 20 2025 04:55:13 hybrid1120 maldet(6279): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 20 2025 04:55:13 hybrid1120 maldet(6279): {update} latest version already installed. Jul 20 2025 04:55:13 hybrid1120 maldet(6393): {sigup} performing signature update check... Jul 20 2025 04:55:14 hybrid1120 maldet(6393): {sigup} local signature set is version 202507161493482 Jul 20 2025 04:55:14 hybrid1120 maldet(6393): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 20 2025 04:55:14 hybrid1120 maldet(6393): {sigup} new signature set 202507192465560 available Jul 20 2025 04:55:14 hybrid1120 maldet(6393): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 20 2025 04:55:15 hybrid1120 maldet(6393): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 20 2025 04:55:16 hybrid1120 maldet(6393): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jul 20 2025 04:55:16 hybrid1120 maldet(6393): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 20 2025 04:55:16 hybrid1120 maldet(6393): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 20 2025 04:55:17 hybrid1120 maldet(6393): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jul 20 2025 04:55:17 hybrid1120 maldet(6393): {sigup} verified md5sum of maldet-sigpack.tgz Jul 20 2025 04:55:17 hybrid1120 maldet(6393): {sigup} unpacked and installed maldet-sigpack.tgz Jul 20 2025 04:55:17 hybrid1120 maldet(6393): {sigup} verified md5sum of maldet-clean.tgz Jul 20 2025 04:55:17 hybrid1120 maldet(6393): {sigup} unpacked and installed maldet-clean.tgz Jul 20 2025 04:55:17 hybrid1120 maldet(6393): {sigup} signature set update completed Jul 20 2025 04:55:17 hybrid1120 maldet(6393): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 20 2025 04:55:17 hybrid1120 maldet(6613): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 20 2025 04:55:18 hybrid1120 maldet(6613): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 20 2025 04:55:18 hybrid1120 maldet(6613): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 20 2025 04:55:18 hybrid1120 maldet(6613): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 20 2025 04:55:18 hybrid1120 maldet(6613): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 20 2025 05:01:23 hybrid1120 maldet(6613): {scan} file list completed in 365s, found 4067 files... Jul 20 2025 05:01:23 hybrid1120 maldet(6613): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (4067 files) in progress... Jul 20 2025 05:03:26 hybrid1120 maldet(6613): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 4067, malware hits 0, cleaned hits 0, time 489s Jul 20 2025 05:03:26 hybrid1120 maldet(6613): {scan} scan report saved, to view run: maldet --report 250720-0455.6613 Jul 21 2025 04:47:23 hybrid1120 maldet(7402): {update} checking for available updates... Jul 21 2025 04:47:24 hybrid1120 maldet(7402): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 21 2025 04:47:24 hybrid1120 maldet(7402): {update} hashing install files and checking against server... Jul 21 2025 04:47:25 hybrid1120 maldet(7402): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 21 2025 04:47:25 hybrid1120 maldet(7402): {update} latest version already installed. Jul 21 2025 04:47:25 hybrid1120 maldet(7514): {sigup} performing signature update check... Jul 21 2025 04:47:25 hybrid1120 maldet(7514): {sigup} local signature set is version 202507192465560 Jul 21 2025 04:47:25 hybrid1120 maldet(7514): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 21 2025 04:47:25 hybrid1120 maldet(7514): {sigup} latest signature set already installed Jul 21 2025 04:47:25 hybrid1120 maldet(7603): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 21 2025 04:47:26 hybrid1120 maldet(7603): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 21 2025 04:47:26 hybrid1120 maldet(7603): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 21 2025 04:47:26 hybrid1120 maldet(7603): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 21 2025 04:47:26 hybrid1120 maldet(7603): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 21 2025 04:52:21 hybrid1120 maldet(7603): {scan} file list completed in 295s, found 1238 files... Jul 21 2025 04:52:21 hybrid1120 maldet(7603): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1238 files) in progress... Jul 21 2025 04:53:05 hybrid1120 maldet(7603): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1238, malware hits 0, cleaned hits 0, time 340s Jul 21 2025 04:53:05 hybrid1120 maldet(7603): {scan} scan report saved, to view run: maldet --report 250721-0447.7603 Jul 22 2025 03:08:37 hybrid1120 maldet(16135): {update} checking for available updates... Jul 22 2025 03:08:37 hybrid1120 maldet(16135): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 22 2025 03:08:37 hybrid1120 maldet(16135): {update} hashing install files and checking against server... Jul 22 2025 03:08:38 hybrid1120 maldet(16135): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 22 2025 03:08:38 hybrid1120 maldet(16135): {update} latest version already installed. Jul 22 2025 03:08:38 hybrid1120 maldet(16246): {sigup} performing signature update check... Jul 22 2025 03:08:38 hybrid1120 maldet(16246): {sigup} local signature set is version 202507192465560 Jul 22 2025 03:08:38 hybrid1120 maldet(16246): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 22 2025 03:08:38 hybrid1120 maldet(16246): {sigup} latest signature set already installed Jul 22 2025 03:08:38 hybrid1120 maldet(16336): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 22 2025 03:08:39 hybrid1120 maldet(16336): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 22 2025 03:08:39 hybrid1120 maldet(16336): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 22 2025 03:08:39 hybrid1120 maldet(16336): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 22 2025 03:08:39 hybrid1120 maldet(16336): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 22 2025 03:15:26 hybrid1120 maldet(16336): {scan} file list completed in 407s, found 1564 files... Jul 22 2025 03:15:26 hybrid1120 maldet(16336): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1564 files) in progress... Jul 22 2025 03:16:17 hybrid1120 maldet(16336): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1564, malware hits 0, cleaned hits 0, time 459s Jul 22 2025 03:16:17 hybrid1120 maldet(16336): {scan} scan report saved, to view run: maldet --report 250722-0308.16336 Jul 23 2025 03:51:44 hybrid1120 maldet(7336): {update} checking for available updates... Jul 23 2025 03:51:45 hybrid1120 maldet(7336): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 23 2025 03:51:45 hybrid1120 maldet(7336): {update} hashing install files and checking against server... Jul 23 2025 03:51:45 hybrid1120 maldet(7336): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 23 2025 03:51:45 hybrid1120 maldet(7336): {update} latest version already installed. Jul 23 2025 03:51:45 hybrid1120 maldet(7458): {sigup} performing signature update check... Jul 23 2025 03:51:45 hybrid1120 maldet(7458): {sigup} local signature set is version 202507192465560 Jul 23 2025 03:51:46 hybrid1120 maldet(7458): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 23 2025 03:51:46 hybrid1120 maldet(7458): {sigup} new signature set 202507223437753 available Jul 23 2025 03:51:46 hybrid1120 maldet(7458): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 23 2025 03:51:47 hybrid1120 maldet(7458): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 23 2025 03:51:47 hybrid1120 maldet(7458): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jul 23 2025 03:51:47 hybrid1120 maldet(7458): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 23 2025 03:51:48 hybrid1120 maldet(7458): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 23 2025 03:51:48 hybrid1120 maldet(7458): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jul 23 2025 03:51:48 hybrid1120 maldet(7458): {sigup} verified md5sum of maldet-sigpack.tgz Jul 23 2025 03:51:49 hybrid1120 maldet(7458): {sigup} unpacked and installed maldet-sigpack.tgz Jul 23 2025 03:51:49 hybrid1120 maldet(7458): {sigup} verified md5sum of maldet-clean.tgz Jul 23 2025 03:51:49 hybrid1120 maldet(7458): {sigup} unpacked and installed maldet-clean.tgz Jul 23 2025 03:51:49 hybrid1120 maldet(7458): {sigup} signature set update completed Jul 23 2025 03:51:49 hybrid1120 maldet(7458): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 23 2025 03:51:49 hybrid1120 maldet(7661): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 23 2025 03:51:49 hybrid1120 maldet(7661): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 23 2025 03:51:49 hybrid1120 maldet(7661): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 23 2025 03:51:49 hybrid1120 maldet(7661): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 23 2025 03:51:49 hybrid1120 maldet(7661): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 23 2025 03:57:47 hybrid1120 maldet(7661): {scan} file list completed in 358s, found 1326 files... Jul 23 2025 03:57:47 hybrid1120 maldet(7661): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1326 files) in progress... Jul 23 2025 03:58:29 hybrid1120 maldet(7661): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1326, malware hits 0, cleaned hits 0, time 400s Jul 23 2025 03:58:29 hybrid1120 maldet(7661): {scan} scan report saved, to view run: maldet --report 250723-0351.7661 Jul 24 2025 03:29:14 hybrid1120 maldet(26484): {update} checking for available updates... Jul 24 2025 03:29:14 hybrid1120 maldet(26484): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 24 2025 03:29:14 hybrid1120 maldet(26484): {update} hashing install files and checking against server... Jul 24 2025 03:29:15 hybrid1120 maldet(26484): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 24 2025 03:29:15 hybrid1120 maldet(26484): {update} latest version already installed. Jul 24 2025 03:29:15 hybrid1120 maldet(26600): {sigup} performing signature update check... Jul 24 2025 03:29:15 hybrid1120 maldet(26600): {sigup} local signature set is version 202507223437753 Jul 24 2025 03:29:15 hybrid1120 maldet(26600): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 24 2025 03:29:15 hybrid1120 maldet(26600): {sigup} latest signature set already installed Jul 24 2025 03:29:15 hybrid1120 maldet(26696): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 24 2025 03:29:16 hybrid1120 maldet(26696): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 24 2025 03:29:16 hybrid1120 maldet(26696): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 24 2025 03:29:16 hybrid1120 maldet(26696): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 24 2025 03:29:16 hybrid1120 maldet(26696): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 24 2025 03:34:50 hybrid1120 maldet(26696): {scan} file list completed in 334s, found 1330 files... Jul 24 2025 03:34:50 hybrid1120 maldet(26696): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1330 files) in progress... Jul 24 2025 03:35:42 hybrid1120 maldet(26696): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1330, malware hits 0, cleaned hits 0, time 387s Jul 24 2025 03:35:42 hybrid1120 maldet(26696): {scan} scan report saved, to view run: maldet --report 250724-0329.26696 Jul 25 2025 02:53:52 hybrid1120 maldet(15536): {update} checking for available updates... Jul 25 2025 02:53:53 hybrid1120 maldet(15536): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 25 2025 02:53:53 hybrid1120 maldet(15536): {update} hashing install files and checking against server... Jul 25 2025 02:53:53 hybrid1120 maldet(15536): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 25 2025 02:53:53 hybrid1120 maldet(15536): {update} latest version already installed. Jul 25 2025 02:53:53 hybrid1120 maldet(15647): {sigup} performing signature update check... Jul 25 2025 02:53:53 hybrid1120 maldet(15647): {sigup} local signature set is version 202507223437753 Jul 25 2025 02:53:54 hybrid1120 maldet(15647): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 25 2025 02:53:54 hybrid1120 maldet(15647): {sigup} latest signature set already installed Jul 25 2025 02:53:54 hybrid1120 maldet(15750): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 25 2025 02:53:54 hybrid1120 maldet(15750): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 25 2025 02:53:54 hybrid1120 maldet(15750): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 25 2025 02:53:54 hybrid1120 maldet(15750): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 25 2025 02:53:54 hybrid1120 maldet(15750): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 25 2025 02:59:39 hybrid1120 maldet(15750): {scan} file list completed in 344s, found 1311 files... Jul 25 2025 02:59:39 hybrid1120 maldet(15750): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1311 files) in progress... Jul 25 2025 03:00:33 hybrid1120 maldet(15750): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1311, malware hits 0, cleaned hits 0, time 399s Jul 25 2025 03:00:33 hybrid1120 maldet(15750): {scan} scan report saved, to view run: maldet --report 250725-0253.15750 Jul 26 2025 02:42:02 hybrid1120 maldet(28961): {update} checking for available updates... Jul 26 2025 02:42:02 hybrid1120 maldet(28961): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 26 2025 02:42:02 hybrid1120 maldet(28961): {update} hashing install files and checking against server... Jul 26 2025 02:42:03 hybrid1120 maldet(28961): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 26 2025 02:42:03 hybrid1120 maldet(28961): {update} latest version already installed. Jul 26 2025 02:42:03 hybrid1120 maldet(29088): {sigup} performing signature update check... Jul 26 2025 02:42:03 hybrid1120 maldet(29088): {sigup} local signature set is version 202507223437753 Jul 26 2025 02:42:03 hybrid1120 maldet(29088): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 26 2025 02:42:03 hybrid1120 maldet(29088): {sigup} new signature set 20250725225711 available Jul 26 2025 02:42:03 hybrid1120 maldet(29088): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 26 2025 02:42:05 hybrid1120 maldet(29088): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 26 2025 02:42:05 hybrid1120 maldet(29088): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jul 26 2025 02:42:05 hybrid1120 maldet(29088): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 26 2025 02:42:06 hybrid1120 maldet(29088): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 26 2025 02:42:06 hybrid1120 maldet(29088): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jul 26 2025 02:42:06 hybrid1120 maldet(29088): {sigup} verified md5sum of maldet-sigpack.tgz Jul 26 2025 02:42:07 hybrid1120 maldet(29088): {sigup} unpacked and installed maldet-sigpack.tgz Jul 26 2025 02:42:07 hybrid1120 maldet(29088): {sigup} verified md5sum of maldet-clean.tgz Jul 26 2025 02:42:07 hybrid1120 maldet(29088): {sigup} unpacked and installed maldet-clean.tgz Jul 26 2025 02:42:07 hybrid1120 maldet(29088): {sigup} signature set update completed Jul 26 2025 02:42:07 hybrid1120 maldet(29088): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 26 2025 02:42:07 hybrid1120 maldet(29302): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 26 2025 02:42:07 hybrid1120 maldet(29302): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 26 2025 02:42:07 hybrid1120 maldet(29302): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 26 2025 02:42:07 hybrid1120 maldet(29302): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 26 2025 02:42:07 hybrid1120 maldet(29302): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 26 2025 02:46:57 hybrid1120 maldet(29302): {scan} file list completed in 290s, found 1190 files... Jul 26 2025 02:46:57 hybrid1120 maldet(29302): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1190 files) in progress... Jul 26 2025 02:47:36 hybrid1120 maldet(29302): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1190, malware hits 0, cleaned hits 0, time 329s Jul 26 2025 02:47:36 hybrid1120 maldet(29302): {scan} scan report saved, to view run: maldet --report 250726-0242.29302 Jul 27 2025 04:24:35 hybrid1120 maldet(14625): {update} checking for available updates... Jul 27 2025 04:24:36 hybrid1120 maldet(14625): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 27 2025 04:24:36 hybrid1120 maldet(14625): {update} hashing install files and checking against server... Jul 27 2025 04:24:36 hybrid1120 maldet(14625): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 27 2025 04:24:36 hybrid1120 maldet(14625): {update} latest version already installed. Jul 27 2025 04:24:36 hybrid1120 maldet(14734): {sigup} performing signature update check... Jul 27 2025 04:24:36 hybrid1120 maldet(14734): {sigup} local signature set is version 20250725225711 Jul 27 2025 04:24:37 hybrid1120 maldet(14734): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 27 2025 04:24:37 hybrid1120 maldet(14734): {sigup} latest signature set already installed Jul 27 2025 04:24:37 hybrid1120 maldet(14822): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 27 2025 04:24:37 hybrid1120 maldet(14822): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 27 2025 04:24:37 hybrid1120 maldet(14822): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 27 2025 04:24:37 hybrid1120 maldet(14822): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 27 2025 04:24:37 hybrid1120 maldet(14822): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 27 2025 04:29:06 hybrid1120 maldet(14822): {scan} file list completed in 269s, found 1598 files... Jul 27 2025 04:29:06 hybrid1120 maldet(14822): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1598 files) in progress... Jul 27 2025 04:30:06 hybrid1120 maldet(14822): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1598, malware hits 0, cleaned hits 0, time 329s Jul 27 2025 04:30:06 hybrid1120 maldet(14822): {scan} scan report saved, to view run: maldet --report 250727-0424.14822 Jul 28 2025 02:25:29 hybrid1120 maldet(7775): {update} checking for available updates... Jul 28 2025 02:25:30 hybrid1120 maldet(7775): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 28 2025 02:25:30 hybrid1120 maldet(7775): {update} hashing install files and checking against server... Jul 28 2025 02:25:30 hybrid1120 maldet(7775): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 28 2025 02:25:30 hybrid1120 maldet(7775): {update} latest version already installed. Jul 28 2025 02:25:30 hybrid1120 maldet(7884): {sigup} performing signature update check... Jul 28 2025 02:25:30 hybrid1120 maldet(7884): {sigup} local signature set is version 20250725225711 Jul 28 2025 02:25:31 hybrid1120 maldet(7884): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 28 2025 02:25:31 hybrid1120 maldet(7884): {sigup} latest signature set already installed Jul 28 2025 02:25:31 hybrid1120 maldet(7972): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 28 2025 02:25:31 hybrid1120 maldet(7972): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 28 2025 02:25:31 hybrid1120 maldet(7972): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 28 2025 02:25:31 hybrid1120 maldet(7972): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 28 2025 02:25:31 hybrid1120 maldet(7972): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 28 2025 02:32:23 hybrid1120 maldet(7972): {scan} file list completed in 412s, found 1637 files... Jul 28 2025 02:32:23 hybrid1120 maldet(7972): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1637 files) in progress... Jul 28 2025 02:33:21 hybrid1120 maldet(7972): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1637, malware hits 0, cleaned hits 0, time 470s Jul 28 2025 02:33:21 hybrid1120 maldet(7972): {scan} scan report saved, to view run: maldet --report 250728-0225.7972 Jul 29 2025 03:54:33 hybrid1120 maldet(27557): {update} checking for available updates... Jul 29 2025 03:54:33 hybrid1120 maldet(27557): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 29 2025 03:54:33 hybrid1120 maldet(27557): {update} hashing install files and checking against server... Jul 29 2025 03:54:34 hybrid1120 maldet(27557): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 29 2025 03:54:34 hybrid1120 maldet(27557): {update} latest version already installed. Jul 29 2025 03:54:34 hybrid1120 maldet(27668): {sigup} performing signature update check... Jul 29 2025 03:54:34 hybrid1120 maldet(27668): {sigup} local signature set is version 20250725225711 Jul 29 2025 03:54:34 hybrid1120 maldet(27668): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 29 2025 03:54:34 hybrid1120 maldet(27668): {sigup} new signature set 202507281201435 available Jul 29 2025 03:54:34 hybrid1120 maldet(27668): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 29 2025 03:54:36 hybrid1120 maldet(27668): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 29 2025 03:54:36 hybrid1120 maldet(27668): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jul 29 2025 03:54:36 hybrid1120 maldet(27668): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 29 2025 03:54:36 hybrid1120 maldet(27668): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 29 2025 03:54:37 hybrid1120 maldet(27668): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jul 29 2025 03:54:37 hybrid1120 maldet(27668): {sigup} verified md5sum of maldet-sigpack.tgz Jul 29 2025 03:54:37 hybrid1120 maldet(27668): {sigup} unpacked and installed maldet-sigpack.tgz Jul 29 2025 03:54:37 hybrid1120 maldet(27668): {sigup} verified md5sum of maldet-clean.tgz Jul 29 2025 03:54:37 hybrid1120 maldet(27668): {sigup} unpacked and installed maldet-clean.tgz Jul 29 2025 03:54:37 hybrid1120 maldet(27668): {sigup} signature set update completed Jul 29 2025 03:54:37 hybrid1120 maldet(27668): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 29 2025 03:54:37 hybrid1120 maldet(27887): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 29 2025 03:54:38 hybrid1120 maldet(27887): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 29 2025 03:54:38 hybrid1120 maldet(27887): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 29 2025 03:54:38 hybrid1120 maldet(27887): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 29 2025 03:54:38 hybrid1120 maldet(27887): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 29 2025 04:00:32 hybrid1120 maldet(27887): {scan} file list completed in 354s, found 1198 files... Jul 29 2025 04:00:32 hybrid1120 maldet(27887): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1198 files) in progress... Jul 29 2025 04:01:07 hybrid1120 maldet(27887): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1198, malware hits 0, cleaned hits 0, time 390s Jul 29 2025 04:01:07 hybrid1120 maldet(27887): {scan} scan report saved, to view run: maldet --report 250729-0354.27887 Jul 30 2025 04:00:40 hybrid1120 maldet(16125): {update} checking for available updates... Jul 30 2025 04:00:41 hybrid1120 maldet(16125): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 30 2025 04:00:41 hybrid1120 maldet(16125): {update} hashing install files and checking against server... Jul 30 2025 04:00:41 hybrid1120 maldet(16125): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 30 2025 04:00:41 hybrid1120 maldet(16125): {update} latest version already installed. Jul 30 2025 04:00:41 hybrid1120 maldet(16235): {sigup} performing signature update check... Jul 30 2025 04:00:41 hybrid1120 maldet(16235): {sigup} local signature set is version 202507281201435 Jul 30 2025 04:00:42 hybrid1120 maldet(16235): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 30 2025 04:00:42 hybrid1120 maldet(16235): {sigup} latest signature set already installed Jul 30 2025 04:00:42 hybrid1120 maldet(16338): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 30 2025 04:00:43 hybrid1120 maldet(16338): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 30 2025 04:00:43 hybrid1120 maldet(16338): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 30 2025 04:00:43 hybrid1120 maldet(16338): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 30 2025 04:00:43 hybrid1120 maldet(16338): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 30 2025 04:08:18 hybrid1120 maldet(16338): {scan} file list completed in 455s, found 1375 files... Jul 30 2025 04:08:18 hybrid1120 maldet(16338): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1375 files) in progress... Jul 30 2025 04:08:57 hybrid1120 maldet(16338): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1375, malware hits 0, cleaned hits 0, time 495s Jul 30 2025 04:08:57 hybrid1120 maldet(16338): {scan} scan report saved, to view run: maldet --report 250730-0400.16338 Jul 31 2025 03:46:50 hybrid1120 maldet(11044): {update} checking for available updates... Jul 31 2025 03:46:51 hybrid1120 maldet(11044): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 31 2025 03:46:51 hybrid1120 maldet(11044): {update} hashing install files and checking against server... Jul 31 2025 03:46:51 hybrid1120 maldet(11044): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 31 2025 03:46:51 hybrid1120 maldet(11044): {update} latest version already installed. Jul 31 2025 03:46:51 hybrid1120 maldet(11153): {sigup} performing signature update check... Jul 31 2025 03:46:51 hybrid1120 maldet(11153): {sigup} local signature set is version 202507281201435 Jul 31 2025 03:46:52 hybrid1120 maldet(11153): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 31 2025 03:46:52 hybrid1120 maldet(11153): {sigup} latest signature set already installed Jul 31 2025 03:46:52 hybrid1120 maldet(11242): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 31 2025 03:46:52 hybrid1120 maldet(11242): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 31 2025 03:46:52 hybrid1120 maldet(11242): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 31 2025 03:46:52 hybrid1120 maldet(11242): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 31 2025 03:46:52 hybrid1120 maldet(11242): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 31 2025 03:52:51 hybrid1120 maldet(11242): {scan} file list completed in 359s, found 1453 files... Jul 31 2025 03:52:52 hybrid1120 maldet(11242): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1453 files) in progress... Jul 31 2025 03:53:31 hybrid1120 maldet(11242): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1453, malware hits 0, cleaned hits 0, time 399s Jul 31 2025 03:53:31 hybrid1120 maldet(11242): {scan} scan report saved, to view run: maldet --report 250731-0346.11242 Aug 01 2025 03:28:55 hybrid1120 maldet(31439): {update} checking for available updates... Aug 01 2025 03:28:55 hybrid1120 maldet(31439): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 01 2025 03:28:55 hybrid1120 maldet(31439): {update} hashing install files and checking against server... Aug 01 2025 03:28:56 hybrid1120 maldet(31439): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 01 2025 03:28:56 hybrid1120 maldet(31439): {update} latest version already installed. Aug 01 2025 03:28:56 hybrid1120 maldet(31555): {sigup} performing signature update check... Aug 01 2025 03:28:56 hybrid1120 maldet(31555): {sigup} local signature set is version 202507281201435 Aug 01 2025 03:28:56 hybrid1120 maldet(31555): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 01 2025 03:28:56 hybrid1120 maldet(31555): {sigup} new signature set 202507312174018 available Aug 01 2025 03:28:56 hybrid1120 maldet(31555): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Aug 01 2025 03:28:57 hybrid1120 maldet(31555): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Aug 01 2025 03:28:58 hybrid1120 maldet(31555): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Aug 01 2025 03:28:58 hybrid1120 maldet(31555): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Aug 01 2025 03:28:58 hybrid1120 maldet(31555): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Aug 01 2025 03:28:59 hybrid1120 maldet(31555): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Aug 01 2025 03:28:59 hybrid1120 maldet(31555): {sigup} verified md5sum of maldet-sigpack.tgz Aug 01 2025 03:28:59 hybrid1120 maldet(31555): {sigup} unpacked and installed maldet-sigpack.tgz Aug 01 2025 03:28:59 hybrid1120 maldet(31555): {sigup} verified md5sum of maldet-clean.tgz Aug 01 2025 03:28:59 hybrid1120 maldet(31555): {sigup} unpacked and installed maldet-clean.tgz Aug 01 2025 03:28:59 hybrid1120 maldet(31555): {sigup} signature set update completed Aug 01 2025 03:28:59 hybrid1120 maldet(31555): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Aug 01 2025 03:28:59 hybrid1120 maldet(31770): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 01 2025 03:29:00 hybrid1120 maldet(31770): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Aug 01 2025 03:29:00 hybrid1120 maldet(31770): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Aug 01 2025 03:29:00 hybrid1120 maldet(31770): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 01 2025 03:29:00 hybrid1120 maldet(31770): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 01 2025 03:35:39 hybrid1120 maldet(31770): {scan} file list completed in 399s, found 1680 files... Aug 01 2025 03:35:39 hybrid1120 maldet(31770): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1680 files) in progress... Aug 01 2025 03:36:30 hybrid1120 maldet(31770): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1680, malware hits 0, cleaned hits 0, time 451s Aug 01 2025 03:36:30 hybrid1120 maldet(31770): {scan} scan report saved, to view run: maldet --report 250801-0328.31770 Aug 02 2025 05:18:36 hybrid1120 maldet(29986): {update} checking for available updates... Aug 02 2025 05:18:37 hybrid1120 maldet(29986): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 02 2025 05:18:37 hybrid1120 maldet(29986): {update} hashing install files and checking against server... Aug 02 2025 05:18:38 hybrid1120 maldet(29986): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 02 2025 05:18:38 hybrid1120 maldet(29986): {update} latest version already installed. Aug 02 2025 05:18:38 hybrid1120 maldet(30096): {sigup} performing signature update check... Aug 02 2025 05:18:38 hybrid1120 maldet(30096): {sigup} local signature set is version 202507312174018 Aug 02 2025 05:18:38 hybrid1120 maldet(30096): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 02 2025 05:18:38 hybrid1120 maldet(30096): {sigup} new signature set 202508012915753 available Aug 02 2025 05:18:38 hybrid1120 maldet(30096): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Aug 02 2025 05:18:39 hybrid1120 maldet(30096): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Aug 02 2025 05:18:40 hybrid1120 maldet(30096): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Aug 02 2025 05:18:40 hybrid1120 maldet(30096): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Aug 02 2025 05:18:40 hybrid1120 maldet(30096): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Aug 02 2025 05:18:41 hybrid1120 maldet(30096): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Aug 02 2025 05:18:41 hybrid1120 maldet(30096): {sigup} verified md5sum of maldet-sigpack.tgz Aug 02 2025 05:18:41 hybrid1120 maldet(30096): {sigup} unpacked and installed maldet-sigpack.tgz Aug 02 2025 05:18:41 hybrid1120 maldet(30096): {sigup} verified md5sum of maldet-clean.tgz Aug 02 2025 05:18:41 hybrid1120 maldet(30096): {sigup} unpacked and installed maldet-clean.tgz Aug 02 2025 05:18:41 hybrid1120 maldet(30096): {sigup} signature set update completed Aug 02 2025 05:18:41 hybrid1120 maldet(30096): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Aug 02 2025 05:18:41 hybrid1120 maldet(30328): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 02 2025 05:18:41 hybrid1120 maldet(30328): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Aug 02 2025 05:18:41 hybrid1120 maldet(30328): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Aug 02 2025 05:18:41 hybrid1120 maldet(30328): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 02 2025 05:18:41 hybrid1120 maldet(30328): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 02 2025 05:23:22 hybrid1120 maldet(30328): {scan} file list completed in 281s, found 1209 files... Aug 02 2025 05:23:22 hybrid1120 maldet(30328): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1209 files) in progress... Aug 02 2025 05:23:55 hybrid1120 maldet(30328): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1209, malware hits 0, cleaned hits 0, time 314s Aug 02 2025 05:23:55 hybrid1120 maldet(30328): {scan} scan report saved, to view run: maldet --report 250802-0518.30328 Aug 03 2025 04:40:15 hybrid1120 maldet(25264): {update} checking for available updates... Aug 03 2025 04:40:16 hybrid1120 maldet(25264): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 03 2025 04:40:16 hybrid1120 maldet(25264): {update} hashing install files and checking against server... Aug 03 2025 04:40:16 hybrid1120 maldet(25264): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 03 2025 04:40:16 hybrid1120 maldet(25264): {update} latest version already installed. Aug 03 2025 04:40:16 hybrid1120 maldet(25379): {sigup} performing signature update check... Aug 03 2025 04:40:16 hybrid1120 maldet(25379): {sigup} local signature set is version 202508012915753 Aug 03 2025 04:40:17 hybrid1120 maldet(25379): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 03 2025 04:40:17 hybrid1120 maldet(25379): {sigup} latest signature set already installed Aug 03 2025 04:40:17 hybrid1120 maldet(25467): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 03 2025 04:40:17 hybrid1120 maldet(25467): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Aug 03 2025 04:40:17 hybrid1120 maldet(25467): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Aug 03 2025 04:40:17 hybrid1120 maldet(25467): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 03 2025 04:40:17 hybrid1120 maldet(25467): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 03 2025 04:44:30 hybrid1120 maldet(25467): {scan} file list completed in 253s, found 1342 files... Aug 03 2025 04:44:30 hybrid1120 maldet(25467): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1342 files) in progress... Aug 03 2025 04:45:23 hybrid1120 maldet(25467): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1342, malware hits 0, cleaned hits 0, time 306s Aug 03 2025 04:45:23 hybrid1120 maldet(25467): {scan} scan report saved, to view run: maldet --report 250803-0440.25467 Aug 04 2025 04:06:47 hybrid1120 maldet(16342): {update} checking for available updates... Aug 04 2025 04:06:48 hybrid1120 maldet(16342): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 04 2025 04:06:48 hybrid1120 maldet(16342): {update} hashing install files and checking against server... Aug 04 2025 04:06:48 hybrid1120 maldet(16342): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 04 2025 04:06:48 hybrid1120 maldet(16342): {update} latest version already installed. Aug 04 2025 04:06:48 hybrid1120 maldet(16456): {sigup} performing signature update check... Aug 04 2025 04:06:48 hybrid1120 maldet(16456): {sigup} local signature set is version 202508012915753 Aug 04 2025 04:06:48 hybrid1120 maldet(16456): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 04 2025 04:06:49 hybrid1120 maldet(16456): {sigup} latest signature set already installed Aug 04 2025 04:06:49 hybrid1120 maldet(16544): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 04 2025 04:06:49 hybrid1120 maldet(16544): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Aug 04 2025 04:06:49 hybrid1120 maldet(16544): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Aug 04 2025 04:06:49 hybrid1120 maldet(16544): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 04 2025 04:06:49 hybrid1120 maldet(16544): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 04 2025 04:13:46 hybrid1120 maldet(16544): {scan} file list completed in 417s, found 1484 files... Aug 04 2025 04:13:46 hybrid1120 maldet(16544): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1484 files) in progress... Aug 04 2025 04:14:33 hybrid1120 maldet(16544): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1484, malware hits 0, cleaned hits 0, time 464s Aug 04 2025 04:14:33 hybrid1120 maldet(16544): {scan} scan report saved, to view run: maldet --report 250804-0406.16544 Aug 05 2025 02:49:29 hybrid1120 maldet(27598): {update} checking for available updates... Aug 05 2025 02:49:29 hybrid1120 maldet(27598): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 05 2025 02:49:29 hybrid1120 maldet(27598): {update} hashing install files and checking against server... Aug 05 2025 02:49:30 hybrid1120 maldet(27598): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 05 2025 02:49:30 hybrid1120 maldet(27598): {update} latest version already installed. Aug 05 2025 02:49:30 hybrid1120 maldet(27716): {sigup} performing signature update check... Aug 05 2025 02:49:30 hybrid1120 maldet(27716): {sigup} local signature set is version 202508012915753 Aug 05 2025 02:49:30 hybrid1120 maldet(27716): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 05 2025 02:49:30 hybrid1120 maldet(27716): {sigup} new signature set 202508043889133 available Aug 05 2025 02:49:30 hybrid1120 maldet(27716): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Aug 05 2025 02:49:31 hybrid1120 maldet(27716): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Aug 05 2025 02:49:32 hybrid1120 maldet(27716): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Aug 05 2025 02:49:32 hybrid1120 maldet(27716): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Aug 05 2025 02:49:32 hybrid1120 maldet(27716): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Aug 05 2025 02:49:33 hybrid1120 maldet(27716): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Aug 05 2025 02:49:33 hybrid1120 maldet(27716): {sigup} verified md5sum of maldet-sigpack.tgz Aug 05 2025 02:49:33 hybrid1120 maldet(27716): {sigup} unpacked and installed maldet-sigpack.tgz Aug 05 2025 02:49:33 hybrid1120 maldet(27716): {sigup} verified md5sum of maldet-clean.tgz Aug 05 2025 02:49:33 hybrid1120 maldet(27716): {sigup} unpacked and installed maldet-clean.tgz Aug 05 2025 02:49:33 hybrid1120 maldet(27716): {sigup} signature set update completed Aug 05 2025 02:49:33 hybrid1120 maldet(27716): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Aug 05 2025 02:49:33 hybrid1120 maldet(27930): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 05 2025 02:49:34 hybrid1120 maldet(27930): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Aug 05 2025 02:49:34 hybrid1120 maldet(27930): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Aug 05 2025 02:49:34 hybrid1120 maldet(27930): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 05 2025 02:49:34 hybrid1120 maldet(27930): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 05 2025 02:55:22 hybrid1120 maldet(27930): {scan} file list completed in 348s, found 1503 files... Aug 05 2025 02:55:22 hybrid1120 maldet(27930): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1503 files) in progress... Aug 05 2025 02:56:02 hybrid1120 maldet(27930): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1503, malware hits 0, cleaned hits 0, time 389s Aug 05 2025 02:56:02 hybrid1120 maldet(27930): {scan} scan report saved, to view run: maldet --report 250805-0249.27930 Aug 06 2025 02:39:45 hybrid1120 maldet(1973): {update} checking for available updates... Aug 06 2025 02:39:46 hybrid1120 maldet(1973): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 06 2025 02:39:46 hybrid1120 maldet(1973): {update} hashing install files and checking against server... Aug 06 2025 02:39:46 hybrid1120 maldet(1973): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 06 2025 02:39:46 hybrid1120 maldet(1973): {update} latest version already installed. Aug 06 2025 02:39:46 hybrid1120 maldet(2099): {sigup} performing signature update check... Aug 06 2025 02:39:46 hybrid1120 maldet(2099): {sigup} local signature set is version 202508043889133 Aug 06 2025 02:39:47 hybrid1120 maldet(2099): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 06 2025 02:39:47 hybrid1120 maldet(2099): {sigup} latest signature set already installed Aug 06 2025 02:39:47 hybrid1120 maldet(2191): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 06 2025 02:39:47 hybrid1120 maldet(2191): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Aug 06 2025 02:39:47 hybrid1120 maldet(2191): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Aug 06 2025 02:39:47 hybrid1120 maldet(2191): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 06 2025 02:39:47 hybrid1120 maldet(2191): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 06 2025 02:46:19 hybrid1120 maldet(2191): {scan} file list completed in 392s, found 1578 files... Aug 06 2025 02:46:19 hybrid1120 maldet(2191): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1578 files) in progress... Aug 06 2025 02:47:04 hybrid1120 maldet(2191): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1578, malware hits 0, cleaned hits 0, time 437s Aug 06 2025 02:47:04 hybrid1120 maldet(2191): {scan} scan report saved, to view run: maldet --report 250806-0239.2191 Aug 07 2025 04:13:45 hybrid1120 maldet(6497): {update} checking for available updates... Aug 07 2025 04:13:46 hybrid1120 maldet(6497): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 07 2025 04:13:46 hybrid1120 maldet(6497): {update} hashing install files and checking against server... Aug 07 2025 04:13:46 hybrid1120 maldet(6497): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 07 2025 04:13:46 hybrid1120 maldet(6497): {update} latest version already installed. Aug 07 2025 04:13:46 hybrid1120 maldet(6612): {sigup} performing signature update check... Aug 07 2025 04:13:46 hybrid1120 maldet(6612): {sigup} local signature set is version 202508043889133 Aug 07 2025 04:13:47 hybrid1120 maldet(6612): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 07 2025 04:13:47 hybrid1120 maldet(6612): {sigup} latest signature set already installed Aug 07 2025 04:13:47 hybrid1120 maldet(6700): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 07 2025 04:13:48 hybrid1120 maldet(6700): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Aug 07 2025 04:13:48 hybrid1120 maldet(6700): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Aug 07 2025 04:13:48 hybrid1120 maldet(6700): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 07 2025 04:13:48 hybrid1120 maldet(6700): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 07 2025 04:20:46 hybrid1120 maldet(6700): {scan} file list completed in 418s, found 1809 files... Aug 07 2025 04:20:46 hybrid1120 maldet(6700): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1809 files) in progress... Aug 07 2025 04:21:44 hybrid1120 maldet(6700): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1809, malware hits 0, cleaned hits 0, time 477s Aug 07 2025 04:21:44 hybrid1120 maldet(6700): {scan} scan report saved, to view run: maldet --report 250807-0413.6700 Aug 08 2025 03:09:34 hybrid1120 maldet(31263): {update} checking for available updates... Aug 08 2025 03:09:35 hybrid1120 maldet(31263): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 08 2025 03:09:35 hybrid1120 maldet(31263): {update} hashing install files and checking against server... Aug 08 2025 03:09:35 hybrid1120 maldet(31263): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 08 2025 03:09:35 hybrid1120 maldet(31263): {update} latest version already installed. Aug 08 2025 03:09:35 hybrid1120 maldet(31376): {sigup} performing signature update check... Aug 08 2025 03:09:35 hybrid1120 maldet(31376): {sigup} local signature set is version 202508043889133 Aug 08 2025 03:09:35 hybrid1120 maldet(31376): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 08 2025 03:09:36 hybrid1120 maldet(31376): {sigup} new signature set 20250807667605 available Aug 08 2025 03:09:36 hybrid1120 maldet(31376): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Aug 08 2025 03:09:37 hybrid1120 maldet(31376): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Aug 08 2025 03:09:37 hybrid1120 maldet(31376): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Aug 08 2025 03:09:37 hybrid1120 maldet(31376): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Aug 08 2025 03:09:38 hybrid1120 maldet(31376): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Aug 08 2025 03:09:38 hybrid1120 maldet(31376): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Aug 08 2025 03:09:38 hybrid1120 maldet(31376): {sigup} verified md5sum of maldet-sigpack.tgz Aug 08 2025 03:09:39 hybrid1120 maldet(31376): {sigup} unpacked and installed maldet-sigpack.tgz Aug 08 2025 03:09:39 hybrid1120 maldet(31376): {sigup} verified md5sum of maldet-clean.tgz Aug 08 2025 03:09:39 hybrid1120 maldet(31376): {sigup} unpacked and installed maldet-clean.tgz Aug 08 2025 03:09:39 hybrid1120 maldet(31376): {sigup} signature set update completed Aug 08 2025 03:09:39 hybrid1120 maldet(31376): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Aug 08 2025 03:09:39 hybrid1120 maldet(31594): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 08 2025 03:09:39 hybrid1120 maldet(31594): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Aug 08 2025 03:09:39 hybrid1120 maldet(31594): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Aug 08 2025 03:09:39 hybrid1120 maldet(31594): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 08 2025 03:09:39 hybrid1120 maldet(31594): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 08 2025 03:16:05 hybrid1120 maldet(31594): {scan} file list completed in 386s, found 1584 files... Aug 08 2025 03:16:05 hybrid1120 maldet(31594): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1584 files) in progress... Aug 08 2025 03:16:49 hybrid1120 maldet(31594): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1584, malware hits 0, cleaned hits 0, time 430s Aug 08 2025 03:16:49 hybrid1120 maldet(31594): {scan} scan report saved, to view run: maldet --report 250808-0309.31594 Aug 09 2025 02:21:11 hybrid1120 maldet(5339): {update} checking for available updates... Aug 09 2025 02:21:12 hybrid1120 maldet(5339): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 09 2025 02:21:12 hybrid1120 maldet(5339): {update} hashing install files and checking against server... Aug 09 2025 02:21:13 hybrid1120 maldet(5339): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 09 2025 02:21:13 hybrid1120 maldet(5339): {update} latest version already installed. Aug 09 2025 02:21:13 hybrid1120 maldet(5448): {sigup} performing signature update check... Aug 09 2025 02:21:13 hybrid1120 maldet(5448): {sigup} local signature set is version 20250807667605 Aug 09 2025 02:21:13 hybrid1120 maldet(5448): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 09 2025 02:21:13 hybrid1120 maldet(5448): {sigup} latest signature set already installed Aug 09 2025 02:21:13 hybrid1120 maldet(5536): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 09 2025 02:21:14 hybrid1120 maldet(5536): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Aug 09 2025 02:21:14 hybrid1120 maldet(5536): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Aug 09 2025 02:21:14 hybrid1120 maldet(5536): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 09 2025 02:21:14 hybrid1120 maldet(5536): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 09 2025 02:26:48 hybrid1120 maldet(5536): {scan} file list completed in 334s, found 1549 files... Aug 09 2025 02:26:48 hybrid1120 maldet(5536): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1549 files) in progress... Aug 09 2025 02:27:30 hybrid1120 maldet(5536): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1549, malware hits 0, cleaned hits 0, time 377s Aug 09 2025 02:27:30 hybrid1120 maldet(5536): {scan} scan report saved, to view run: maldet --report 250809-0221.5536 Aug 10 2025 03:40:12 hybrid1120 maldet(10157): {update} checking for available updates... Aug 10 2025 03:40:13 hybrid1120 maldet(10157): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 10 2025 03:40:13 hybrid1120 maldet(10157): {update} hashing install files and checking against server... Aug 10 2025 03:40:13 hybrid1120 maldet(10157): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 10 2025 03:40:13 hybrid1120 maldet(10157): {update} latest version already installed. Aug 10 2025 03:40:13 hybrid1120 maldet(10291): {sigup} performing signature update check... Aug 10 2025 03:40:13 hybrid1120 maldet(10291): {sigup} local signature set is version 20250807667605 Aug 10 2025 03:40:14 hybrid1120 maldet(10291): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 10 2025 03:40:14 hybrid1120 maldet(10291): {sigup} latest signature set already installed Aug 10 2025 03:40:14 hybrid1120 maldet(10379): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 10 2025 03:40:15 hybrid1120 maldet(10379): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Aug 10 2025 03:40:15 hybrid1120 maldet(10379): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Aug 10 2025 03:40:15 hybrid1120 maldet(10379): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 10 2025 03:40:15 hybrid1120 maldet(10379): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 10 2025 03:48:28 hybrid1120 maldet(10379): {scan} file list completed in 493s, found 1359 files... Aug 10 2025 03:48:28 hybrid1120 maldet(10379): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1359 files) in progress... Aug 10 2025 03:49:05 hybrid1120 maldet(10379): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1359, malware hits 0, cleaned hits 0, time 531s Aug 10 2025 03:49:05 hybrid1120 maldet(10379): {scan} scan report saved, to view run: maldet --report 250810-0340.10379 Aug 11 2025 03:19:37 hybrid1120 maldet(28897): {update} checking for available updates... Aug 11 2025 03:19:38 hybrid1120 maldet(28897): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 11 2025 03:19:38 hybrid1120 maldet(28897): {update} hashing install files and checking against server... Aug 11 2025 03:19:38 hybrid1120 maldet(28897): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 11 2025 03:19:38 hybrid1120 maldet(28897): {update} latest version already installed. Aug 11 2025 03:19:38 hybrid1120 maldet(29006): {sigup} performing signature update check... Aug 11 2025 03:19:38 hybrid1120 maldet(29006): {sigup} local signature set is version 20250807667605 Aug 11 2025 03:19:39 hybrid1120 maldet(29006): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 11 2025 03:19:39 hybrid1120 maldet(29006): {sigup} new signature set 202508101639180 available Aug 11 2025 03:19:39 hybrid1120 maldet(29006): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Aug 11 2025 03:19:40 hybrid1120 maldet(29006): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Aug 11 2025 03:19:41 hybrid1120 maldet(29006): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Aug 11 2025 03:19:41 hybrid1120 maldet(29006): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Aug 11 2025 03:19:41 hybrid1120 maldet(29006): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Aug 11 2025 03:19:41 hybrid1120 maldet(29006): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Aug 11 2025 03:19:42 hybrid1120 maldet(29006): {sigup} verified md5sum of maldet-sigpack.tgz Aug 11 2025 03:19:42 hybrid1120 maldet(29006): {sigup} unpacked and installed maldet-sigpack.tgz Aug 11 2025 03:19:42 hybrid1120 maldet(29006): {sigup} verified md5sum of maldet-clean.tgz Aug 11 2025 03:19:42 hybrid1120 maldet(29006): {sigup} unpacked and installed maldet-clean.tgz Aug 11 2025 03:19:42 hybrid1120 maldet(29006): {sigup} signature set update completed Aug 11 2025 03:19:42 hybrid1120 maldet(29006): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Aug 11 2025 03:19:42 hybrid1120 maldet(29216): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 11 2025 03:19:42 hybrid1120 maldet(29216): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Aug 11 2025 03:19:42 hybrid1120 maldet(29216): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Aug 11 2025 03:19:42 hybrid1120 maldet(29216): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 11 2025 03:19:42 hybrid1120 maldet(29216): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 11 2025 03:27:17 hybrid1120 maldet(29216): {scan} file list completed in 455s, found 1535 files... Aug 11 2025 03:27:17 hybrid1120 maldet(29216): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1535 files) in progress... Aug 11 2025 03:28:06 hybrid1120 maldet(29216): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1535, malware hits 0, cleaned hits 0, time 504s Aug 11 2025 03:28:06 hybrid1120 maldet(29216): {scan} scan report saved, to view run: maldet --report 250811-0319.29216 Aug 12 2025 03:36:25 hybrid1120 maldet(2228): {update} checking for available updates... Aug 12 2025 03:36:26 hybrid1120 maldet(2228): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 12 2025 03:36:26 hybrid1120 maldet(2228): {update} hashing install files and checking against server... Aug 12 2025 03:36:26 hybrid1120 maldet(2228): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 12 2025 03:36:26 hybrid1120 maldet(2228): {update} latest version already installed. Aug 12 2025 03:36:26 hybrid1120 maldet(2340): {sigup} performing signature update check... Aug 12 2025 03:36:26 hybrid1120 maldet(2340): {sigup} local signature set is version 202508101639180 Aug 12 2025 03:36:27 hybrid1120 maldet(2340): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 12 2025 03:36:27 hybrid1120 maldet(2340): {sigup} latest signature set already installed Aug 12 2025 03:36:27 hybrid1120 maldet(2430): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 12 2025 03:36:27 hybrid1120 maldet(2430): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Aug 12 2025 03:36:27 hybrid1120 maldet(2430): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Aug 12 2025 03:36:27 hybrid1120 maldet(2430): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 12 2025 03:36:27 hybrid1120 maldet(2430): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 12 2025 03:42:51 hybrid1120 maldet(2430): {scan} file list completed in 384s, found 1567 files... Aug 12 2025 03:42:51 hybrid1120 maldet(2430): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1567 files) in progress... Aug 12 2025 03:43:46 hybrid1120 maldet(2430): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1567, malware hits 0, cleaned hits 0, time 439s Aug 12 2025 03:43:46 hybrid1120 maldet(2430): {scan} scan report saved, to view run: maldet --report 250812-0336.2430 Aug 13 2025 02:57:04 hybrid1120 maldet(30137): {update} checking for available updates... Aug 13 2025 02:57:05 hybrid1120 maldet(30137): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 13 2025 02:57:05 hybrid1120 maldet(30137): {update} hashing install files and checking against server... Aug 13 2025 02:57:05 hybrid1120 maldet(30137): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 13 2025 02:57:05 hybrid1120 maldet(30137): {update} latest version already installed. Aug 13 2025 02:57:05 hybrid1120 maldet(30317): {sigup} performing signature update check... Aug 13 2025 02:57:05 hybrid1120 maldet(30317): {sigup} local signature set is version 202508101639180 Aug 13 2025 02:57:06 hybrid1120 maldet(30317): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 13 2025 02:57:06 hybrid1120 maldet(30317): {sigup} latest signature set already installed Aug 13 2025 02:57:06 hybrid1120 maldet(30406): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 13 2025 02:57:07 hybrid1120 maldet(30406): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Aug 13 2025 02:57:07 hybrid1120 maldet(30406): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Aug 13 2025 02:57:07 hybrid1120 maldet(30406): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 13 2025 02:57:07 hybrid1120 maldet(30406): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 13 2025 03:03:53 hybrid1120 maldet(30406): {scan} file list completed in 406s, found 1154 files... Aug 13 2025 03:03:53 hybrid1120 maldet(30406): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1154 files) in progress... Aug 13 2025 03:04:26 hybrid1120 maldet(30406): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1154, malware hits 0, cleaned hits 0, time 440s Aug 13 2025 03:04:26 hybrid1120 maldet(30406): {scan} scan report saved, to view run: maldet --report 250813-0257.30406 Aug 14 2025 03:53:34 hybrid1120 maldet(11275): {update} checking for available updates... Aug 14 2025 03:53:34 hybrid1120 maldet(11275): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 14 2025 03:53:34 hybrid1120 maldet(11275): {update} hashing install files and checking against server... Aug 14 2025 03:53:35 hybrid1120 maldet(11275): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 14 2025 03:53:35 hybrid1120 maldet(11275): {update} latest version already installed. Aug 14 2025 03:53:35 hybrid1120 maldet(11384): {sigup} performing signature update check... Aug 14 2025 03:53:35 hybrid1120 maldet(11384): {sigup} local signature set is version 202508101639180 Aug 14 2025 03:53:35 hybrid1120 maldet(11384): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 14 2025 03:53:36 hybrid1120 maldet(11384): {sigup} new signature set 202508132610702 available Aug 14 2025 03:53:36 hybrid1120 maldet(11384): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Aug 14 2025 03:53:37 hybrid1120 maldet(11384): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Aug 14 2025 03:53:37 hybrid1120 maldet(11384): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Aug 14 2025 03:53:37 hybrid1120 maldet(11384): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Aug 14 2025 03:53:37 hybrid1120 maldet(11384): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Aug 14 2025 03:53:38 hybrid1120 maldet(11384): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Aug 14 2025 03:53:38 hybrid1120 maldet(11384): {sigup} verified md5sum of maldet-sigpack.tgz Aug 14 2025 03:53:38 hybrid1120 maldet(11384): {sigup} unpacked and installed maldet-sigpack.tgz Aug 14 2025 03:53:38 hybrid1120 maldet(11384): {sigup} verified md5sum of maldet-clean.tgz Aug 14 2025 03:53:38 hybrid1120 maldet(11384): {sigup} unpacked and installed maldet-clean.tgz Aug 14 2025 03:53:38 hybrid1120 maldet(11384): {sigup} signature set update completed Aug 14 2025 03:53:38 hybrid1120 maldet(11384): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Aug 14 2025 03:53:38 hybrid1120 maldet(11596): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 14 2025 03:53:38 hybrid1120 maldet(11596): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Aug 14 2025 03:53:38 hybrid1120 maldet(11596): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Aug 14 2025 03:53:38 hybrid1120 maldet(11596): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 14 2025 03:53:38 hybrid1120 maldet(11596): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 14 2025 03:58:17 hybrid1120 maldet(11596): {scan} file list completed in 279s, found 1633 files... Aug 14 2025 03:58:17 hybrid1120 maldet(11596): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1633 files) in progress... Aug 14 2025 03:58:58 hybrid1120 maldet(11596): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1633, malware hits 0, cleaned hits 0, time 320s Aug 14 2025 03:58:58 hybrid1120 maldet(11596): {scan} scan report saved, to view run: maldet --report 250814-0353.11596 Aug 15 2025 03:56:37 hybrid1120 maldet(7116): {update} checking for available updates... Aug 15 2025 03:56:38 hybrid1120 maldet(7116): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 15 2025 03:56:38 hybrid1120 maldet(7116): {update} hashing install files and checking against server... Aug 15 2025 03:56:38 hybrid1120 maldet(7116): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 15 2025 03:56:38 hybrid1120 maldet(7116): {update} latest version already installed. Aug 15 2025 03:56:38 hybrid1120 maldet(7230): {sigup} performing signature update check... Aug 15 2025 03:56:38 hybrid1120 maldet(7230): {sigup} local signature set is version 202508132610702 Aug 15 2025 03:56:39 hybrid1120 maldet(7230): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 15 2025 03:56:39 hybrid1120 maldet(7230): {sigup} latest signature set already installed Aug 15 2025 03:56:39 hybrid1120 maldet(7320): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 15 2025 03:56:39 hybrid1120 maldet(7320): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Aug 15 2025 03:56:39 hybrid1120 maldet(7320): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Aug 15 2025 03:56:39 hybrid1120 maldet(7320): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 15 2025 03:56:39 hybrid1120 maldet(7320): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 15 2025 04:03:05 hybrid1120 maldet(7320): {scan} file list completed in 386s, found 950 files... Aug 15 2025 04:03:05 hybrid1120 maldet(7320): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (950 files) in progress... Aug 15 2025 04:03:36 hybrid1120 maldet(7320): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 950, malware hits 0, cleaned hits 0, time 417s Aug 15 2025 04:03:36 hybrid1120 maldet(7320): {scan} scan report saved, to view run: maldet --report 250815-0356.7320 Aug 16 2025 04:34:36 hybrid1120 maldet(21503): {update} checking for available updates... Aug 16 2025 04:34:36 hybrid1120 maldet(21503): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 16 2025 04:34:36 hybrid1120 maldet(21503): {update} hashing install files and checking against server... Aug 16 2025 04:34:37 hybrid1120 maldet(21503): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 16 2025 04:34:37 hybrid1120 maldet(21503): {update} latest version already installed. Aug 16 2025 04:34:37 hybrid1120 maldet(21613): {sigup} performing signature update check... Aug 16 2025 04:34:37 hybrid1120 maldet(21613): {sigup} local signature set is version 202508132610702 Aug 16 2025 04:34:37 hybrid1120 maldet(21613): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 16 2025 04:34:37 hybrid1120 maldet(21613): {sigup} latest signature set already installed Aug 16 2025 04:34:37 hybrid1120 maldet(21714): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 16 2025 04:34:38 hybrid1120 maldet(21714): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Aug 16 2025 04:34:38 hybrid1120 maldet(21714): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Aug 16 2025 04:34:38 hybrid1120 maldet(21714): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 16 2025 04:34:38 hybrid1120 maldet(21714): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 16 2025 04:38:26 hybrid1120 maldet(21714): {scan} file list completed in 228s, found 1758 files... Aug 16 2025 04:38:26 hybrid1120 maldet(21714): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1758 files) in progress... Aug 16 2025 04:39:14 hybrid1120 maldet(21714): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1758, malware hits 0, cleaned hits 0, time 277s Aug 16 2025 04:39:14 hybrid1120 maldet(21714): {scan} scan report saved, to view run: maldet --report 250816-0434.21714 Aug 17 2025 03:06:49 hybrid1120 maldet(4045): {update} checking for available updates... Aug 17 2025 03:06:49 hybrid1120 maldet(4045): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 17 2025 03:06:49 hybrid1120 maldet(4045): {update} hashing install files and checking against server... Aug 17 2025 03:06:50 hybrid1120 maldet(4045): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 17 2025 03:06:50 hybrid1120 maldet(4045): {update} latest version already installed. Aug 17 2025 03:06:50 hybrid1120 maldet(4155): {sigup} performing signature update check... Aug 17 2025 03:06:50 hybrid1120 maldet(4155): {sigup} local signature set is version 202508132610702 Aug 17 2025 03:06:50 hybrid1120 maldet(4155): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 17 2025 03:06:50 hybrid1120 maldet(4155): {sigup} latest signature set already installed Aug 17 2025 03:06:50 hybrid1120 maldet(4243): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 17 2025 03:06:51 hybrid1120 maldet(4243): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Aug 17 2025 03:06:51 hybrid1120 maldet(4243): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Aug 17 2025 03:06:51 hybrid1120 maldet(4243): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 17 2025 03:06:51 hybrid1120 maldet(4243): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 17 2025 03:12:20 hybrid1120 maldet(4243): {scan} file list completed in 329s, found 1617 files... Aug 17 2025 03:12:20 hybrid1120 maldet(4243): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1617 files) in progress... Aug 17 2025 03:13:03 hybrid1120 maldet(4243): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1617, malware hits 0, cleaned hits 0, time 373s Aug 17 2025 03:13:03 hybrid1120 maldet(4243): {scan} scan report saved, to view run: maldet --report 250817-0306.4243 Aug 18 2025 04:04:24 hybrid1120 maldet(2812): {update} checking for available updates... Aug 18 2025 04:04:24 hybrid1120 maldet(2812): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 18 2025 04:04:24 hybrid1120 maldet(2812): {update} hashing install files and checking against server... Aug 18 2025 04:04:25 hybrid1120 maldet(2812): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 18 2025 04:04:25 hybrid1120 maldet(2812): {update} latest version already installed. Aug 18 2025 04:04:25 hybrid1120 maldet(2922): {sigup} performing signature update check... Aug 18 2025 04:04:25 hybrid1120 maldet(2922): {sigup} local signature set is version 202508132610702 Aug 18 2025 04:04:25 hybrid1120 maldet(2922): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 18 2025 04:04:25 hybrid1120 maldet(2922): {sigup} latest signature set already installed Aug 18 2025 04:04:25 hybrid1120 maldet(3012): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 18 2025 04:04:25 hybrid1120 maldet(3012): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Aug 18 2025 04:04:25 hybrid1120 maldet(3012): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Aug 18 2025 04:04:25 hybrid1120 maldet(3012): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 18 2025 04:04:25 hybrid1120 maldet(3012): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 18 2025 04:08:43 hybrid1120 maldet(3012): {scan} file list completed in 258s, found 1808 files... Aug 18 2025 04:08:43 hybrid1120 maldet(3012): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1808 files) in progress... Aug 18 2025 04:09:30 hybrid1120 maldet(3012): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1808, malware hits 0, cleaned hits 0, time 305s Aug 18 2025 04:09:30 hybrid1120 maldet(3012): {scan} scan report saved, to view run: maldet --report 250818-0404.3012 Aug 19 2025 04:14:44 hybrid1120 maldet(8070): {update} checking for available updates... Aug 19 2025 04:14:45 hybrid1120 maldet(8070): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 19 2025 04:14:45 hybrid1120 maldet(8070): {update} hashing install files and checking against server... Aug 19 2025 04:14:45 hybrid1120 maldet(8070): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 19 2025 04:14:45 hybrid1120 maldet(8070): {update} latest version already installed. Aug 19 2025 04:14:45 hybrid1120 maldet(8179): {sigup} performing signature update check... Aug 19 2025 04:14:45 hybrid1120 maldet(8179): {sigup} local signature set is version 202508132610702 Aug 19 2025 04:14:46 hybrid1120 maldet(8179): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 19 2025 04:14:46 hybrid1120 maldet(8179): {sigup} latest signature set already installed Aug 19 2025 04:14:46 hybrid1120 maldet(8268): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 19 2025 04:14:46 hybrid1120 maldet(8268): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Aug 19 2025 04:14:46 hybrid1120 maldet(8268): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Aug 19 2025 04:14:46 hybrid1120 maldet(8268): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 19 2025 04:14:46 hybrid1120 maldet(8268): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 19 2025 04:20:24 hybrid1120 maldet(8268): {scan} file list completed in 338s, found 2175 files... Aug 19 2025 04:20:24 hybrid1120 maldet(8268): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2175 files) in progress... Aug 19 2025 04:21:36 hybrid1120 maldet(8268): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2175, malware hits 0, cleaned hits 0, time 410s Aug 19 2025 04:21:36 hybrid1120 maldet(8268): {scan} scan report saved, to view run: maldet --report 250819-0414.8268 Aug 20 2025 02:47:57 hybrid1120 maldet(6679): {update} checking for available updates... Aug 20 2025 02:47:58 hybrid1120 maldet(6679): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 20 2025 02:47:58 hybrid1120 maldet(6679): {update} hashing install files and checking against server... Aug 20 2025 02:47:58 hybrid1120 maldet(6679): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 20 2025 02:47:58 hybrid1120 maldet(6679): {update} latest version already installed. Aug 20 2025 02:47:58 hybrid1120 maldet(6790): {sigup} performing signature update check... Aug 20 2025 02:47:58 hybrid1120 maldet(6790): {sigup} local signature set is version 202508132610702 Aug 20 2025 02:47:58 hybrid1120 maldet(6790): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 20 2025 02:47:58 hybrid1120 maldet(6790): {sigup} new signature set error code: 520 available Aug 20 2025 02:47:58 hybrid1120 maldet(6790): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Aug 20 2025 02:48:00 hybrid1120 maldet(6790): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Aug 20 2025 02:48:00 hybrid1120 maldet(6790): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Aug 20 2025 02:48:00 hybrid1120 maldet(6790): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Aug 20 2025 02:48:00 hybrid1120 maldet(6790): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Aug 20 2025 02:48:01 hybrid1120 maldet(6790): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Aug 20 2025 02:48:01 hybrid1120 maldet(6790): {sigup} verified md5sum of maldet-sigpack.tgz Aug 20 2025 02:48:01 hybrid1120 maldet(6790): {sigup} unpacked and installed maldet-sigpack.tgz Aug 20 2025 02:48:01 hybrid1120 maldet(6790): {sigup} verified md5sum of maldet-clean.tgz Aug 20 2025 02:48:01 hybrid1120 maldet(6790): {sigup} unpacked and installed maldet-clean.tgz Aug 20 2025 02:48:01 hybrid1120 maldet(6790): {sigup} signature set update completed Aug 20 2025 02:48:01 hybrid1120 maldet(6790): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Aug 20 2025 02:48:01 hybrid1120 maldet(7015): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 20 2025 02:48:01 hybrid1120 maldet(7015): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Aug 20 2025 02:48:01 hybrid1120 maldet(7015): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Aug 20 2025 02:48:01 hybrid1120 maldet(7015): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 20 2025 02:48:02 hybrid1120 maldet(7015): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 20 2025 02:53:30 hybrid1120 maldet(7015): {scan} file list completed in 329s, found 1852 files... Aug 20 2025 02:53:30 hybrid1120 maldet(7015): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1852 files) in progress... Aug 20 2025 02:54:19 hybrid1120 maldet(7015): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1852, malware hits 0, cleaned hits 0, time 378s Aug 20 2025 02:54:19 hybrid1120 maldet(7015): {scan} scan report saved, to view run: maldet --report 250820-0248.7015 Aug 21 2025 03:21:08 hybrid1120 maldet(2454): {update} checking for available updates... Aug 21 2025 03:21:08 hybrid1120 maldet(2454): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 21 2025 03:21:08 hybrid1120 maldet(2454): {update} hashing install files and checking against server... Aug 21 2025 03:21:09 hybrid1120 maldet(2454): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 21 2025 03:21:09 hybrid1120 maldet(2454): {update} latest version already installed. Aug 21 2025 03:21:09 hybrid1120 maldet(2569): {sigup} performing signature update check... Aug 21 2025 03:21:09 hybrid1120 maldet(2569): {sigup} local signature set is version 20250819706470 Aug 21 2025 03:21:09 hybrid1120 maldet(2569): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 21 2025 03:21:09 hybrid1120 maldet(2569): {sigup} latest signature set already installed Aug 21 2025 03:21:09 hybrid1120 maldet(2663): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 21 2025 03:21:10 hybrid1120 maldet(2663): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Aug 21 2025 03:21:10 hybrid1120 maldet(2663): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Aug 21 2025 03:21:10 hybrid1120 maldet(2663): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 21 2025 03:21:10 hybrid1120 maldet(2663): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 21 2025 03:28:29 hybrid1120 maldet(2663): {scan} file list completed in 439s, found 1481 files... Aug 21 2025 03:28:29 hybrid1120 maldet(2663): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1481 files) in progress... Aug 21 2025 03:29:14 hybrid1120 maldet(2663): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1481, malware hits 0, cleaned hits 0, time 485s Aug 21 2025 03:29:14 hybrid1120 maldet(2663): {scan} scan report saved, to view run: maldet --report 250821-0321.2663 Aug 22 2025 03:36:42 hybrid1120 maldet(22876): {update} checking for available updates... Aug 22 2025 03:36:42 hybrid1120 maldet(22876): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 22 2025 03:36:42 hybrid1120 maldet(22876): {update} hashing install files and checking against server... Aug 22 2025 03:36:43 hybrid1120 maldet(22876): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 22 2025 03:36:43 hybrid1120 maldet(22876): {update} latest version already installed. Aug 22 2025 03:36:43 hybrid1120 maldet(22991): {sigup} performing signature update check... Aug 22 2025 03:36:43 hybrid1120 maldet(22991): {sigup} local signature set is version 20250819706470 Aug 22 2025 03:36:43 hybrid1120 maldet(22991): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 22 2025 03:36:43 hybrid1120 maldet(22991): {sigup} latest signature set already installed Aug 22 2025 03:36:44 hybrid1120 maldet(23079): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 22 2025 03:36:44 hybrid1120 maldet(23079): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Aug 22 2025 03:36:44 hybrid1120 maldet(23079): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Aug 22 2025 03:36:44 hybrid1120 maldet(23079): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 22 2025 03:36:44 hybrid1120 maldet(23079): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 22 2025 03:43:18 hybrid1120 maldet(23079): {scan} file list completed in 394s, found 1773 files... Aug 22 2025 03:43:18 hybrid1120 maldet(23079): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1773 files) in progress... Aug 22 2025 03:44:11 hybrid1120 maldet(23079): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1773, malware hits 0, cleaned hits 0, time 447s Aug 22 2025 03:44:11 hybrid1120 maldet(23079): {scan} scan report saved, to view run: maldet --report 250822-0336.23079 Aug 23 2025 03:30:12 hybrid1120 maldet(20866): {update} checking for available updates... Aug 23 2025 03:30:12 hybrid1120 maldet(20866): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 23 2025 03:30:12 hybrid1120 maldet(20866): {update} hashing install files and checking against server... Aug 23 2025 03:30:13 hybrid1120 maldet(20866): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 23 2025 03:30:13 hybrid1120 maldet(20866): {update} latest version already installed. Aug 23 2025 03:30:13 hybrid1120 maldet(21011): {sigup} performing signature update check... Aug 23 2025 03:30:13 hybrid1120 maldet(21011): {sigup} local signature set is version 20250819706470 Aug 23 2025 03:30:13 hybrid1120 maldet(21011): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 23 2025 03:30:13 hybrid1120 maldet(21011): {sigup} new signature set 20250822481358 available Aug 23 2025 03:30:13 hybrid1120 maldet(21011): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Aug 23 2025 03:30:14 hybrid1120 maldet(21011): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Aug 23 2025 03:30:15 hybrid1120 maldet(21011): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Aug 23 2025 03:30:15 hybrid1120 maldet(21011): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Aug 23 2025 03:30:16 hybrid1120 maldet(21011): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Aug 23 2025 03:30:16 hybrid1120 maldet(21011): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Aug 23 2025 03:30:16 hybrid1120 maldet(21011): {sigup} verified md5sum of maldet-sigpack.tgz Aug 23 2025 03:30:17 hybrid1120 maldet(21011): {sigup} unpacked and installed maldet-sigpack.tgz Aug 23 2025 03:30:17 hybrid1120 maldet(21011): {sigup} verified md5sum of maldet-clean.tgz Aug 23 2025 03:30:17 hybrid1120 maldet(21011): {sigup} unpacked and installed maldet-clean.tgz Aug 23 2025 03:30:17 hybrid1120 maldet(21011): {sigup} signature set update completed Aug 23 2025 03:30:17 hybrid1120 maldet(21011): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Aug 23 2025 03:30:17 hybrid1120 maldet(21247): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 23 2025 03:30:18 hybrid1120 maldet(21247): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Aug 23 2025 03:30:18 hybrid1120 maldet(21247): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Aug 23 2025 03:30:18 hybrid1120 maldet(21247): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 23 2025 03:30:18 hybrid1120 maldet(21247): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 23 2025 03:37:05 hybrid1120 maldet(21247): {scan} file list completed in 407s, found 1332 files... Aug 23 2025 03:37:05 hybrid1120 maldet(21247): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1332 files) in progress... Aug 23 2025 03:37:44 hybrid1120 maldet(21247): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1332, malware hits 0, cleaned hits 0, time 447s Aug 23 2025 03:37:44 hybrid1120 maldet(21247): {scan} scan report saved, to view run: maldet --report 250823-0330.21247 Aug 24 2025 03:34:21 hybrid1120 maldet(24254): {update} checking for available updates... Aug 24 2025 03:34:21 hybrid1120 maldet(24254): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 24 2025 03:34:21 hybrid1120 maldet(24254): {update} hashing install files and checking against server... Aug 24 2025 03:34:22 hybrid1120 maldet(24254): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 24 2025 03:34:22 hybrid1120 maldet(24254): {update} latest version already installed. Aug 24 2025 03:34:22 hybrid1120 maldet(24367): {sigup} performing signature update check... Aug 24 2025 03:34:22 hybrid1120 maldet(24367): {sigup} local signature set is version 20250822481358 Aug 24 2025 03:34:22 hybrid1120 maldet(24367): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 24 2025 03:34:22 hybrid1120 maldet(24367): {sigup} latest signature set already installed Aug 24 2025 03:34:22 hybrid1120 maldet(24456): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 24 2025 03:34:23 hybrid1120 maldet(24456): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Aug 24 2025 03:34:23 hybrid1120 maldet(24456): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Aug 24 2025 03:34:23 hybrid1120 maldet(24456): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 24 2025 03:34:23 hybrid1120 maldet(24456): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 24 2025 03:40:11 hybrid1120 maldet(24456): {scan} file list completed in 348s, found 1708 files... Aug 24 2025 03:40:11 hybrid1120 maldet(24456): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1708 files) in progress... Aug 24 2025 03:40:57 hybrid1120 maldet(24456): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1708, malware hits 0, cleaned hits 0, time 395s Aug 24 2025 03:40:57 hybrid1120 maldet(24456): {scan} scan report saved, to view run: maldet --report 250824-0334.24456 Aug 25 2025 04:11:32 hybrid1120 maldet(27172): {update} checking for available updates... Aug 25 2025 04:11:32 hybrid1120 maldet(27172): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 25 2025 04:11:32 hybrid1120 maldet(27172): {update} hashing install files and checking against server... Aug 25 2025 04:11:33 hybrid1120 maldet(27172): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 25 2025 04:11:33 hybrid1120 maldet(27172): {update} latest version already installed. Aug 25 2025 04:11:33 hybrid1120 maldet(27285): {sigup} performing signature update check... Aug 25 2025 04:11:33 hybrid1120 maldet(27285): {sigup} local signature set is version 20250822481358 Aug 25 2025 04:11:34 hybrid1120 maldet(27285): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 25 2025 04:11:34 hybrid1120 maldet(27285): {sigup} latest signature set already installed Aug 25 2025 04:11:34 hybrid1120 maldet(27375): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 25 2025 04:11:34 hybrid1120 maldet(27375): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Aug 25 2025 04:11:34 hybrid1120 maldet(27375): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Aug 25 2025 04:11:34 hybrid1120 maldet(27375): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 25 2025 04:11:34 hybrid1120 maldet(27375): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 25 2025 04:17:19 hybrid1120 maldet(27375): {scan} file list completed in 345s, found 1568 files... Aug 25 2025 04:17:19 hybrid1120 maldet(27375): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1568 files) in progress... Aug 25 2025 04:18:02 hybrid1120 maldet(27375): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1568, malware hits 0, cleaned hits 0, time 388s Aug 25 2025 04:18:02 hybrid1120 maldet(27375): {scan} scan report saved, to view run: maldet --report 250825-0411.27375 Aug 26 2025 03:34:14 hybrid1120 maldet(6510): {update} checking for available updates... Aug 26 2025 03:34:15 hybrid1120 maldet(6510): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 26 2025 03:34:15 hybrid1120 maldet(6510): {update} hashing install files and checking against server... Aug 26 2025 03:34:15 hybrid1120 maldet(6510): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 26 2025 03:34:15 hybrid1120 maldet(6510): {update} latest version already installed. Aug 26 2025 03:34:15 hybrid1120 maldet(6637): {sigup} performing signature update check... Aug 26 2025 03:34:15 hybrid1120 maldet(6637): {sigup} local signature set is version 20250822481358 Aug 26 2025 03:34:16 hybrid1120 maldet(6637): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 26 2025 03:34:16 hybrid1120 maldet(6637): {sigup} new signature set 202508251454227 available Aug 26 2025 03:34:16 hybrid1120 maldet(6637): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Aug 26 2025 03:34:17 hybrid1120 maldet(6637): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Aug 26 2025 03:34:18 hybrid1120 maldet(6637): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Aug 26 2025 03:34:18 hybrid1120 maldet(6637): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Aug 26 2025 03:34:18 hybrid1120 maldet(6637): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Aug 26 2025 03:34:19 hybrid1120 maldet(6637): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Aug 26 2025 03:34:19 hybrid1120 maldet(6637): {sigup} verified md5sum of maldet-sigpack.tgz Aug 26 2025 03:34:19 hybrid1120 maldet(6637): {sigup} unpacked and installed maldet-sigpack.tgz Aug 26 2025 03:34:19 hybrid1120 maldet(6637): {sigup} verified md5sum of maldet-clean.tgz Aug 26 2025 03:34:19 hybrid1120 maldet(6637): {sigup} unpacked and installed maldet-clean.tgz Aug 26 2025 03:34:19 hybrid1120 maldet(6637): {sigup} signature set update completed Aug 26 2025 03:34:19 hybrid1120 maldet(6637): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Aug 26 2025 03:34:19 hybrid1120 maldet(6866): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 26 2025 03:34:19 hybrid1120 maldet(6866): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Aug 26 2025 03:34:19 hybrid1120 maldet(6866): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Aug 26 2025 03:34:19 hybrid1120 maldet(6866): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 26 2025 03:34:19 hybrid1120 maldet(6866): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 26 2025 03:39:51 hybrid1120 maldet(6866): {scan} file list completed in 332s, found 1922 files... Aug 26 2025 03:39:51 hybrid1120 maldet(6866): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1922 files) in progress... Aug 26 2025 03:40:52 hybrid1120 maldet(6866): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1922, malware hits 0, cleaned hits 0, time 393s Aug 26 2025 03:40:52 hybrid1120 maldet(6866): {scan} scan report saved, to view run: maldet --report 250826-0334.6866 Aug 27 2025 02:43:00 hybrid1120 maldet(19207): {update} checking for available updates... Aug 27 2025 02:43:01 hybrid1120 maldet(19207): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 27 2025 02:43:01 hybrid1120 maldet(19207): {update} hashing install files and checking against server... Aug 27 2025 02:43:02 hybrid1120 maldet(19207): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 27 2025 02:43:02 hybrid1120 maldet(19207): {update} latest version already installed. Aug 27 2025 02:43:02 hybrid1120 maldet(19342): {sigup} performing signature update check... Aug 27 2025 02:43:02 hybrid1120 maldet(19342): {sigup} local signature set is version 202508251454227 Aug 27 2025 02:43:02 hybrid1120 maldet(19342): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 27 2025 02:43:02 hybrid1120 maldet(19342): {sigup} latest signature set already installed Aug 27 2025 02:43:02 hybrid1120 maldet(19431): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 27 2025 02:43:03 hybrid1120 maldet(19431): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Aug 27 2025 02:43:03 hybrid1120 maldet(19431): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Aug 27 2025 02:43:03 hybrid1120 maldet(19431): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 27 2025 02:43:03 hybrid1120 maldet(19431): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 27 2025 02:50:43 hybrid1120 maldet(19431): {scan} file list completed in 460s, found 1905 files... Aug 27 2025 02:50:43 hybrid1120 maldet(19431): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1905 files) in progress... Aug 27 2025 02:51:51 hybrid1120 maldet(19431): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1905, malware hits 0, cleaned hits 0, time 529s Aug 27 2025 02:51:51 hybrid1120 maldet(19431): {scan} scan report saved, to view run: maldet --report 250827-0243.19431 Aug 28 2025 04:26:56 hybrid1120 maldet(15103): {update} checking for available updates... Aug 28 2025 04:26:57 hybrid1120 maldet(15103): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 28 2025 04:26:57 hybrid1120 maldet(15103): {update} hashing install files and checking against server... Aug 28 2025 04:26:57 hybrid1120 maldet(15103): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 28 2025 04:26:57 hybrid1120 maldet(15103): {update} latest version already installed. Aug 28 2025 04:26:57 hybrid1120 maldet(15217): {sigup} performing signature update check... Aug 28 2025 04:26:57 hybrid1120 maldet(15217): {sigup} local signature set is version 202508251454227 Aug 28 2025 04:26:58 hybrid1120 maldet(15217): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 28 2025 04:26:58 hybrid1120 maldet(15217): {sigup} latest signature set already installed Aug 28 2025 04:26:58 hybrid1120 maldet(15308): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 28 2025 04:26:58 hybrid1120 maldet(15308): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Aug 28 2025 04:26:58 hybrid1120 maldet(15308): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Aug 28 2025 04:26:58 hybrid1120 maldet(15308): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 28 2025 04:26:58 hybrid1120 maldet(15308): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 28 2025 04:32:42 hybrid1120 maldet(15308): {scan} file list completed in 344s, found 1436 files... Aug 28 2025 04:32:42 hybrid1120 maldet(15308): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1436 files) in progress... Aug 28 2025 04:33:25 hybrid1120 maldet(15308): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1436, malware hits 0, cleaned hits 0, time 387s Aug 28 2025 04:33:25 hybrid1120 maldet(15308): {scan} scan report saved, to view run: maldet --report 250828-0426.15308 Aug 29 2025 04:48:40 hybrid1120 maldet(22256): {update} checking for available updates... Aug 29 2025 04:48:41 hybrid1120 maldet(22256): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 29 2025 04:48:41 hybrid1120 maldet(22256): {update} hashing install files and checking against server... Aug 29 2025 04:48:42 hybrid1120 maldet(22256): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 29 2025 04:48:42 hybrid1120 maldet(22256): {update} latest version already installed. Aug 29 2025 04:48:42 hybrid1120 maldet(22366): {sigup} performing signature update check... Aug 29 2025 04:48:42 hybrid1120 maldet(22366): {sigup} local signature set is version 202508251454227 Aug 29 2025 04:48:42 hybrid1120 maldet(22366): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 29 2025 04:48:42 hybrid1120 maldet(22366): {sigup} new signature set 202508282426884 available Aug 29 2025 04:48:42 hybrid1120 maldet(22366): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Aug 29 2025 04:48:43 hybrid1120 maldet(22366): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Aug 29 2025 04:48:44 hybrid1120 maldet(22366): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Aug 29 2025 04:48:44 hybrid1120 maldet(22366): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Aug 29 2025 04:48:44 hybrid1120 maldet(22366): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Aug 29 2025 04:48:45 hybrid1120 maldet(22366): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Aug 29 2025 04:48:45 hybrid1120 maldet(22366): {sigup} verified md5sum of maldet-sigpack.tgz Aug 29 2025 04:48:45 hybrid1120 maldet(22366): {sigup} unpacked and installed maldet-sigpack.tgz Aug 29 2025 04:48:45 hybrid1120 maldet(22366): {sigup} verified md5sum of maldet-clean.tgz Aug 29 2025 04:48:45 hybrid1120 maldet(22366): {sigup} unpacked and installed maldet-clean.tgz Aug 29 2025 04:48:45 hybrid1120 maldet(22366): {sigup} signature set update completed Aug 29 2025 04:48:45 hybrid1120 maldet(22366): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Aug 29 2025 04:48:45 hybrid1120 maldet(22601): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 29 2025 04:48:46 hybrid1120 maldet(22601): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Aug 29 2025 04:48:46 hybrid1120 maldet(22601): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Aug 29 2025 04:48:46 hybrid1120 maldet(22601): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 29 2025 04:48:46 hybrid1120 maldet(22601): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 29 2025 04:54:18 hybrid1120 maldet(22601): {scan} file list completed in 332s, found 2158 files... Aug 29 2025 04:54:18 hybrid1120 maldet(22601): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2158 files) in progress... Aug 29 2025 04:55:26 hybrid1120 maldet(22601): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2158, malware hits 0, cleaned hits 0, time 401s Aug 29 2025 04:55:26 hybrid1120 maldet(22601): {scan} scan report saved, to view run: maldet --report 250829-0448.22601 Aug 30 2025 03:46:14 hybrid1120 maldet(22059): {update} checking for available updates... Aug 30 2025 03:46:15 hybrid1120 maldet(22059): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 30 2025 03:46:15 hybrid1120 maldet(22059): {update} hashing install files and checking against server... Aug 30 2025 03:46:15 hybrid1120 maldet(22059): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 30 2025 03:46:15 hybrid1120 maldet(22059): {update} latest version already installed. Aug 30 2025 03:46:15 hybrid1120 maldet(22170): {sigup} performing signature update check... Aug 30 2025 03:46:15 hybrid1120 maldet(22170): {sigup} local signature set is version 202508282426884 Aug 30 2025 03:46:16 hybrid1120 maldet(22170): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 30 2025 03:46:16 hybrid1120 maldet(22170): {sigup} latest signature set already installed Aug 30 2025 03:46:16 hybrid1120 maldet(22260): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 30 2025 03:46:16 hybrid1120 maldet(22260): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Aug 30 2025 03:46:16 hybrid1120 maldet(22260): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Aug 30 2025 03:46:16 hybrid1120 maldet(22260): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 30 2025 03:46:16 hybrid1120 maldet(22260): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 30 2025 03:51:37 hybrid1120 maldet(22260): {scan} file list completed in 321s, found 2135 files... Aug 30 2025 03:51:37 hybrid1120 maldet(22260): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2135 files) in progress... Aug 30 2025 03:52:32 hybrid1120 maldet(22260): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2135, malware hits 0, cleaned hits 0, time 376s Aug 30 2025 03:52:32 hybrid1120 maldet(22260): {scan} scan report saved, to view run: maldet --report 250830-0346.22260 Aug 31 2025 03:59:11 hybrid1120 maldet(31319): {update} checking for available updates... Aug 31 2025 03:59:11 hybrid1120 maldet(31319): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 31 2025 03:59:11 hybrid1120 maldet(31319): {update} hashing install files and checking against server... Aug 31 2025 03:59:12 hybrid1120 maldet(31319): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 31 2025 03:59:12 hybrid1120 maldet(31319): {update} latest version already installed. Aug 31 2025 03:59:12 hybrid1120 maldet(31433): {sigup} performing signature update check... Aug 31 2025 03:59:12 hybrid1120 maldet(31433): {sigup} local signature set is version 202508282426884 Aug 31 2025 03:59:13 hybrid1120 maldet(31433): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 31 2025 03:59:13 hybrid1120 maldet(31433): {sigup} latest signature set already installed Aug 31 2025 03:59:13 hybrid1120 maldet(31524): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 31 2025 03:59:13 hybrid1120 maldet(31524): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Aug 31 2025 03:59:13 hybrid1120 maldet(31524): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Aug 31 2025 03:59:13 hybrid1120 maldet(31524): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 31 2025 03:59:13 hybrid1120 maldet(31524): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 31 2025 04:06:11 hybrid1120 maldet(31524): {scan} file list completed in 418s, found 1929 files... Aug 31 2025 04:06:11 hybrid1120 maldet(31524): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1929 files) in progress... Aug 31 2025 04:07:07 hybrid1120 maldet(31524): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1929, malware hits 0, cleaned hits 0, time 474s Aug 31 2025 04:07:07 hybrid1120 maldet(31524): {scan} scan report saved, to view run: maldet --report 250831-0359.31524 Sep 01 2025 03:27:56 hybrid1120 maldet(15235): {update} checking for available updates... Sep 01 2025 03:27:56 hybrid1120 maldet(15235): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 01 2025 03:27:56 hybrid1120 maldet(15235): {update} hashing install files and checking against server... Sep 01 2025 03:27:57 hybrid1120 maldet(15235): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 01 2025 03:27:57 hybrid1120 maldet(15235): {update} latest version already installed. Sep 01 2025 03:27:57 hybrid1120 maldet(15346): {sigup} performing signature update check... Sep 01 2025 03:27:57 hybrid1120 maldet(15346): {sigup} local signature set is version 202508282426884 Sep 01 2025 03:27:57 hybrid1120 maldet(15346): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 01 2025 03:27:57 hybrid1120 maldet(15346): {sigup} new signature set 202508313398476 available Sep 01 2025 03:27:57 hybrid1120 maldet(15346): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 01 2025 03:27:59 hybrid1120 maldet(15346): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 01 2025 03:27:59 hybrid1120 maldet(15346): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Sep 01 2025 03:27:59 hybrid1120 maldet(15346): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 01 2025 03:27:59 hybrid1120 maldet(15346): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 01 2025 03:28:00 hybrid1120 maldet(15346): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Sep 01 2025 03:28:00 hybrid1120 maldet(15346): {sigup} verified md5sum of maldet-sigpack.tgz Sep 01 2025 03:28:00 hybrid1120 maldet(15346): {sigup} unpacked and installed maldet-sigpack.tgz Sep 01 2025 03:28:00 hybrid1120 maldet(15346): {sigup} verified md5sum of maldet-clean.tgz Sep 01 2025 03:28:00 hybrid1120 maldet(15346): {sigup} unpacked and installed maldet-clean.tgz Sep 01 2025 03:28:00 hybrid1120 maldet(15346): {sigup} signature set update completed Sep 01 2025 03:28:00 hybrid1120 maldet(15346): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 01 2025 03:28:01 hybrid1120 maldet(15578): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 01 2025 03:28:01 hybrid1120 maldet(15578): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 01 2025 03:28:01 hybrid1120 maldet(15578): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 01 2025 03:28:01 hybrid1120 maldet(15578): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 01 2025 03:28:01 hybrid1120 maldet(15578): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 01 2025 03:34:22 hybrid1120 maldet(15578): {scan} file list completed in 381s, found 8793 files... Sep 01 2025 03:34:22 hybrid1120 maldet(15578): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (8793 files) in progress... Sep 01 2025 03:40:10 hybrid1120 maldet(15578): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 8793, malware hits 0, cleaned hits 0, time 729s Sep 01 2025 03:40:10 hybrid1120 maldet(15578): {scan} scan report saved, to view run: maldet --report 250901-0328.15578 Sep 02 2025 03:20:18 hybrid1120 maldet(5151): {update} checking for available updates... Sep 02 2025 03:20:19 hybrid1120 maldet(5151): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 02 2025 03:20:19 hybrid1120 maldet(5151): {update} hashing install files and checking against server... Sep 02 2025 03:20:19 hybrid1120 maldet(5151): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 02 2025 03:20:19 hybrid1120 maldet(5151): {update} latest version already installed. Sep 02 2025 03:20:19 hybrid1120 maldet(5300): {sigup} performing signature update check... Sep 02 2025 03:20:19 hybrid1120 maldet(5300): {sigup} local signature set is version 202508313398476 Sep 02 2025 03:20:20 hybrid1120 maldet(5300): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 02 2025 03:20:20 hybrid1120 maldet(5300): {sigup} new signature set 20250901485511 available Sep 02 2025 03:20:20 hybrid1120 maldet(5300): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 02 2025 03:20:21 hybrid1120 maldet(5300): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 02 2025 03:20:22 hybrid1120 maldet(5300): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Sep 02 2025 03:20:22 hybrid1120 maldet(5300): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 02 2025 03:20:22 hybrid1120 maldet(5300): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 02 2025 03:20:23 hybrid1120 maldet(5300): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Sep 02 2025 03:20:23 hybrid1120 maldet(5300): {sigup} verified md5sum of maldet-sigpack.tgz Sep 02 2025 03:20:23 hybrid1120 maldet(5300): {sigup} unpacked and installed maldet-sigpack.tgz Sep 02 2025 03:20:23 hybrid1120 maldet(5300): {sigup} verified md5sum of maldet-clean.tgz Sep 02 2025 03:20:23 hybrid1120 maldet(5300): {sigup} unpacked and installed maldet-clean.tgz Sep 02 2025 03:20:23 hybrid1120 maldet(5300): {sigup} signature set update completed Sep 02 2025 03:20:23 hybrid1120 maldet(5300): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 02 2025 03:20:23 hybrid1120 maldet(5555): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 02 2025 03:20:24 hybrid1120 maldet(5555): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 02 2025 03:20:24 hybrid1120 maldet(5555): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 02 2025 03:20:24 hybrid1120 maldet(5555): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 02 2025 03:20:24 hybrid1120 maldet(5555): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 02 2025 03:27:58 hybrid1120 maldet(5555): {scan} file list completed in 454s, found 1718 files... Sep 02 2025 03:27:58 hybrid1120 maldet(5555): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1718 files) in progress... Sep 02 2025 03:28:49 hybrid1120 maldet(5555): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1718, malware hits 0, cleaned hits 0, time 506s Sep 02 2025 03:28:49 hybrid1120 maldet(5555): {scan} scan report saved, to view run: maldet --report 250902-0320.5555 Sep 03 2025 03:49:42 hybrid1120 maldet(17500): {update} checking for available updates... Sep 03 2025 03:49:43 hybrid1120 maldet(17500): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 03 2025 03:49:43 hybrid1120 maldet(17500): {update} hashing install files and checking against server... Sep 03 2025 03:49:43 hybrid1120 maldet(17500): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 03 2025 03:49:43 hybrid1120 maldet(17500): {update} latest version already installed. Sep 03 2025 03:49:43 hybrid1120 maldet(17610): {sigup} performing signature update check... Sep 03 2025 03:49:43 hybrid1120 maldet(17610): {sigup} local signature set is version 20250901485511 Sep 03 2025 03:49:44 hybrid1120 maldet(17610): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 03 2025 03:49:44 hybrid1120 maldet(17610): {sigup} latest signature set already installed Sep 03 2025 03:49:44 hybrid1120 maldet(17703): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 03 2025 03:49:44 hybrid1120 maldet(17703): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 03 2025 03:49:44 hybrid1120 maldet(17703): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 03 2025 03:49:44 hybrid1120 maldet(17703): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 03 2025 03:49:44 hybrid1120 maldet(17703): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 03 2025 03:54:38 hybrid1120 maldet(17703): {scan} file list completed in 294s, found 1655 files... Sep 03 2025 03:54:38 hybrid1120 maldet(17703): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1655 files) in progress... Sep 03 2025 03:55:27 hybrid1120 maldet(17703): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1655, malware hits 0, cleaned hits 0, time 343s Sep 03 2025 03:55:27 hybrid1120 maldet(17703): {scan} scan report saved, to view run: maldet --report 250903-0349.17703 Sep 04 2025 04:55:30 hybrid1120 maldet(2259): {update} checking for available updates... Sep 04 2025 04:55:30 hybrid1120 maldet(2259): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 04 2025 04:55:30 hybrid1120 maldet(2259): {update} hashing install files and checking against server... Sep 04 2025 04:55:31 hybrid1120 maldet(2259): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 04 2025 04:55:31 hybrid1120 maldet(2259): {update} latest version already installed. Sep 04 2025 04:55:31 hybrid1120 maldet(2376): {sigup} performing signature update check... Sep 04 2025 04:55:31 hybrid1120 maldet(2376): {sigup} local signature set is version 20250901485511 Sep 04 2025 04:55:31 hybrid1120 maldet(2376): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 04 2025 04:55:31 hybrid1120 maldet(2376): {sigup} latest signature set already installed Sep 04 2025 04:55:32 hybrid1120 maldet(2489): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 04 2025 04:55:32 hybrid1120 maldet(2489): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 04 2025 04:55:32 hybrid1120 maldet(2489): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 04 2025 04:55:32 hybrid1120 maldet(2489): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 04 2025 04:55:32 hybrid1120 maldet(2489): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 04 2025 04:59:41 hybrid1120 maldet(2489): {scan} file list completed in 249s, found 1507 files... Sep 04 2025 04:59:41 hybrid1120 maldet(2489): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1507 files) in progress... Sep 04 2025 05:00:31 hybrid1120 maldet(2489): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1507, malware hits 0, cleaned hits 0, time 299s Sep 04 2025 05:00:31 hybrid1120 maldet(2489): {scan} scan report saved, to view run: maldet --report 250904-0455.2489 Sep 05 2025 04:28:12 hybrid1120 maldet(12588): {update} checking for available updates... Sep 05 2025 04:28:33 hybrid1120 maldet(12588): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 05 2025 04:28:33 hybrid1120 maldet(12588): {update} hashing install files and checking against server... Sep 05 2025 04:28:58 hybrid1120 maldet(12588): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 05 2025 04:28:58 hybrid1120 maldet(12588): {update} latest version already installed. Sep 05 2025 04:28:58 hybrid1120 maldet(13101): {sigup} performing signature update check... Sep 05 2025 04:28:58 hybrid1120 maldet(13101): {sigup} local signature set is version 20250901485511 Sep 05 2025 04:29:47 hybrid1120 maldet(13101): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 05 2025 04:29:47 hybrid1120 maldet(13101): {sigup} new signature set 202509041456714 available Sep 05 2025 04:29:47 hybrid1120 maldet(13101): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 05 2025 04:30:07 hybrid1120 maldet(13101): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 05 2025 04:30:26 hybrid1120 maldet(13101): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Sep 05 2025 04:30:26 hybrid1120 maldet(13101): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 05 2025 04:31:16 hybrid1120 maldet(13101): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 05 2025 04:31:36 hybrid1120 maldet(13101): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Sep 05 2025 04:31:36 hybrid1120 maldet(13101): {sigup} unable to verify md5sum of maldet-sigpack.tgz, please try again or contact proj@rfxn.com Sep 05 2025 04:31:36 hybrid1120 maldet(13101): {sigup} unable to verify md5sum of maldet-clean.tgz, please try again or contact proj@rfxn.com Sep 05 2025 04:31:36 hybrid1120 maldet(15370): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 05 2025 04:31:37 hybrid1120 maldet(15370): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 05 2025 04:31:37 hybrid1120 maldet(15370): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 05 2025 04:31:37 hybrid1120 maldet(15370): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 05 2025 04:31:37 hybrid1120 maldet(15370): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 05 2025 04:36:33 hybrid1120 maldet(15370): {scan} file list completed in 296s, found 1362 files... Sep 05 2025 04:36:34 hybrid1120 maldet(15370): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1362 files) in progress... Sep 05 2025 04:37:25 hybrid1120 maldet(15370): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1362, malware hits 0, cleaned hits 0, time 349s Sep 05 2025 04:37:25 hybrid1120 maldet(15370): {scan} scan report saved, to view run: maldet --report 250905-0431.15370 Sep 06 2025 03:50:34 hybrid1120 maldet(4008): {update} checking for available updates... Sep 06 2025 03:50:34 hybrid1120 maldet(4008): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 06 2025 03:50:34 hybrid1120 maldet(4008): {update} hashing install files and checking against server... Sep 06 2025 03:50:35 hybrid1120 maldet(4008): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 06 2025 03:50:35 hybrid1120 maldet(4008): {update} latest version already installed. Sep 06 2025 03:50:35 hybrid1120 maldet(4141): {sigup} performing signature update check... Sep 06 2025 03:50:35 hybrid1120 maldet(4141): {sigup} local signature set is version 20250901485511 Sep 06 2025 03:50:35 hybrid1120 maldet(4141): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 06 2025 03:50:35 hybrid1120 maldet(4141): {sigup} new signature set 202509041456714 available Sep 06 2025 03:50:35 hybrid1120 maldet(4141): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 06 2025 03:50:36 hybrid1120 maldet(4141): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 06 2025 03:50:37 hybrid1120 maldet(4141): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Sep 06 2025 03:50:37 hybrid1120 maldet(4141): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 06 2025 03:50:37 hybrid1120 maldet(4141): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 06 2025 03:50:38 hybrid1120 maldet(4141): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Sep 06 2025 03:50:38 hybrid1120 maldet(4141): {sigup} verified md5sum of maldet-sigpack.tgz Sep 06 2025 03:50:38 hybrid1120 maldet(4141): {sigup} unpacked and installed maldet-sigpack.tgz Sep 06 2025 03:50:38 hybrid1120 maldet(4141): {sigup} verified md5sum of maldet-clean.tgz Sep 06 2025 03:50:39 hybrid1120 maldet(4141): {sigup} unpacked and installed maldet-clean.tgz Sep 06 2025 03:50:39 hybrid1120 maldet(4141): {sigup} signature set update completed Sep 06 2025 03:50:39 hybrid1120 maldet(4141): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 06 2025 03:50:39 hybrid1120 maldet(4354): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 06 2025 03:50:39 hybrid1120 maldet(4354): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 06 2025 03:50:39 hybrid1120 maldet(4354): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 06 2025 03:50:39 hybrid1120 maldet(4354): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 06 2025 03:50:39 hybrid1120 maldet(4354): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 06 2025 03:57:31 hybrid1120 maldet(4354): {scan} file list completed in 412s, found 1331 files... Sep 06 2025 03:57:31 hybrid1120 maldet(4354): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1331 files) in progress... Sep 06 2025 03:58:15 hybrid1120 maldet(4354): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1331, malware hits 0, cleaned hits 0, time 456s Sep 06 2025 03:58:15 hybrid1120 maldet(4354): {scan} scan report saved, to view run: maldet --report 250906-0350.4354 Sep 07 2025 03:58:05 hybrid1120 maldet(9264): {update} checking for available updates... Sep 07 2025 03:58:05 hybrid1120 maldet(9264): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 07 2025 03:58:05 hybrid1120 maldet(9264): {update} hashing install files and checking against server... Sep 07 2025 03:58:06 hybrid1120 maldet(9264): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 07 2025 03:58:06 hybrid1120 maldet(9264): {update} latest version already installed. Sep 07 2025 03:58:06 hybrid1120 maldet(9382): {sigup} performing signature update check... Sep 07 2025 03:58:06 hybrid1120 maldet(9382): {sigup} local signature set is version 202509041456714 Sep 07 2025 03:58:07 hybrid1120 maldet(9382): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 07 2025 03:58:07 hybrid1120 maldet(9382): {sigup} latest signature set already installed Sep 07 2025 03:58:07 hybrid1120 maldet(9473): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 07 2025 03:58:07 hybrid1120 maldet(9473): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 07 2025 03:58:07 hybrid1120 maldet(9473): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 07 2025 03:58:07 hybrid1120 maldet(9473): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 07 2025 03:58:07 hybrid1120 maldet(9473): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 07 2025 04:06:25 hybrid1120 maldet(9473): {scan} file list completed in 498s, found 2198 files... Sep 07 2025 04:06:25 hybrid1120 maldet(9473): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2198 files) in progress... Sep 07 2025 04:07:32 hybrid1120 maldet(9473): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2198, malware hits 0, cleaned hits 0, time 565s Sep 07 2025 04:07:32 hybrid1120 maldet(9473): {scan} scan report saved, to view run: maldet --report 250907-0358.9473 Sep 08 2025 03:05:59 hybrid1120 maldet(16231): {update} checking for available updates... Sep 08 2025 03:05:59 hybrid1120 maldet(16231): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 08 2025 03:05:59 hybrid1120 maldet(16231): {update} hashing install files and checking against server... Sep 08 2025 03:06:00 hybrid1120 maldet(16231): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 08 2025 03:06:00 hybrid1120 maldet(16231): {update} latest version already installed. Sep 08 2025 03:06:00 hybrid1120 maldet(16359): {sigup} performing signature update check... Sep 08 2025 03:06:00 hybrid1120 maldet(16359): {sigup} local signature set is version 202509041456714 Sep 08 2025 03:06:00 hybrid1120 maldet(16359): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 08 2025 03:06:00 hybrid1120 maldet(16359): {sigup} new signature set 202509072429773 available Sep 08 2025 03:06:00 hybrid1120 maldet(16359): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 08 2025 03:06:01 hybrid1120 maldet(16359): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 08 2025 03:06:01 hybrid1120 maldet(16359): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Sep 08 2025 03:06:01 hybrid1120 maldet(16359): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 08 2025 03:06:02 hybrid1120 maldet(16359): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 08 2025 03:06:02 hybrid1120 maldet(16359): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Sep 08 2025 03:06:02 hybrid1120 maldet(16359): {sigup} verified md5sum of maldet-sigpack.tgz Sep 08 2025 03:06:02 hybrid1120 maldet(16359): {sigup} unpacked and installed maldet-sigpack.tgz Sep 08 2025 03:06:02 hybrid1120 maldet(16359): {sigup} verified md5sum of maldet-clean.tgz Sep 08 2025 03:06:03 hybrid1120 maldet(16359): {sigup} unpacked and installed maldet-clean.tgz Sep 08 2025 03:06:03 hybrid1120 maldet(16359): {sigup} signature set update completed Sep 08 2025 03:06:03 hybrid1120 maldet(16359): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 08 2025 03:06:03 hybrid1120 maldet(16582): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 08 2025 03:06:03 hybrid1120 maldet(16582): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 08 2025 03:06:03 hybrid1120 maldet(16582): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 08 2025 03:06:03 hybrid1120 maldet(16582): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 08 2025 03:06:03 hybrid1120 maldet(16582): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 08 2025 03:12:31 hybrid1120 maldet(16582): {scan} file list completed in 388s, found 1801 files... Sep 08 2025 03:12:31 hybrid1120 maldet(16582): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1801 files) in progress... Sep 08 2025 03:13:19 hybrid1120 maldet(16582): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1801, malware hits 0, cleaned hits 0, time 436s Sep 08 2025 03:13:19 hybrid1120 maldet(16582): {scan} scan report saved, to view run: maldet --report 250908-0306.16582 Sep 09 2025 04:33:36 hybrid1120 maldet(22358): {update} checking for available updates... Sep 09 2025 04:33:37 hybrid1120 maldet(22358): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 09 2025 04:33:37 hybrid1120 maldet(22358): {update} hashing install files and checking against server... Sep 09 2025 04:33:37 hybrid1120 maldet(22358): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 09 2025 04:33:37 hybrid1120 maldet(22358): {update} latest version already installed. Sep 09 2025 04:33:37 hybrid1120 maldet(22474): {sigup} performing signature update check... Sep 09 2025 04:33:37 hybrid1120 maldet(22474): {sigup} local signature set is version 202509072429773 Sep 09 2025 04:33:38 hybrid1120 maldet(22474): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 09 2025 04:33:38 hybrid1120 maldet(22474): {sigup} latest signature set already installed Sep 09 2025 04:33:38 hybrid1120 maldet(22563): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 09 2025 04:33:38 hybrid1120 maldet(22563): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 09 2025 04:33:38 hybrid1120 maldet(22563): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 09 2025 04:33:38 hybrid1120 maldet(22563): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 09 2025 04:33:38 hybrid1120 maldet(22563): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 09 2025 04:39:26 hybrid1120 maldet(22563): {scan} file list completed in 348s, found 1707 files... Sep 09 2025 04:39:26 hybrid1120 maldet(22563): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1707 files) in progress... Sep 09 2025 04:40:21 hybrid1120 maldet(22563): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1707, malware hits 0, cleaned hits 0, time 402s Sep 09 2025 04:40:21 hybrid1120 maldet(22563): {scan} scan report saved, to view run: maldet --report 250909-0433.22563 Sep 10 2025 04:06:52 hybrid1120 maldet(16947): {update} checking for available updates... Sep 10 2025 04:06:53 hybrid1120 maldet(16947): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 10 2025 04:06:53 hybrid1120 maldet(16947): {update} hashing install files and checking against server... Sep 10 2025 04:06:53 hybrid1120 maldet(16947): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 10 2025 04:06:53 hybrid1120 maldet(16947): {update} latest version already installed. Sep 10 2025 04:06:54 hybrid1120 maldet(17058): {sigup} performing signature update check... Sep 10 2025 04:06:54 hybrid1120 maldet(17058): {sigup} local signature set is version 202509072429773 Sep 10 2025 04:06:54 hybrid1120 maldet(17058): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 10 2025 04:06:54 hybrid1120 maldet(17058): {sigup} latest signature set already installed Sep 10 2025 04:06:54 hybrid1120 maldet(17146): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 10 2025 04:06:55 hybrid1120 maldet(17146): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 10 2025 04:06:55 hybrid1120 maldet(17146): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 10 2025 04:06:55 hybrid1120 maldet(17146): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 10 2025 04:06:55 hybrid1120 maldet(17146): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 10 2025 04:13:27 hybrid1120 maldet(17146): {scan} file list completed in 392s, found 1322 files... Sep 10 2025 04:13:27 hybrid1120 maldet(17146): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1322 files) in progress... Sep 10 2025 04:14:03 hybrid1120 maldet(17146): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1322, malware hits 0, cleaned hits 0, time 429s Sep 10 2025 04:14:03 hybrid1120 maldet(17146): {scan} scan report saved, to view run: maldet --report 250910-0406.17146 Sep 11 2025 03:16:20 hybrid1120 maldet(28511): {update} checking for available updates... Sep 11 2025 03:16:20 hybrid1120 maldet(28511): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 11 2025 03:16:20 hybrid1120 maldet(28511): {update} hashing install files and checking against server... Sep 11 2025 03:16:21 hybrid1120 maldet(28511): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 11 2025 03:16:21 hybrid1120 maldet(28511): {update} latest version already installed. Sep 11 2025 03:16:21 hybrid1120 maldet(28622): {sigup} performing signature update check... Sep 11 2025 03:16:21 hybrid1120 maldet(28622): {sigup} local signature set is version 202509072429773 Sep 11 2025 03:16:21 hybrid1120 maldet(28622): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 11 2025 03:16:22 hybrid1120 maldet(28622): {sigup} new signature set 202509103407087 available Sep 11 2025 03:16:22 hybrid1120 maldet(28622): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 11 2025 03:16:23 hybrid1120 maldet(28622): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 11 2025 03:16:23 hybrid1120 maldet(28622): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Sep 11 2025 03:16:23 hybrid1120 maldet(28622): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 11 2025 03:16:24 hybrid1120 maldet(28622): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 11 2025 03:16:24 hybrid1120 maldet(28622): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Sep 11 2025 03:16:24 hybrid1120 maldet(28622): {sigup} verified md5sum of maldet-sigpack.tgz Sep 11 2025 03:16:25 hybrid1120 maldet(28622): {sigup} unpacked and installed maldet-sigpack.tgz Sep 11 2025 03:16:25 hybrid1120 maldet(28622): {sigup} verified md5sum of maldet-clean.tgz Sep 11 2025 03:16:25 hybrid1120 maldet(28622): {sigup} unpacked and installed maldet-clean.tgz Sep 11 2025 03:16:25 hybrid1120 maldet(28622): {sigup} signature set update completed Sep 11 2025 03:16:25 hybrid1120 maldet(28622): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 11 2025 03:16:25 hybrid1120 maldet(28896): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 11 2025 03:16:25 hybrid1120 maldet(28896): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 11 2025 03:16:25 hybrid1120 maldet(28896): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 11 2025 03:16:25 hybrid1120 maldet(28896): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 11 2025 03:16:25 hybrid1120 maldet(28896): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 11 2025 03:24:18 hybrid1120 maldet(28896): {scan} file list completed in 473s, found 963 files... Sep 11 2025 03:24:18 hybrid1120 maldet(28896): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (963 files) in progress... Sep 11 2025 03:24:52 hybrid1120 maldet(28896): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 963, malware hits 0, cleaned hits 0, time 507s Sep 11 2025 03:24:52 hybrid1120 maldet(28896): {scan} scan report saved, to view run: maldet --report 250911-0316.28896 Sep 12 2025 03:57:24 hybrid1120 maldet(19211): {update} checking for available updates... Sep 12 2025 03:57:25 hybrid1120 maldet(19211): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 12 2025 03:57:25 hybrid1120 maldet(19211): {update} hashing install files and checking against server... Sep 12 2025 03:57:25 hybrid1120 maldet(19211): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 12 2025 03:57:25 hybrid1120 maldet(19211): {update} latest version already installed. Sep 12 2025 03:57:25 hybrid1120 maldet(19322): {sigup} performing signature update check... Sep 12 2025 03:57:25 hybrid1120 maldet(19322): {sigup} local signature set is version 202509103407087 Sep 12 2025 03:57:26 hybrid1120 maldet(19322): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 12 2025 03:57:26 hybrid1120 maldet(19322): {sigup} latest signature set already installed Sep 12 2025 03:57:26 hybrid1120 maldet(19411): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 12 2025 03:57:26 hybrid1120 maldet(19411): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 12 2025 03:57:26 hybrid1120 maldet(19411): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 12 2025 03:57:26 hybrid1120 maldet(19411): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 12 2025 03:57:26 hybrid1120 maldet(19411): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 12 2025 04:05:30 hybrid1120 maldet(19411): {scan} file list completed in 484s, found 1520 files... Sep 12 2025 04:05:30 hybrid1120 maldet(19411): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1520 files) in progress... Sep 12 2025 04:06:28 hybrid1120 maldet(19411): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1520, malware hits 0, cleaned hits 0, time 542s Sep 12 2025 04:06:28 hybrid1120 maldet(19411): {scan} scan report saved, to view run: maldet --report 250912-0357.19411 Sep 13 2025 03:54:04 hybrid1120 maldet(32157): {update} checking for available updates... Sep 13 2025 03:54:05 hybrid1120 maldet(32157): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 13 2025 03:54:05 hybrid1120 maldet(32157): {update} hashing install files and checking against server... Sep 13 2025 03:54:05 hybrid1120 maldet(32157): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 13 2025 03:54:05 hybrid1120 maldet(32157): {update} latest version already installed. Sep 13 2025 03:54:05 hybrid1120 maldet(32288): {sigup} performing signature update check... Sep 13 2025 03:54:05 hybrid1120 maldet(32288): {sigup} local signature set is version 202509103407087 Sep 13 2025 03:54:06 hybrid1120 maldet(32288): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 13 2025 03:54:06 hybrid1120 maldet(32288): {sigup} latest signature set already installed Sep 13 2025 03:54:06 hybrid1120 maldet(32379): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 13 2025 03:54:06 hybrid1120 maldet(32379): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 13 2025 03:54:06 hybrid1120 maldet(32379): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 13 2025 03:54:06 hybrid1120 maldet(32379): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 13 2025 03:54:06 hybrid1120 maldet(32379): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 13 2025 03:58:52 hybrid1120 maldet(32379): {scan} file list completed in 286s, found 1556 files... Sep 13 2025 03:58:52 hybrid1120 maldet(32379): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1556 files) in progress... Sep 13 2025 03:59:33 hybrid1120 maldet(32379): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1556, malware hits 0, cleaned hits 0, time 327s Sep 13 2025 03:59:33 hybrid1120 maldet(32379): {scan} scan report saved, to view run: maldet --report 250913-0354.32379 Sep 14 2025 03:13:57 hybrid1120 maldet(7946): {update} checking for available updates... Sep 14 2025 03:13:58 hybrid1120 maldet(7946): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 14 2025 03:13:58 hybrid1120 maldet(7946): {update} hashing install files and checking against server... Sep 14 2025 03:13:58 hybrid1120 maldet(7946): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 14 2025 03:13:58 hybrid1120 maldet(7946): {update} latest version already installed. Sep 14 2025 03:13:58 hybrid1120 maldet(8084): {sigup} performing signature update check... Sep 14 2025 03:13:58 hybrid1120 maldet(8084): {sigup} local signature set is version 202509103407087 Sep 14 2025 03:13:59 hybrid1120 maldet(8084): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 14 2025 03:13:59 hybrid1120 maldet(8084): {sigup} new signature set 20250913184498 available Sep 14 2025 03:13:59 hybrid1120 maldet(8084): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 14 2025 03:14:00 hybrid1120 maldet(8084): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 14 2025 03:14:00 hybrid1120 maldet(8084): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Sep 14 2025 03:14:00 hybrid1120 maldet(8084): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 14 2025 03:14:00 hybrid1120 maldet(8084): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 14 2025 03:14:01 hybrid1120 maldet(8084): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Sep 14 2025 03:14:01 hybrid1120 maldet(8084): {sigup} verified md5sum of maldet-sigpack.tgz Sep 14 2025 03:14:01 hybrid1120 maldet(8084): {sigup} unpacked and installed maldet-sigpack.tgz Sep 14 2025 03:14:01 hybrid1120 maldet(8084): {sigup} verified md5sum of maldet-clean.tgz Sep 14 2025 03:14:01 hybrid1120 maldet(8084): {sigup} unpacked and installed maldet-clean.tgz Sep 14 2025 03:14:01 hybrid1120 maldet(8084): {sigup} signature set update completed Sep 14 2025 03:14:01 hybrid1120 maldet(8084): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 14 2025 03:14:01 hybrid1120 maldet(8404): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 14 2025 03:14:02 hybrid1120 maldet(8404): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 14 2025 03:14:02 hybrid1120 maldet(8404): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 14 2025 03:14:02 hybrid1120 maldet(8404): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 14 2025 03:14:02 hybrid1120 maldet(8404): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 14 2025 03:22:05 hybrid1120 maldet(8404): {scan} file list completed in 482s, found 3709 files... Sep 14 2025 03:22:05 hybrid1120 maldet(8404): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (3709 files) in progress... Sep 14 2025 03:23:47 hybrid1120 maldet(8404): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 3709, malware hits 0, cleaned hits 0, time 586s Sep 14 2025 03:23:47 hybrid1120 maldet(8404): {scan} scan report saved, to view run: maldet --report 250914-0314.8404 Sep 15 2025 05:04:02 hybrid1120 maldet(3602): {update} checking for available updates... Sep 15 2025 05:04:02 hybrid1120 maldet(3602): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 15 2025 05:04:03 hybrid1120 maldet(3602): {update} hashing install files and checking against server... Sep 15 2025 05:04:03 hybrid1120 maldet(3602): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 15 2025 05:04:03 hybrid1120 maldet(3602): {update} latest version already installed. Sep 15 2025 05:04:03 hybrid1120 maldet(3716): {sigup} performing signature update check... Sep 15 2025 05:04:03 hybrid1120 maldet(3716): {sigup} local signature set is version 20250913184498 Sep 15 2025 05:04:04 hybrid1120 maldet(3716): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 15 2025 05:04:04 hybrid1120 maldet(3716): {sigup} latest signature set already installed Sep 15 2025 05:04:04 hybrid1120 maldet(3807): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 15 2025 05:04:04 hybrid1120 maldet(3807): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 15 2025 05:04:04 hybrid1120 maldet(3807): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 15 2025 05:04:04 hybrid1120 maldet(3807): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 15 2025 05:04:04 hybrid1120 maldet(3807): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 15 2025 05:08:47 hybrid1120 maldet(3807): {scan} file list completed in 283s, found 2334 files... Sep 15 2025 05:08:47 hybrid1120 maldet(3807): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2334 files) in progress... Sep 15 2025 05:09:49 hybrid1120 maldet(3807): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2334, malware hits 0, cleaned hits 0, time 345s Sep 15 2025 05:09:49 hybrid1120 maldet(3807): {scan} scan report saved, to view run: maldet --report 250915-0504.3807 Sep 16 2025 04:52:21 hybrid1120 maldet(24224): {update} checking for available updates... Sep 16 2025 04:52:21 hybrid1120 maldet(24224): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 16 2025 04:52:21 hybrid1120 maldet(24224): {update} hashing install files and checking against server... Sep 16 2025 04:52:22 hybrid1120 maldet(24224): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 16 2025 04:52:22 hybrid1120 maldet(24224): {update} latest version already installed. Sep 16 2025 04:52:22 hybrid1120 maldet(24334): {sigup} performing signature update check... Sep 16 2025 04:52:22 hybrid1120 maldet(24334): {sigup} local signature set is version 20250913184498 Sep 16 2025 04:52:23 hybrid1120 maldet(24334): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 16 2025 04:52:23 hybrid1120 maldet(24334): {sigup} latest signature set already installed Sep 16 2025 04:52:23 hybrid1120 maldet(24424): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 16 2025 04:52:23 hybrid1120 maldet(24424): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 16 2025 04:52:23 hybrid1120 maldet(24424): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 16 2025 04:52:23 hybrid1120 maldet(24424): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 16 2025 04:52:23 hybrid1120 maldet(24424): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 16 2025 04:57:57 hybrid1120 maldet(24424): {scan} file list completed in 334s, found 6582 files... Sep 16 2025 04:57:57 hybrid1120 maldet(24424): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (6582 files) in progress... Sep 16 2025 05:02:48 hybrid1120 maldet(24424): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 6582, malware hits 0, cleaned hits 0, time 625s Sep 16 2025 05:02:48 hybrid1120 maldet(24424): {scan} scan report saved, to view run: maldet --report 250916-0452.24424 Sep 17 2025 06:43:10 hybrid1120 maldet(7208): {update} checking for available updates... Sep 17 2025 06:43:10 hybrid1120 maldet(7208): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 17 2025 06:43:10 hybrid1120 maldet(7208): {update} hashing install files and checking against server... Sep 17 2025 06:43:11 hybrid1120 maldet(7208): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 17 2025 06:43:11 hybrid1120 maldet(7208): {update} latest version already installed. Sep 17 2025 06:43:11 hybrid1120 maldet(7320): {sigup} performing signature update check... Sep 17 2025 06:43:11 hybrid1120 maldet(7320): {sigup} local signature set is version 20250913184498 Sep 17 2025 06:43:11 hybrid1120 maldet(7320): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 17 2025 06:43:11 hybrid1120 maldet(7320): {sigup} new signature set 202509161155684 available Sep 17 2025 06:43:11 hybrid1120 maldet(7320): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 17 2025 06:43:12 hybrid1120 maldet(7320): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 17 2025 06:43:13 hybrid1120 maldet(7320): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Sep 17 2025 06:43:13 hybrid1120 maldet(7320): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 17 2025 06:43:13 hybrid1120 maldet(7320): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 17 2025 06:43:14 hybrid1120 maldet(7320): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Sep 17 2025 06:43:14 hybrid1120 maldet(7320): {sigup} verified md5sum of maldet-sigpack.tgz Sep 17 2025 06:43:14 hybrid1120 maldet(7320): {sigup} unpacked and installed maldet-sigpack.tgz Sep 17 2025 06:43:14 hybrid1120 maldet(7320): {sigup} verified md5sum of maldet-clean.tgz Sep 17 2025 06:43:14 hybrid1120 maldet(7320): {sigup} unpacked and installed maldet-clean.tgz Sep 17 2025 06:43:14 hybrid1120 maldet(7320): {sigup} signature set update completed Sep 17 2025 06:43:14 hybrid1120 maldet(7320): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 17 2025 06:43:14 hybrid1120 maldet(7534): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 17 2025 06:43:15 hybrid1120 maldet(7534): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 17 2025 06:43:15 hybrid1120 maldet(7534): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 17 2025 06:43:15 hybrid1120 maldet(7534): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 17 2025 06:43:15 hybrid1120 maldet(7534): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 17 2025 06:49:04 hybrid1120 maldet(7534): {scan} file list completed in 349s, found 2603 files... Sep 17 2025 06:49:04 hybrid1120 maldet(7534): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2603 files) in progress... Sep 17 2025 06:50:17 hybrid1120 maldet(7534): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2603, malware hits 0, cleaned hits 0, time 422s Sep 17 2025 06:50:17 hybrid1120 maldet(7534): {scan} scan report saved, to view run: maldet --report 250917-0643.7534 Sep 18 2025 01:46:21 hybrid1120 maldet(1363): {mon} could not find monitor mode dependency 'ed' in PATH, please apt/yum/dnf install ed and try again. Sep 18 2025 04:46:54 hybrid1120 maldet(26271): {update} checking for available updates... Sep 18 2025 04:46:54 hybrid1120 maldet(26271): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 18 2025 04:46:54 hybrid1120 maldet(26271): {update} hashing install files and checking against server... Sep 18 2025 04:46:55 hybrid1120 maldet(26271): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 18 2025 04:46:55 hybrid1120 maldet(26271): {update} latest version already installed. Sep 18 2025 04:46:55 hybrid1120 maldet(26396): {sigup} performing signature update check... Sep 18 2025 04:46:55 hybrid1120 maldet(26396): {sigup} local signature set is version 202509161155684 Sep 18 2025 04:46:55 hybrid1120 maldet(26396): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 18 2025 04:46:55 hybrid1120 maldet(26396): {sigup} latest signature set already installed Sep 18 2025 04:46:55 hybrid1120 maldet(26485): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 18 2025 04:46:56 hybrid1120 maldet(26485): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 18 2025 04:46:56 hybrid1120 maldet(26485): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 18 2025 04:46:56 hybrid1120 maldet(26485): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 18 2025 04:46:56 hybrid1120 maldet(26485): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 18 2025 04:51:44 hybrid1120 maldet(26485): {scan} file list completed in 288s, found 1708 files... Sep 18 2025 04:51:44 hybrid1120 maldet(26485): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1708 files) in progress... Sep 18 2025 04:52:26 hybrid1120 maldet(26485): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1708, malware hits 0, cleaned hits 0, time 331s Sep 18 2025 04:52:26 hybrid1120 maldet(26485): {scan} scan report saved, to view run: maldet --report 250918-0446.26485 Sep 19 2025 04:30:52 hybrid1120 maldet(24561): {update} checking for available updates... Sep 19 2025 04:30:52 hybrid1120 maldet(24561): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 19 2025 04:30:52 hybrid1120 maldet(24561): {update} hashing install files and checking against server... Sep 19 2025 04:30:52 hybrid1120 maldet(24561): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 19 2025 04:30:52 hybrid1120 maldet(24561): {update} latest version already installed. Sep 19 2025 04:30:52 hybrid1120 maldet(24670): {sigup} performing signature update check... Sep 19 2025 04:30:52 hybrid1120 maldet(24670): {sigup} local signature set is version 202509161155684 Sep 19 2025 04:30:53 hybrid1120 maldet(24670): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 19 2025 04:30:53 hybrid1120 maldet(24670): {sigup} latest signature set already installed Sep 19 2025 04:30:53 hybrid1120 maldet(24758): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 19 2025 04:30:53 hybrid1120 maldet(24758): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 19 2025 04:30:53 hybrid1120 maldet(24758): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 19 2025 04:30:53 hybrid1120 maldet(24758): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 19 2025 04:30:53 hybrid1120 maldet(24758): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 19 2025 04:37:11 hybrid1120 maldet(24758): {scan} file list completed in 378s, found 2467 files... Sep 19 2025 04:37:11 hybrid1120 maldet(24758): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2467 files) in progress... Sep 19 2025 04:38:22 hybrid1120 maldet(24758): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2467, malware hits 0, cleaned hits 0, time 449s Sep 19 2025 04:38:22 hybrid1120 maldet(24758): {scan} scan report saved, to view run: maldet --report 250919-0430.24758 Sep 20 2025 03:55:30 hybrid1120 maldet(22020): {update} checking for available updates... Sep 20 2025 03:55:31 hybrid1120 maldet(22020): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 20 2025 03:55:31 hybrid1120 maldet(22020): {update} hashing install files and checking against server... Sep 20 2025 03:55:31 hybrid1120 maldet(22020): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 20 2025 03:55:31 hybrid1120 maldet(22020): {update} latest version already installed. Sep 20 2025 03:55:31 hybrid1120 maldet(22129): {sigup} performing signature update check... Sep 20 2025 03:55:31 hybrid1120 maldet(22129): {sigup} local signature set is version 202509161155684 Sep 20 2025 03:55:32 hybrid1120 maldet(22129): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 20 2025 03:55:32 hybrid1120 maldet(22129): {sigup} new signature set 202509192126850 available Sep 20 2025 03:55:32 hybrid1120 maldet(22129): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 20 2025 03:55:33 hybrid1120 maldet(22129): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 20 2025 03:55:33 hybrid1120 maldet(22129): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Sep 20 2025 03:55:33 hybrid1120 maldet(22129): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 20 2025 03:55:33 hybrid1120 maldet(22129): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 20 2025 03:55:34 hybrid1120 maldet(22129): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Sep 20 2025 03:55:34 hybrid1120 maldet(22129): {sigup} verified md5sum of maldet-sigpack.tgz Sep 20 2025 03:55:34 hybrid1120 maldet(22129): {sigup} unpacked and installed maldet-sigpack.tgz Sep 20 2025 03:55:34 hybrid1120 maldet(22129): {sigup} verified md5sum of maldet-clean.tgz Sep 20 2025 03:55:35 hybrid1120 maldet(22129): {sigup} unpacked and installed maldet-clean.tgz Sep 20 2025 03:55:35 hybrid1120 maldet(22129): {sigup} signature set update completed Sep 20 2025 03:55:35 hybrid1120 maldet(22129): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 20 2025 03:55:35 hybrid1120 maldet(22348): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 20 2025 03:55:35 hybrid1120 maldet(22348): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 20 2025 03:55:35 hybrid1120 maldet(22348): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 20 2025 03:55:35 hybrid1120 maldet(22348): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 20 2025 03:55:35 hybrid1120 maldet(22348): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 20 2025 03:57:02 hybrid1120 maldet(22348): {scan} file list completed in 87s, found 2020 files... Sep 20 2025 03:57:02 hybrid1120 maldet(22348): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2020 files) in progress... Sep 20 2025 03:57:55 hybrid1120 maldet(22348): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2020, malware hits 0, cleaned hits 0, time 140s Sep 20 2025 03:57:55 hybrid1120 maldet(22348): {scan} scan report saved, to view run: maldet --report 250920-0355.22348 Sep 21 2025 04:26:30 hybrid1120 maldet(12985): {update} checking for available updates... Sep 21 2025 04:26:31 hybrid1120 maldet(12985): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 21 2025 04:26:31 hybrid1120 maldet(12985): {update} hashing install files and checking against server... Sep 21 2025 04:26:32 hybrid1120 maldet(12985): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 21 2025 04:26:32 hybrid1120 maldet(12985): {update} latest version already installed. Sep 21 2025 04:26:32 hybrid1120 maldet(13099): {sigup} performing signature update check... Sep 21 2025 04:26:32 hybrid1120 maldet(13099): {sigup} local signature set is version 202509192126850 Sep 21 2025 04:26:32 hybrid1120 maldet(13099): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 21 2025 04:26:32 hybrid1120 maldet(13099): {sigup} latest signature set already installed Sep 21 2025 04:26:32 hybrid1120 maldet(13188): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 21 2025 04:26:32 hybrid1120 maldet(13188): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 21 2025 04:26:32 hybrid1120 maldet(13188): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 21 2025 04:26:32 hybrid1120 maldet(13188): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 21 2025 04:26:32 hybrid1120 maldet(13188): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 21 2025 04:31:26 hybrid1120 maldet(13188): {scan} file list completed in 294s, found 1929 files... Sep 21 2025 04:31:26 hybrid1120 maldet(13188): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1929 files) in progress... Sep 21 2025 04:32:13 hybrid1120 maldet(13188): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1929, malware hits 0, cleaned hits 0, time 341s Sep 21 2025 04:32:13 hybrid1120 maldet(13188): {scan} scan report saved, to view run: maldet --report 250921-0426.13188 Sep 22 2025 03:47:34 hybrid1120 maldet(6700): {update} checking for available updates... Sep 22 2025 03:47:34 hybrid1120 maldet(6700): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 22 2025 03:47:34 hybrid1120 maldet(6700): {update} hashing install files and checking against server... Sep 22 2025 03:47:35 hybrid1120 maldet(6700): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 22 2025 03:47:35 hybrid1120 maldet(6700): {update} latest version already installed. Sep 22 2025 03:47:35 hybrid1120 maldet(6828): {sigup} performing signature update check... Sep 22 2025 03:47:35 hybrid1120 maldet(6828): {sigup} local signature set is version 202509192126850 Sep 22 2025 03:47:35 hybrid1120 maldet(6828): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 22 2025 03:47:35 hybrid1120 maldet(6828): {sigup} latest signature set already installed Sep 22 2025 03:47:36 hybrid1120 maldet(6916): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 22 2025 03:47:36 hybrid1120 maldet(6916): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 22 2025 03:47:36 hybrid1120 maldet(6916): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 22 2025 03:47:36 hybrid1120 maldet(6916): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 22 2025 03:47:36 hybrid1120 maldet(6916): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 22 2025 03:53:48 hybrid1120 maldet(6916): {scan} file list completed in 372s, found 1908 files... Sep 22 2025 03:53:48 hybrid1120 maldet(6916): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1908 files) in progress... Sep 22 2025 03:54:36 hybrid1120 maldet(6916): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1908, malware hits 0, cleaned hits 0, time 420s Sep 22 2025 03:54:36 hybrid1120 maldet(6916): {scan} scan report saved, to view run: maldet --report 250922-0347.6916 Sep 23 2025 03:10:05 hybrid1120 maldet(2733): {update} checking for available updates... Sep 23 2025 03:10:05 hybrid1120 maldet(2733): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 23 2025 03:10:05 hybrid1120 maldet(2733): {update} hashing install files and checking against server... Sep 23 2025 03:10:06 hybrid1120 maldet(2733): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 23 2025 03:10:06 hybrid1120 maldet(2733): {update} latest version already installed. Sep 23 2025 03:10:06 hybrid1120 maldet(2857): {sigup} performing signature update check... Sep 23 2025 03:10:06 hybrid1120 maldet(2857): {sigup} local signature set is version 202509192126850 Sep 23 2025 03:10:06 hybrid1120 maldet(2857): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 23 2025 03:10:06 hybrid1120 maldet(2857): {sigup} new signature set 202509223097979 available Sep 23 2025 03:10:06 hybrid1120 maldet(2857): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 23 2025 03:10:08 hybrid1120 maldet(2857): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 23 2025 03:10:08 hybrid1120 maldet(2857): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Sep 23 2025 03:10:08 hybrid1120 maldet(2857): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 23 2025 03:10:08 hybrid1120 maldet(2857): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 23 2025 03:10:09 hybrid1120 maldet(2857): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Sep 23 2025 03:10:09 hybrid1120 maldet(2857): {sigup} verified md5sum of maldet-sigpack.tgz Sep 23 2025 03:10:09 hybrid1120 maldet(2857): {sigup} unpacked and installed maldet-sigpack.tgz Sep 23 2025 03:10:09 hybrid1120 maldet(2857): {sigup} verified md5sum of maldet-clean.tgz Sep 23 2025 03:10:09 hybrid1120 maldet(2857): {sigup} unpacked and installed maldet-clean.tgz Sep 23 2025 03:10:09 hybrid1120 maldet(2857): {sigup} signature set update completed Sep 23 2025 03:10:09 hybrid1120 maldet(2857): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 23 2025 03:10:10 hybrid1120 maldet(3249): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 23 2025 03:10:10 hybrid1120 maldet(3249): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 23 2025 03:10:10 hybrid1120 maldet(3249): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 23 2025 03:10:10 hybrid1120 maldet(3249): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 23 2025 03:10:10 hybrid1120 maldet(3249): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 23 2025 03:15:55 hybrid1120 maldet(3249): {scan} file list completed in 345s, found 891 files... Sep 23 2025 03:15:55 hybrid1120 maldet(3249): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (891 files) in progress... Sep 23 2025 03:16:19 hybrid1120 maldet(3249): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 891, malware hits 0, cleaned hits 0, time 369s Sep 23 2025 03:16:19 hybrid1120 maldet(3249): {scan} scan report saved, to view run: maldet --report 250923-0310.3249 Sep 24 2025 03:57:18 hybrid1120 maldet(6324): {update} checking for available updates... Sep 24 2025 03:57:19 hybrid1120 maldet(6324): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 24 2025 03:57:19 hybrid1120 maldet(6324): {update} hashing install files and checking against server... Sep 24 2025 03:57:19 hybrid1120 maldet(6324): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 24 2025 03:57:19 hybrid1120 maldet(6324): {update} latest version already installed. Sep 24 2025 03:57:19 hybrid1120 maldet(6440): {sigup} performing signature update check... Sep 24 2025 03:57:19 hybrid1120 maldet(6440): {sigup} local signature set is version 202509223097979 Sep 24 2025 03:57:20 hybrid1120 maldet(6440): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 24 2025 03:57:20 hybrid1120 maldet(6440): {sigup} latest signature set already installed Sep 24 2025 03:57:20 hybrid1120 maldet(6542): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 24 2025 03:57:20 hybrid1120 maldet(6542): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 24 2025 03:57:20 hybrid1120 maldet(6542): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 24 2025 03:57:20 hybrid1120 maldet(6542): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 24 2025 03:57:20 hybrid1120 maldet(6542): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 24 2025 04:04:32 hybrid1120 maldet(6542): {scan} file list completed in 432s, found 8718 files... Sep 24 2025 04:04:32 hybrid1120 maldet(6542): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (8718 files) in progress... Sep 24 2025 04:10:55 hybrid1120 maldet(6542): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 8718, malware hits 0, cleaned hits 0, time 815s Sep 24 2025 04:10:55 hybrid1120 maldet(6542): {scan} scan report saved, to view run: maldet --report 250924-0357.6542 Sep 25 2025 03:09:37 hybrid1120 maldet(18257): {update} checking for available updates... Sep 25 2025 03:09:37 hybrid1120 maldet(18257): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 25 2025 03:09:37 hybrid1120 maldet(18257): {update} hashing install files and checking against server... Sep 25 2025 03:09:38 hybrid1120 maldet(18257): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 25 2025 03:09:38 hybrid1120 maldet(18257): {update} latest version already installed. Sep 25 2025 03:09:38 hybrid1120 maldet(18367): {sigup} performing signature update check... Sep 25 2025 03:09:38 hybrid1120 maldet(18367): {sigup} local signature set is version 202509223097979 Sep 25 2025 03:09:39 hybrid1120 maldet(18367): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 25 2025 03:09:39 hybrid1120 maldet(18367): {sigup} latest signature set already installed Sep 25 2025 03:09:39 hybrid1120 maldet(18455): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 25 2025 03:09:39 hybrid1120 maldet(18455): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 25 2025 03:09:39 hybrid1120 maldet(18455): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 25 2025 03:09:39 hybrid1120 maldet(18455): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 25 2025 03:09:39 hybrid1120 maldet(18455): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 25 2025 03:14:22 hybrid1120 maldet(18455): {scan} file list completed in 282s, found 990 files... Sep 25 2025 03:14:22 hybrid1120 maldet(18455): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (990 files) in progress... Sep 25 2025 03:14:48 hybrid1120 maldet(18455): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 990, malware hits 0, cleaned hits 0, time 309s Sep 25 2025 03:14:48 hybrid1120 maldet(18455): {scan} scan report saved, to view run: maldet --report 250925-0309.18455 Sep 26 2025 04:28:03 hybrid1120 maldet(13043): {update} checking for available updates... Sep 26 2025 04:28:04 hybrid1120 maldet(13043): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 26 2025 04:28:04 hybrid1120 maldet(13043): {update} hashing install files and checking against server... Sep 26 2025 04:28:04 hybrid1120 maldet(13043): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 26 2025 04:28:04 hybrid1120 maldet(13043): {update} latest version already installed. Sep 26 2025 04:28:04 hybrid1120 maldet(13693): {sigup} performing signature update check... Sep 26 2025 04:28:04 hybrid1120 maldet(13693): {sigup} local signature set is version 202509223097979 Sep 26 2025 04:28:05 hybrid1120 maldet(13693): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 26 2025 04:28:05 hybrid1120 maldet(13693): {sigup} new signature set 202509254069842 available Sep 26 2025 04:28:05 hybrid1120 maldet(13693): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 26 2025 04:28:06 hybrid1120 maldet(13693): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 26 2025 04:28:06 hybrid1120 maldet(13693): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Sep 26 2025 04:28:06 hybrid1120 maldet(13693): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 26 2025 04:28:06 hybrid1120 maldet(13693): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 26 2025 04:28:07 hybrid1120 maldet(13693): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Sep 26 2025 04:28:07 hybrid1120 maldet(13693): {sigup} verified md5sum of maldet-sigpack.tgz Sep 26 2025 04:28:08 hybrid1120 maldet(13693): {sigup} unpacked and installed maldet-sigpack.tgz Sep 26 2025 04:28:08 hybrid1120 maldet(13693): {sigup} verified md5sum of maldet-clean.tgz Sep 26 2025 04:28:08 hybrid1120 maldet(13693): {sigup} unpacked and installed maldet-clean.tgz Sep 26 2025 04:28:08 hybrid1120 maldet(13693): {sigup} signature set update completed Sep 26 2025 04:28:08 hybrid1120 maldet(13693): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 26 2025 04:28:08 hybrid1120 maldet(13901): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 26 2025 04:28:08 hybrid1120 maldet(13901): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 26 2025 04:28:08 hybrid1120 maldet(13901): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 26 2025 04:28:08 hybrid1120 maldet(13901): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 26 2025 04:28:08 hybrid1120 maldet(13901): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 26 2025 04:33:17 hybrid1120 maldet(13901): {scan} file list completed in 309s, found 1810 files... Sep 26 2025 04:33:17 hybrid1120 maldet(13901): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1810 files) in progress... Sep 26 2025 04:34:18 hybrid1120 maldet(13901): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1810, malware hits 0, cleaned hits 0, time 370s Sep 26 2025 04:34:18 hybrid1120 maldet(13901): {scan} scan report saved, to view run: maldet --report 250926-0428.13901 Sep 27 2025 05:24:48 hybrid1120 maldet(30328): {update} checking for available updates... Sep 27 2025 05:24:49 hybrid1120 maldet(30328): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 27 2025 05:24:49 hybrid1120 maldet(30328): {update} hashing install files and checking against server... Sep 27 2025 05:24:49 hybrid1120 maldet(30328): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 27 2025 05:24:49 hybrid1120 maldet(30328): {update} latest version already installed. Sep 27 2025 05:24:49 hybrid1120 maldet(30459): {sigup} performing signature update check... Sep 27 2025 05:24:49 hybrid1120 maldet(30459): {sigup} local signature set is version 202509254069842 Sep 27 2025 05:24:50 hybrid1120 maldet(30459): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 27 2025 05:24:50 hybrid1120 maldet(30459): {sigup} latest signature set already installed Sep 27 2025 05:24:50 hybrid1120 maldet(30547): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 27 2025 05:24:50 hybrid1120 maldet(30547): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 27 2025 05:24:50 hybrid1120 maldet(30547): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 27 2025 05:24:50 hybrid1120 maldet(30547): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 27 2025 05:24:50 hybrid1120 maldet(30547): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 27 2025 05:29:32 hybrid1120 maldet(30547): {scan} file list completed in 282s, found 1307 files... Sep 27 2025 05:29:32 hybrid1120 maldet(30547): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1307 files) in progress... Sep 27 2025 05:30:07 hybrid1120 maldet(30547): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1307, malware hits 0, cleaned hits 0, time 317s Sep 27 2025 05:30:07 hybrid1120 maldet(30547): {scan} scan report saved, to view run: maldet --report 250927-0524.30547 Sep 28 2025 04:53:35 hybrid1120 maldet(6383): {update} checking for available updates... Sep 28 2025 04:53:36 hybrid1120 maldet(6383): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 28 2025 04:53:36 hybrid1120 maldet(6383): {update} hashing install files and checking against server... Sep 28 2025 04:53:36 hybrid1120 maldet(6383): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 28 2025 04:53:36 hybrid1120 maldet(6383): {update} latest version already installed. Sep 28 2025 04:53:36 hybrid1120 maldet(6501): {sigup} performing signature update check... Sep 28 2025 04:53:36 hybrid1120 maldet(6501): {sigup} local signature set is version 202509254069842 Sep 28 2025 04:53:36 hybrid1120 maldet(6501): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 28 2025 04:53:36 hybrid1120 maldet(6501): {sigup} latest signature set already installed Sep 28 2025 04:53:37 hybrid1120 maldet(6611): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 28 2025 04:53:37 hybrid1120 maldet(6611): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 28 2025 04:53:37 hybrid1120 maldet(6611): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 28 2025 04:53:37 hybrid1120 maldet(6611): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 28 2025 04:53:37 hybrid1120 maldet(6611): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 28 2025 04:57:55 hybrid1120 maldet(6611): {scan} file list completed in 258s, found 1581 files... Sep 28 2025 04:57:55 hybrid1120 maldet(6611): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1581 files) in progress... Sep 28 2025 04:58:34 hybrid1120 maldet(6611): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1581, malware hits 0, cleaned hits 0, time 297s Sep 28 2025 04:58:34 hybrid1120 maldet(6611): {scan} scan report saved, to view run: maldet --report 250928-0453.6611 Sep 29 2025 04:08:36 hybrid1120 maldet(13834): {update} checking for available updates... Sep 29 2025 04:08:36 hybrid1120 maldet(13834): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 29 2025 04:08:36 hybrid1120 maldet(13834): {update} hashing install files and checking against server... Sep 29 2025 04:08:37 hybrid1120 maldet(13834): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 29 2025 04:08:37 hybrid1120 maldet(13834): {update} latest version already installed. Sep 29 2025 04:08:37 hybrid1120 maldet(13946): {sigup} performing signature update check... Sep 29 2025 04:08:37 hybrid1120 maldet(13946): {sigup} local signature set is version 202509254069842 Sep 29 2025 04:08:37 hybrid1120 maldet(13946): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 29 2025 04:08:37 hybrid1120 maldet(13946): {sigup} new signature set 20250928847499 available Sep 29 2025 04:08:37 hybrid1120 maldet(13946): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 29 2025 04:08:38 hybrid1120 maldet(13946): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 29 2025 04:08:39 hybrid1120 maldet(13946): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Sep 29 2025 04:08:39 hybrid1120 maldet(13946): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 29 2025 04:08:39 hybrid1120 maldet(13946): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 29 2025 04:08:40 hybrid1120 maldet(13946): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Sep 29 2025 04:08:40 hybrid1120 maldet(13946): {sigup} verified md5sum of maldet-sigpack.tgz Sep 29 2025 04:08:40 hybrid1120 maldet(13946): {sigup} unpacked and installed maldet-sigpack.tgz Sep 29 2025 04:08:40 hybrid1120 maldet(13946): {sigup} verified md5sum of maldet-clean.tgz Sep 29 2025 04:08:40 hybrid1120 maldet(13946): {sigup} unpacked and installed maldet-clean.tgz Sep 29 2025 04:08:40 hybrid1120 maldet(13946): {sigup} signature set update completed Sep 29 2025 04:08:40 hybrid1120 maldet(13946): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 29 2025 04:08:40 hybrid1120 maldet(14192): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 29 2025 04:08:41 hybrid1120 maldet(14192): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 29 2025 04:08:41 hybrid1120 maldet(14192): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 29 2025 04:08:41 hybrid1120 maldet(14192): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 29 2025 04:08:41 hybrid1120 maldet(14192): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 29 2025 04:13:55 hybrid1120 maldet(14192): {scan} file list completed in 314s, found 1651 files... Sep 29 2025 04:13:55 hybrid1120 maldet(14192): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1651 files) in progress... Sep 29 2025 04:14:39 hybrid1120 maldet(14192): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1651, malware hits 0, cleaned hits 0, time 359s Sep 29 2025 04:14:39 hybrid1120 maldet(14192): {scan} scan report saved, to view run: maldet --report 250929-0408.14192 Sep 30 2025 04:25:36 hybrid1120 maldet(27938): {update} checking for available updates... Sep 30 2025 04:25:37 hybrid1120 maldet(27938): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 30 2025 04:25:37 hybrid1120 maldet(27938): {update} hashing install files and checking against server... Sep 30 2025 04:25:37 hybrid1120 maldet(27938): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 30 2025 04:25:37 hybrid1120 maldet(27938): {update} latest version already installed. Sep 30 2025 04:25:37 hybrid1120 maldet(28064): {sigup} performing signature update check... Sep 30 2025 04:25:38 hybrid1120 maldet(28064): {sigup} local signature set is version 20250928847499 Sep 30 2025 04:25:38 hybrid1120 maldet(28064): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 30 2025 04:25:38 hybrid1120 maldet(28064): {sigup} latest signature set already installed Sep 30 2025 04:25:38 hybrid1120 maldet(28203): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 30 2025 04:25:38 hybrid1120 maldet(28203): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 30 2025 04:25:38 hybrid1120 maldet(28203): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 30 2025 04:25:38 hybrid1120 maldet(28203): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 30 2025 04:25:38 hybrid1120 maldet(28203): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 30 2025 04:30:00 hybrid1120 maldet(28203): {scan} file list completed in 262s, found 2090 files... Sep 30 2025 04:30:00 hybrid1120 maldet(28203): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2090 files) in progress... Sep 30 2025 04:31:04 hybrid1120 maldet(28203): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2090, malware hits 0, cleaned hits 0, time 326s Sep 30 2025 04:31:04 hybrid1120 maldet(28203): {scan} scan report saved, to view run: maldet --report 250930-0425.28203 Oct 01 2025 03:40:16 hybrid1120 maldet(4006): {update} checking for available updates... Oct 01 2025 03:40:17 hybrid1120 maldet(4006): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 01 2025 03:40:17 hybrid1120 maldet(4006): {update} hashing install files and checking against server... Oct 01 2025 03:40:17 hybrid1120 maldet(4006): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 01 2025 03:40:17 hybrid1120 maldet(4006): {update} latest version already installed. Oct 01 2025 03:40:17 hybrid1120 maldet(4116): {sigup} performing signature update check... Oct 01 2025 03:40:17 hybrid1120 maldet(4116): {sigup} local signature set is version 20250928847499 Oct 01 2025 03:40:18 hybrid1120 maldet(4116): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 01 2025 03:40:18 hybrid1120 maldet(4116): {sigup} latest signature set already installed Oct 01 2025 03:40:18 hybrid1120 maldet(4211): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 01 2025 03:40:18 hybrid1120 maldet(4211): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 01 2025 03:40:18 hybrid1120 maldet(4211): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Oct 01 2025 03:40:18 hybrid1120 maldet(4211): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 01 2025 03:40:18 hybrid1120 maldet(4211): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 01 2025 03:45:41 hybrid1120 maldet(4211): {scan} file list completed in 323s, found 1850 files... Oct 01 2025 03:45:41 hybrid1120 maldet(4211): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1850 files) in progress... Oct 01 2025 03:46:27 hybrid1120 maldet(4211): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1850, malware hits 0, cleaned hits 0, time 369s Oct 01 2025 03:46:27 hybrid1120 maldet(4211): {scan} scan report saved, to view run: maldet --report 251001-0340.4211 Oct 02 2025 05:15:22 hybrid1120 maldet(3938): {update} checking for available updates... Oct 02 2025 05:15:23 hybrid1120 maldet(3938): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 02 2025 05:15:23 hybrid1120 maldet(3938): {update} hashing install files and checking against server... Oct 02 2025 05:15:23 hybrid1120 maldet(3938): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 02 2025 05:15:23 hybrid1120 maldet(3938): {update} latest version already installed. Oct 02 2025 05:15:23 hybrid1120 maldet(4049): {sigup} performing signature update check... Oct 02 2025 05:15:23 hybrid1120 maldet(4049): {sigup} local signature set is version 20250928847499 Oct 02 2025 05:15:24 hybrid1120 maldet(4049): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 02 2025 05:15:24 hybrid1120 maldet(4049): {sigup} new signature set 202510011815721 available Oct 02 2025 05:15:24 hybrid1120 maldet(4049): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 02 2025 05:15:24 hybrid1120 maldet(4049): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 02 2025 05:15:25 hybrid1120 maldet(4049): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Oct 02 2025 05:15:25 hybrid1120 maldet(4049): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 02 2025 05:15:25 hybrid1120 maldet(4049): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 02 2025 05:15:26 hybrid1120 maldet(4049): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Oct 02 2025 05:15:26 hybrid1120 maldet(4049): {sigup} verified md5sum of maldet-sigpack.tgz Oct 02 2025 05:15:26 hybrid1120 maldet(4049): {sigup} unpacked and installed maldet-sigpack.tgz Oct 02 2025 05:15:26 hybrid1120 maldet(4049): {sigup} verified md5sum of maldet-clean.tgz Oct 02 2025 05:15:26 hybrid1120 maldet(4049): {sigup} unpacked and installed maldet-clean.tgz Oct 02 2025 05:15:26 hybrid1120 maldet(4049): {sigup} signature set update completed Oct 02 2025 05:15:26 hybrid1120 maldet(4049): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 02 2025 05:15:26 hybrid1120 maldet(4263): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 02 2025 05:15:26 hybrid1120 maldet(4263): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 02 2025 05:15:26 hybrid1120 maldet(4263): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Oct 02 2025 05:15:26 hybrid1120 maldet(4263): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 02 2025 05:15:26 hybrid1120 maldet(4263): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 02 2025 05:19:31 hybrid1120 maldet(4263): {scan} file list completed in 245s, found 2301 files... Oct 02 2025 05:19:31 hybrid1120 maldet(4263): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2301 files) in progress... Oct 02 2025 05:20:49 hybrid1120 maldet(4263): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2301, malware hits 0, cleaned hits 0, time 323s Oct 02 2025 05:20:49 hybrid1120 maldet(4263): {scan} scan report saved, to view run: maldet --report 251002-0515.4263 Oct 03 2025 03:42:29 hybrid1120 maldet(22113): {update} checking for available updates... Oct 03 2025 03:42:29 hybrid1120 maldet(22113): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 03 2025 03:42:29 hybrid1120 maldet(22113): {update} hashing install files and checking against server... Oct 03 2025 03:42:30 hybrid1120 maldet(22113): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 03 2025 03:42:30 hybrid1120 maldet(22113): {update} latest version already installed. Oct 03 2025 03:42:30 hybrid1120 maldet(22225): {sigup} performing signature update check... Oct 03 2025 03:42:30 hybrid1120 maldet(22225): {sigup} local signature set is version 202510011815721 Oct 03 2025 03:42:30 hybrid1120 maldet(22225): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 03 2025 03:42:30 hybrid1120 maldet(22225): {sigup} latest signature set already installed Oct 03 2025 03:42:31 hybrid1120 maldet(22313): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 03 2025 03:42:31 hybrid1120 maldet(22313): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 03 2025 03:42:31 hybrid1120 maldet(22313): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Oct 03 2025 03:42:31 hybrid1120 maldet(22313): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 03 2025 03:42:31 hybrid1120 maldet(22313): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 03 2025 03:47:55 hybrid1120 maldet(22313): {scan} file list completed in 324s, found 1289 files... Oct 03 2025 03:47:55 hybrid1120 maldet(22313): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1289 files) in progress... Oct 03 2025 03:48:30 hybrid1120 maldet(22313): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1289, malware hits 0, cleaned hits 0, time 359s Oct 03 2025 03:48:30 hybrid1120 maldet(22313): {scan} scan report saved, to view run: maldet --report 251003-0342.22313 Oct 04 2025 03:17:35 hybrid1120 maldet(30570): {update} checking for available updates... Oct 04 2025 03:17:35 hybrid1120 maldet(30570): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 04 2025 03:17:35 hybrid1120 maldet(30570): {update} hashing install files and checking against server... Oct 04 2025 03:17:36 hybrid1120 maldet(30570): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 04 2025 03:17:36 hybrid1120 maldet(30570): {update} latest version already installed. Oct 04 2025 03:17:36 hybrid1120 maldet(30686): {sigup} performing signature update check... Oct 04 2025 03:17:36 hybrid1120 maldet(30686): {sigup} local signature set is version 202510011815721 Oct 04 2025 03:17:37 hybrid1120 maldet(30686): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 04 2025 03:17:37 hybrid1120 maldet(30686): {sigup} latest signature set already installed Oct 04 2025 03:17:37 hybrid1120 maldet(30791): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 04 2025 03:17:37 hybrid1120 maldet(30791): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 04 2025 03:17:37 hybrid1120 maldet(30791): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Oct 04 2025 03:17:37 hybrid1120 maldet(30791): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 04 2025 03:17:37 hybrid1120 maldet(30791): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 04 2025 03:23:16 hybrid1120 maldet(30791): {scan} file list completed in 339s, found 1411 files... Oct 04 2025 03:23:16 hybrid1120 maldet(30791): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1411 files) in progress... Oct 04 2025 03:23:52 hybrid1120 maldet(30791): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1411, malware hits 0, cleaned hits 0, time 375s Oct 04 2025 03:23:52 hybrid1120 maldet(30791): {scan} scan report saved, to view run: maldet --report 251004-0317.30791 Oct 05 2025 04:19:30 hybrid1120 maldet(30789): {update} checking for available updates... Oct 05 2025 04:19:31 hybrid1120 maldet(30789): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 05 2025 04:19:31 hybrid1120 maldet(30789): {update} hashing install files and checking against server... Oct 05 2025 04:19:31 hybrid1120 maldet(30789): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 05 2025 04:19:31 hybrid1120 maldet(30789): {update} latest version already installed. Oct 05 2025 04:19:31 hybrid1120 maldet(30898): {sigup} performing signature update check... Oct 05 2025 04:19:31 hybrid1120 maldet(30898): {sigup} local signature set is version 202510011815721 Oct 05 2025 04:19:32 hybrid1120 maldet(30898): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 05 2025 04:19:32 hybrid1120 maldet(30898): {sigup} new signature set 20251004703782 available Oct 05 2025 04:19:32 hybrid1120 maldet(30898): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 05 2025 04:19:33 hybrid1120 maldet(30898): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 05 2025 04:19:33 hybrid1120 maldet(30898): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Oct 05 2025 04:19:33 hybrid1120 maldet(30898): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 05 2025 04:19:34 hybrid1120 maldet(30898): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 05 2025 04:19:34 hybrid1120 maldet(30898): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Oct 05 2025 04:19:34 hybrid1120 maldet(30898): {sigup} verified md5sum of maldet-sigpack.tgz Oct 05 2025 04:19:34 hybrid1120 maldet(30898): {sigup} unpacked and installed maldet-sigpack.tgz Oct 05 2025 04:19:34 hybrid1120 maldet(30898): {sigup} verified md5sum of maldet-clean.tgz Oct 05 2025 04:19:35 hybrid1120 maldet(30898): {sigup} unpacked and installed maldet-clean.tgz Oct 05 2025 04:19:35 hybrid1120 maldet(30898): {sigup} signature set update completed Oct 05 2025 04:19:35 hybrid1120 maldet(30898): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 05 2025 04:19:35 hybrid1120 maldet(31121): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 05 2025 04:19:35 hybrid1120 maldet(31121): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 05 2025 04:19:35 hybrid1120 maldet(31121): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Oct 05 2025 04:19:35 hybrid1120 maldet(31121): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 05 2025 04:19:35 hybrid1120 maldet(31121): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 05 2025 04:24:24 hybrid1120 maldet(31121): {scan} file list completed in 289s, found 17327 files... Oct 05 2025 04:24:24 hybrid1120 maldet(31121): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (17327 files) in progress... Oct 05 2025 04:39:03 hybrid1120 maldet(31121): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 17327, malware hits 0, cleaned hits 0, time 1168s Oct 05 2025 04:39:03 hybrid1120 maldet(31121): {scan} scan report saved, to view run: maldet --report 251005-0419.31121 Oct 06 2025 04:30:02 hybrid1120 maldet(17660): {update} checking for available updates... Oct 06 2025 04:30:03 hybrid1120 maldet(17660): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 06 2025 04:30:03 hybrid1120 maldet(17660): {update} hashing install files and checking against server... Oct 06 2025 04:30:03 hybrid1120 maldet(17660): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 06 2025 04:30:03 hybrid1120 maldet(17660): {update} latest version already installed. Oct 06 2025 04:30:03 hybrid1120 maldet(17919): {sigup} performing signature update check... Oct 06 2025 04:30:03 hybrid1120 maldet(17919): {sigup} local signature set is version 20251004703782 Oct 06 2025 04:30:04 hybrid1120 maldet(17919): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 06 2025 04:30:04 hybrid1120 maldet(17919): {sigup} latest signature set already installed Oct 06 2025 04:30:04 hybrid1120 maldet(18047): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 06 2025 04:30:04 hybrid1120 maldet(18047): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 06 2025 04:30:04 hybrid1120 maldet(18047): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Oct 06 2025 04:30:04 hybrid1120 maldet(18047): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 06 2025 04:30:04 hybrid1120 maldet(18047): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 06 2025 04:34:14 hybrid1120 maldet(18047): {scan} file list completed in 250s, found 1850 files... Oct 06 2025 04:34:14 hybrid1120 maldet(18047): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1850 files) in progress... Oct 06 2025 04:35:00 hybrid1120 maldet(18047): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1850, malware hits 0, cleaned hits 0, time 296s Oct 06 2025 04:35:00 hybrid1120 maldet(18047): {scan} scan report saved, to view run: maldet --report 251006-0430.18047 Oct 07 2025 02:36:10 hybrid1120 maldet(5583): {update} checking for available updates... Oct 07 2025 02:36:10 hybrid1120 maldet(5583): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 07 2025 02:36:10 hybrid1120 maldet(5583): {update} hashing install files and checking against server... Oct 07 2025 02:36:10 hybrid1120 maldet(5583): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 07 2025 02:36:10 hybrid1120 maldet(5583): {update} latest version already installed. Oct 07 2025 02:36:10 hybrid1120 maldet(5693): {sigup} performing signature update check... Oct 07 2025 02:36:10 hybrid1120 maldet(5693): {sigup} local signature set is version 20251004703782 Oct 07 2025 02:36:11 hybrid1120 maldet(5693): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 07 2025 02:36:11 hybrid1120 maldet(5693): {sigup} latest signature set already installed Oct 07 2025 02:36:11 hybrid1120 maldet(5782): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 07 2025 02:36:12 hybrid1120 maldet(5782): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 07 2025 02:36:12 hybrid1120 maldet(5782): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Oct 07 2025 02:36:12 hybrid1120 maldet(5782): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 07 2025 02:36:12 hybrid1120 maldet(5782): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 07 2025 02:41:59 hybrid1120 maldet(5782): {scan} file list completed in 347s, found 1547 files... Oct 07 2025 02:41:59 hybrid1120 maldet(5782): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1547 files) in progress... Oct 07 2025 02:42:51 hybrid1120 maldet(5782): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1547, malware hits 0, cleaned hits 0, time 400s Oct 07 2025 02:42:51 hybrid1120 maldet(5782): {scan} scan report saved, to view run: maldet --report 251007-0236.5782 Oct 08 2025 04:17:27 hybrid1120 maldet(25827): {update} checking for available updates... Oct 08 2025 04:17:27 hybrid1120 maldet(25827): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 08 2025 04:17:27 hybrid1120 maldet(25827): {update} hashing install files and checking against server... Oct 08 2025 04:17:28 hybrid1120 maldet(25827): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 08 2025 04:17:28 hybrid1120 maldet(25827): {update} latest version already installed. Oct 08 2025 04:17:28 hybrid1120 maldet(25939): {sigup} performing signature update check... Oct 08 2025 04:17:28 hybrid1120 maldet(25939): {sigup} local signature set is version 20251004703782 Oct 08 2025 04:17:28 hybrid1120 maldet(25939): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 08 2025 04:17:28 hybrid1120 maldet(25939): {sigup} new signature set 202510071662433 available Oct 08 2025 04:17:28 hybrid1120 maldet(25939): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 08 2025 04:17:29 hybrid1120 maldet(25939): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 08 2025 04:17:30 hybrid1120 maldet(25939): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Oct 08 2025 04:17:30 hybrid1120 maldet(25939): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 08 2025 04:17:30 hybrid1120 maldet(25939): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 08 2025 04:17:31 hybrid1120 maldet(25939): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Oct 08 2025 04:17:31 hybrid1120 maldet(25939): {sigup} verified md5sum of maldet-sigpack.tgz Oct 08 2025 04:17:31 hybrid1120 maldet(25939): {sigup} unpacked and installed maldet-sigpack.tgz Oct 08 2025 04:17:31 hybrid1120 maldet(25939): {sigup} verified md5sum of maldet-clean.tgz Oct 08 2025 04:17:31 hybrid1120 maldet(25939): {sigup} unpacked and installed maldet-clean.tgz Oct 08 2025 04:17:31 hybrid1120 maldet(25939): {sigup} signature set update completed Oct 08 2025 04:17:31 hybrid1120 maldet(25939): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 08 2025 04:17:31 hybrid1120 maldet(26144): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 08 2025 04:17:32 hybrid1120 maldet(26144): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 08 2025 04:17:32 hybrid1120 maldet(26144): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Oct 08 2025 04:17:32 hybrid1120 maldet(26144): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 08 2025 04:17:32 hybrid1120 maldet(26144): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 08 2025 04:22:20 hybrid1120 maldet(26144): {scan} file list completed in 288s, found 1493 files... Oct 08 2025 04:22:20 hybrid1120 maldet(26144): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1493 files) in progress... Oct 08 2025 04:23:02 hybrid1120 maldet(26144): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1493, malware hits 0, cleaned hits 0, time 331s Oct 08 2025 04:23:02 hybrid1120 maldet(26144): {scan} scan report saved, to view run: maldet --report 251008-0417.26144 Oct 09 2025 02:36:52 hybrid1120 maldet(17166): {update} checking for available updates... Oct 09 2025 02:36:53 hybrid1120 maldet(17166): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 09 2025 02:36:53 hybrid1120 maldet(17166): {update} hashing install files and checking against server... Oct 09 2025 02:36:53 hybrid1120 maldet(17166): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 09 2025 02:36:53 hybrid1120 maldet(17166): {update} latest version already installed. Oct 09 2025 02:36:53 hybrid1120 maldet(17303): {sigup} performing signature update check... Oct 09 2025 02:36:53 hybrid1120 maldet(17303): {sigup} local signature set is version 202510071662433 Oct 09 2025 02:36:54 hybrid1120 maldet(17303): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 09 2025 02:36:54 hybrid1120 maldet(17303): {sigup} latest signature set already installed Oct 09 2025 02:36:54 hybrid1120 maldet(17393): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 09 2025 02:36:54 hybrid1120 maldet(17393): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 09 2025 02:36:54 hybrid1120 maldet(17393): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Oct 09 2025 02:36:54 hybrid1120 maldet(17393): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 09 2025 02:36:54 hybrid1120 maldet(17393): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 09 2025 02:43:49 hybrid1120 maldet(17393): {scan} file list completed in 415s, found 14157 files... Oct 09 2025 02:43:49 hybrid1120 maldet(17393): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (14157 files) in progress... Oct 09 2025 02:57:22 hybrid1120 maldet(17393): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 14157, malware hits 0, cleaned hits 0, time 1228s Oct 09 2025 02:57:22 hybrid1120 maldet(17393): {scan} scan report saved, to view run: maldet --report 251009-0236.17393 Oct 10 2025 03:19:59 hybrid1120 maldet(22911): {update} checking for available updates... Oct 10 2025 03:20:00 hybrid1120 maldet(22911): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 10 2025 03:20:00 hybrid1120 maldet(22911): {update} hashing install files and checking against server... Oct 10 2025 03:20:00 hybrid1120 maldet(22911): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 10 2025 03:20:00 hybrid1120 maldet(22911): {update} latest version already installed. Oct 10 2025 03:20:00 hybrid1120 maldet(23217): {sigup} performing signature update check... Oct 10 2025 03:20:00 hybrid1120 maldet(23217): {sigup} local signature set is version 202510071662433 Oct 10 2025 03:20:01 hybrid1120 maldet(23217): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 10 2025 03:20:01 hybrid1120 maldet(23217): {sigup} latest signature set already installed Oct 10 2025 03:20:01 hybrid1120 maldet(23391): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 10 2025 03:20:02 hybrid1120 maldet(23391): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 10 2025 03:20:02 hybrid1120 maldet(23391): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Oct 10 2025 03:20:02 hybrid1120 maldet(23391): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 10 2025 03:20:02 hybrid1120 maldet(23391): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 10 2025 03:25:43 hybrid1120 maldet(23391): {scan} file list completed in 340s, found 1730 files... Oct 10 2025 03:25:43 hybrid1120 maldet(23391): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1730 files) in progress... Oct 10 2025 03:26:31 hybrid1120 maldet(23391): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1730, malware hits 0, cleaned hits 0, time 390s Oct 10 2025 03:26:31 hybrid1120 maldet(23391): {scan} scan report saved, to view run: maldet --report 251010-0320.23391 Oct 11 2025 04:06:27 hybrid1120 maldet(5567): {update} checking for available updates... Oct 11 2025 04:06:27 hybrid1120 maldet(5567): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 11 2025 04:06:27 hybrid1120 maldet(5567): {update} hashing install files and checking against server... Oct 11 2025 04:06:28 hybrid1120 maldet(5567): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 11 2025 04:06:28 hybrid1120 maldet(5567): {update} latest version already installed. Oct 11 2025 04:06:28 hybrid1120 maldet(5853): {sigup} performing signature update check... Oct 11 2025 04:06:28 hybrid1120 maldet(5853): {sigup} local signature set is version 202510071662433 Oct 11 2025 04:06:29 hybrid1120 maldet(5853): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 11 2025 04:06:29 hybrid1120 maldet(5853): {sigup} new signature set 202510102624809 available Oct 11 2025 04:06:29 hybrid1120 maldet(5853): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 11 2025 04:06:30 hybrid1120 maldet(5853): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 11 2025 04:06:30 hybrid1120 maldet(5853): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Oct 11 2025 04:06:30 hybrid1120 maldet(5853): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 11 2025 04:06:30 hybrid1120 maldet(5853): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 11 2025 04:06:31 hybrid1120 maldet(5853): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Oct 11 2025 04:06:31 hybrid1120 maldet(5853): {sigup} verified md5sum of maldet-sigpack.tgz Oct 11 2025 04:06:31 hybrid1120 maldet(5853): {sigup} unpacked and installed maldet-sigpack.tgz Oct 11 2025 04:06:31 hybrid1120 maldet(5853): {sigup} verified md5sum of maldet-clean.tgz Oct 11 2025 04:06:32 hybrid1120 maldet(5853): {sigup} unpacked and installed maldet-clean.tgz Oct 11 2025 04:06:32 hybrid1120 maldet(5853): {sigup} signature set update completed Oct 11 2025 04:06:32 hybrid1120 maldet(5853): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 11 2025 04:06:32 hybrid1120 maldet(6707): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 11 2025 04:06:32 hybrid1120 maldet(6707): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 11 2025 04:06:32 hybrid1120 maldet(6707): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Oct 11 2025 04:06:32 hybrid1120 maldet(6707): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 11 2025 04:06:32 hybrid1120 maldet(6707): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 11 2025 04:12:55 hybrid1120 maldet(6707): {scan} file list completed in 383s, found 1700 files... Oct 11 2025 04:12:55 hybrid1120 maldet(6707): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1700 files) in progress... Oct 11 2025 04:13:47 hybrid1120 maldet(6707): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1700, malware hits 0, cleaned hits 0, time 435s Oct 11 2025 04:13:47 hybrid1120 maldet(6707): {scan} scan report saved, to view run: maldet --report 251011-0406.6707 Oct 12 2025 03:25:47 hybrid1120 maldet(11084): {update} checking for available updates... Oct 12 2025 03:25:48 hybrid1120 maldet(11084): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 12 2025 03:25:48 hybrid1120 maldet(11084): {update} hashing install files and checking against server... Oct 12 2025 03:25:48 hybrid1120 maldet(11084): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 12 2025 03:25:48 hybrid1120 maldet(11084): {update} latest version already installed. Oct 12 2025 03:25:48 hybrid1120 maldet(11376): {sigup} performing signature update check... Oct 12 2025 03:25:48 hybrid1120 maldet(11376): {sigup} local signature set is version 202510102624809 Oct 12 2025 03:25:49 hybrid1120 maldet(11376): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 12 2025 03:25:49 hybrid1120 maldet(11376): {sigup} latest signature set already installed Oct 12 2025 03:25:49 hybrid1120 maldet(11542): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 12 2025 03:25:49 hybrid1120 maldet(11542): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 12 2025 03:25:49 hybrid1120 maldet(11542): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Oct 12 2025 03:25:49 hybrid1120 maldet(11542): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 12 2025 03:25:49 hybrid1120 maldet(11542): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 12 2025 03:31:56 hybrid1120 maldet(11542): {scan} file list completed in 367s, found 2002 files... Oct 12 2025 03:31:56 hybrid1120 maldet(11542): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2002 files) in progress... Oct 12 2025 03:32:50 hybrid1120 maldet(11542): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2002, malware hits 0, cleaned hits 0, time 421s Oct 12 2025 03:32:50 hybrid1120 maldet(11542): {scan} scan report saved, to view run: maldet --report 251012-0325.11542 Oct 13 2025 04:08:31 hybrid1120 maldet(9748): {update} checking for available updates... Oct 13 2025 04:08:31 hybrid1120 maldet(9748): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 13 2025 04:08:31 hybrid1120 maldet(9748): {update} hashing install files and checking against server... Oct 13 2025 04:08:32 hybrid1120 maldet(9748): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 13 2025 04:08:32 hybrid1120 maldet(9748): {update} latest version already installed. Oct 13 2025 04:08:32 hybrid1120 maldet(10014): {sigup} performing signature update check... Oct 13 2025 04:08:32 hybrid1120 maldet(10014): {sigup} local signature set is version 202510102624809 Oct 13 2025 04:08:33 hybrid1120 maldet(10014): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 13 2025 04:08:33 hybrid1120 maldet(10014): {sigup} latest signature set already installed Oct 13 2025 04:08:33 hybrid1120 maldet(10225): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 13 2025 04:08:33 hybrid1120 maldet(10225): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 13 2025 04:08:33 hybrid1120 maldet(10225): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Oct 13 2025 04:08:33 hybrid1120 maldet(10225): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 13 2025 04:08:33 hybrid1120 maldet(10225): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 13 2025 04:14:42 hybrid1120 maldet(10225): {scan} file list completed in 368s, found 1610 files... Oct 13 2025 04:14:42 hybrid1120 maldet(10225): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1610 files) in progress... Oct 13 2025 04:15:24 hybrid1120 maldet(10225): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1610, malware hits 0, cleaned hits 0, time 411s Oct 13 2025 04:15:24 hybrid1120 maldet(10225): {scan} scan report saved, to view run: maldet --report 251013-0408.10225 Oct 14 2025 04:31:53 hybrid1120 maldet(456): {update} checking for available updates... Oct 14 2025 04:31:54 hybrid1120 maldet(456): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 14 2025 04:31:54 hybrid1120 maldet(456): {update} hashing install files and checking against server... Oct 14 2025 04:31:54 hybrid1120 maldet(456): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 14 2025 04:31:54 hybrid1120 maldet(456): {update} latest version already installed. Oct 14 2025 04:31:54 hybrid1120 maldet(579): {sigup} performing signature update check... Oct 14 2025 04:31:54 hybrid1120 maldet(579): {sigup} local signature set is version 202510102624809 Oct 14 2025 04:31:55 hybrid1120 maldet(579): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 14 2025 04:31:55 hybrid1120 maldet(579): {sigup} new signature set 20251013591816 available Oct 14 2025 04:31:55 hybrid1120 maldet(579): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 14 2025 04:31:56 hybrid1120 maldet(579): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 14 2025 04:31:56 hybrid1120 maldet(579): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Oct 14 2025 04:31:56 hybrid1120 maldet(579): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 14 2025 04:31:56 hybrid1120 maldet(579): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 14 2025 04:31:57 hybrid1120 maldet(579): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Oct 14 2025 04:31:57 hybrid1120 maldet(579): {sigup} verified md5sum of maldet-sigpack.tgz Oct 14 2025 04:31:57 hybrid1120 maldet(579): {sigup} unpacked and installed maldet-sigpack.tgz Oct 14 2025 04:31:57 hybrid1120 maldet(579): {sigup} verified md5sum of maldet-clean.tgz Oct 14 2025 04:31:57 hybrid1120 maldet(579): {sigup} unpacked and installed maldet-clean.tgz Oct 14 2025 04:31:57 hybrid1120 maldet(579): {sigup} signature set update completed Oct 14 2025 04:31:57 hybrid1120 maldet(579): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 14 2025 04:31:58 hybrid1120 maldet(833): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 14 2025 04:31:58 hybrid1120 maldet(833): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 14 2025 04:31:58 hybrid1120 maldet(833): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Oct 14 2025 04:31:58 hybrid1120 maldet(833): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 14 2025 04:31:58 hybrid1120 maldet(833): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 14 2025 04:37:30 hybrid1120 maldet(833): {scan} file list completed in 332s, found 1436 files... Oct 14 2025 04:37:30 hybrid1120 maldet(833): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1436 files) in progress... Oct 14 2025 04:38:17 hybrid1120 maldet(833): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1436, malware hits 0, cleaned hits 0, time 379s Oct 14 2025 04:38:17 hybrid1120 maldet(833): {scan} scan report saved, to view run: maldet --report 251014-0431.833 Oct 15 2025 03:48:44 hybrid1120 maldet(2221): {update} checking for available updates... Oct 15 2025 03:48:44 hybrid1120 maldet(2221): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 15 2025 03:48:44 hybrid1120 maldet(2221): {update} hashing install files and checking against server... Oct 15 2025 03:48:45 hybrid1120 maldet(2221): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 15 2025 03:48:45 hybrid1120 maldet(2221): {update} latest version already installed. Oct 15 2025 03:48:45 hybrid1120 maldet(2339): {sigup} performing signature update check... Oct 15 2025 03:48:45 hybrid1120 maldet(2339): {sigup} local signature set is version 20251013591816 Oct 15 2025 03:48:45 hybrid1120 maldet(2339): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 15 2025 03:48:45 hybrid1120 maldet(2339): {sigup} latest signature set already installed Oct 15 2025 03:48:45 hybrid1120 maldet(2458): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 15 2025 03:48:46 hybrid1120 maldet(2458): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 15 2025 03:48:46 hybrid1120 maldet(2458): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Oct 15 2025 03:48:46 hybrid1120 maldet(2458): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 15 2025 03:48:46 hybrid1120 maldet(2458): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 15 2025 03:54:33 hybrid1120 maldet(2458): {scan} file list completed in 347s, found 1468 files... Oct 15 2025 03:54:33 hybrid1120 maldet(2458): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1468 files) in progress... Oct 15 2025 03:55:15 hybrid1120 maldet(2458): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1468, malware hits 0, cleaned hits 0, time 390s Oct 15 2025 03:55:15 hybrid1120 maldet(2458): {scan} scan report saved, to view run: maldet --report 251015-0348.2458 Oct 16 2025 03:27:40 hybrid1120 maldet(11544): {update} checking for available updates... Oct 16 2025 03:27:41 hybrid1120 maldet(11544): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 16 2025 03:27:41 hybrid1120 maldet(11544): {update} hashing install files and checking against server... Oct 16 2025 03:27:41 hybrid1120 maldet(11544): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 16 2025 03:27:41 hybrid1120 maldet(11544): {update} latest version already installed. Oct 16 2025 03:27:41 hybrid1120 maldet(11828): {sigup} performing signature update check... Oct 16 2025 03:27:41 hybrid1120 maldet(11828): {sigup} local signature set is version 20251013591816 Oct 16 2025 03:27:42 hybrid1120 maldet(11828): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 16 2025 03:27:42 hybrid1120 maldet(11828): {sigup} latest signature set already installed Oct 16 2025 03:27:42 hybrid1120 maldet(12021): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 16 2025 03:27:42 hybrid1120 maldet(12021): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 16 2025 03:27:42 hybrid1120 maldet(12021): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Oct 16 2025 03:27:42 hybrid1120 maldet(12021): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 16 2025 03:27:42 hybrid1120 maldet(12021): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 16 2025 03:32:57 hybrid1120 maldet(12021): {scan} file list completed in 315s, found 1258 files... Oct 16 2025 03:32:57 hybrid1120 maldet(12021): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1258 files) in progress... Oct 16 2025 03:33:31 hybrid1120 maldet(12021): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1258, malware hits 0, cleaned hits 0, time 349s Oct 16 2025 03:33:31 hybrid1120 maldet(12021): {scan} scan report saved, to view run: maldet --report 251016-0327.12021 Oct 17 2025 03:22:38 hybrid1120 maldet(29594): {update} checking for available updates... Oct 17 2025 03:22:38 hybrid1120 maldet(29594): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 17 2025 03:22:39 hybrid1120 maldet(29594): {update} hashing install files and checking against server... Oct 17 2025 03:22:39 hybrid1120 maldet(29594): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 17 2025 03:22:39 hybrid1120 maldet(29594): {update} latest version already installed. Oct 17 2025 03:22:39 hybrid1120 maldet(29839): {sigup} performing signature update check... Oct 17 2025 03:22:39 hybrid1120 maldet(29839): {sigup} local signature set is version 20251013591816 Oct 17 2025 03:22:39 hybrid1120 maldet(29839): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 17 2025 03:22:39 hybrid1120 maldet(29839): {sigup} new signature set 20251016585547 available Oct 17 2025 03:22:39 hybrid1120 maldet(29839): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 17 2025 03:22:40 hybrid1120 maldet(29839): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 17 2025 03:22:41 hybrid1120 maldet(29839): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Oct 17 2025 03:22:41 hybrid1120 maldet(29839): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 17 2025 03:22:41 hybrid1120 maldet(29839): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 17 2025 03:22:41 hybrid1120 maldet(29839): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Oct 17 2025 03:22:41 hybrid1120 maldet(29839): {sigup} verified md5sum of maldet-sigpack.tgz Oct 17 2025 03:22:42 hybrid1120 maldet(29839): {sigup} unpacked and installed maldet-sigpack.tgz Oct 17 2025 03:22:42 hybrid1120 maldet(29839): {sigup} verified md5sum of maldet-clean.tgz Oct 17 2025 03:22:42 hybrid1120 maldet(29839): {sigup} unpacked and installed maldet-clean.tgz Oct 17 2025 03:22:42 hybrid1120 maldet(29839): {sigup} signature set update completed Oct 17 2025 03:22:42 hybrid1120 maldet(29839): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 17 2025 03:22:42 hybrid1120 maldet(30473): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 17 2025 03:22:42 hybrid1120 maldet(30473): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 17 2025 03:22:42 hybrid1120 maldet(30473): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Oct 17 2025 03:22:42 hybrid1120 maldet(30473): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 17 2025 03:22:42 hybrid1120 maldet(30473): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 17 2025 03:29:35 hybrid1120 maldet(30473): {scan} file list completed in 413s, found 1692 files... Oct 17 2025 03:29:35 hybrid1120 maldet(30473): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1692 files) in progress... Oct 17 2025 03:30:28 hybrid1120 maldet(30473): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1692, malware hits 0, cleaned hits 0, time 466s Oct 17 2025 03:30:28 hybrid1120 maldet(30473): {scan} scan report saved, to view run: maldet --report 251017-0322.30473 Oct 18 2025 02:52:29 hybrid1120 maldet(32631): {update} checking for available updates... Oct 18 2025 02:52:30 hybrid1120 maldet(32631): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 18 2025 02:52:30 hybrid1120 maldet(32631): {update} hashing install files and checking against server... Oct 18 2025 02:52:30 hybrid1120 maldet(32631): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 18 2025 02:52:30 hybrid1120 maldet(32631): {update} latest version already installed. Oct 18 2025 02:52:30 hybrid1120 maldet(32759): {sigup} performing signature update check... Oct 18 2025 02:52:30 hybrid1120 maldet(32759): {sigup} local signature set is version 20251016585547 Oct 18 2025 02:52:30 hybrid1120 maldet(32759): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 18 2025 02:52:30 hybrid1120 maldet(32759): {sigup} latest signature set already installed Oct 18 2025 02:52:31 hybrid1120 maldet(413): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 18 2025 02:52:31 hybrid1120 maldet(413): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 18 2025 02:52:31 hybrid1120 maldet(413): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Oct 18 2025 02:52:31 hybrid1120 maldet(413): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 18 2025 02:52:31 hybrid1120 maldet(413): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 18 2025 02:57:19 hybrid1120 maldet(413): {scan} file list completed in 288s, found 2128 files... Oct 18 2025 02:57:19 hybrid1120 maldet(413): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2128 files) in progress... Oct 18 2025 02:58:14 hybrid1120 maldet(413): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2128, malware hits 0, cleaned hits 0, time 343s Oct 18 2025 02:58:14 hybrid1120 maldet(413): {scan} scan report saved, to view run: maldet --report 251018-0252.413 Oct 19 2025 03:39:15 hybrid1120 maldet(25281): {update} checking for available updates... Oct 19 2025 03:39:15 hybrid1120 maldet(25281): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 19 2025 03:39:15 hybrid1120 maldet(25281): {update} hashing install files and checking against server... Oct 19 2025 03:39:16 hybrid1120 maldet(25281): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 19 2025 03:39:16 hybrid1120 maldet(25281): {update} latest version already installed. Oct 19 2025 03:39:16 hybrid1120 maldet(25565): {sigup} performing signature update check... Oct 19 2025 03:39:16 hybrid1120 maldet(25565): {sigup} local signature set is version 20251016585547 Oct 19 2025 03:39:16 hybrid1120 maldet(25565): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 19 2025 03:39:16 hybrid1120 maldet(25565): {sigup} latest signature set already installed Oct 19 2025 03:39:16 hybrid1120 maldet(25745): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 19 2025 03:39:17 hybrid1120 maldet(25745): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 19 2025 03:39:17 hybrid1120 maldet(25745): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Oct 19 2025 03:39:17 hybrid1120 maldet(25745): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 19 2025 03:39:17 hybrid1120 maldet(25745): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 19 2025 03:44:22 hybrid1120 maldet(25745): {scan} file list completed in 305s, found 2152 files... Oct 19 2025 03:44:22 hybrid1120 maldet(25745): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2152 files) in progress... Oct 19 2025 03:45:19 hybrid1120 maldet(25745): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2152, malware hits 0, cleaned hits 0, time 363s Oct 19 2025 03:45:19 hybrid1120 maldet(25745): {scan} scan report saved, to view run: maldet --report 251019-0339.25745 Oct 20 2025 05:04:38 hybrid1120 maldet(1262): {update} checking for available updates... Oct 20 2025 05:04:39 hybrid1120 maldet(1262): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 20 2025 05:04:39 hybrid1120 maldet(1262): {update} hashing install files and checking against server... Oct 20 2025 05:04:40 hybrid1120 maldet(1262): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 20 2025 05:04:40 hybrid1120 maldet(1262): {update} latest version already installed. Oct 20 2025 05:04:40 hybrid1120 maldet(1402): {sigup} performing signature update check... Oct 20 2025 05:04:40 hybrid1120 maldet(1402): {sigup} local signature set is version 20251016585547 Oct 20 2025 05:04:40 hybrid1120 maldet(1402): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 20 2025 05:04:40 hybrid1120 maldet(1402): {sigup} new signature set 202510191559092 available Oct 20 2025 05:04:40 hybrid1120 maldet(1402): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 20 2025 05:04:42 hybrid1120 maldet(1402): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 20 2025 05:04:42 hybrid1120 maldet(1402): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Oct 20 2025 05:04:42 hybrid1120 maldet(1402): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 20 2025 05:04:43 hybrid1120 maldet(1402): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 20 2025 05:04:43 hybrid1120 maldet(1402): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Oct 20 2025 05:04:43 hybrid1120 maldet(1402): {sigup} verified md5sum of maldet-sigpack.tgz Oct 20 2025 05:04:44 hybrid1120 maldet(1402): {sigup} unpacked and installed maldet-sigpack.tgz Oct 20 2025 05:04:44 hybrid1120 maldet(1402): {sigup} verified md5sum of maldet-clean.tgz Oct 20 2025 05:04:44 hybrid1120 maldet(1402): {sigup} unpacked and installed maldet-clean.tgz Oct 20 2025 05:04:44 hybrid1120 maldet(1402): {sigup} signature set update completed Oct 20 2025 05:04:44 hybrid1120 maldet(1402): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 20 2025 05:04:44 hybrid1120 maldet(1673): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 20 2025 05:04:45 hybrid1120 maldet(1673): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 20 2025 05:04:45 hybrid1120 maldet(1673): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Oct 20 2025 05:04:45 hybrid1120 maldet(1673): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 20 2025 05:04:45 hybrid1120 maldet(1673): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 20 2025 05:09:33 hybrid1120 maldet(1673): {scan} file list completed in 288s, found 1863 files... Oct 20 2025 05:09:33 hybrid1120 maldet(1673): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1863 files) in progress... Oct 20 2025 05:10:29 hybrid1120 maldet(1673): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1863, malware hits 0, cleaned hits 0, time 345s Oct 20 2025 05:10:29 hybrid1120 maldet(1673): {scan} scan report saved, to view run: maldet --report 251020-0504.1673 Oct 21 2025 03:42:59 hybrid1120 maldet(26152): {update} checking for available updates... Oct 21 2025 03:42:59 hybrid1120 maldet(26152): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 21 2025 03:42:59 hybrid1120 maldet(26152): {update} hashing install files and checking against server... Oct 21 2025 03:43:00 hybrid1120 maldet(26152): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 21 2025 03:43:00 hybrid1120 maldet(26152): {update} latest version already installed. Oct 21 2025 03:43:00 hybrid1120 maldet(26285): {sigup} performing signature update check... Oct 21 2025 03:43:00 hybrid1120 maldet(26285): {sigup} local signature set is version 202510191559092 Oct 21 2025 03:43:00 hybrid1120 maldet(26285): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 21 2025 03:43:01 hybrid1120 maldet(26285): {sigup} latest signature set already installed Oct 21 2025 03:43:01 hybrid1120 maldet(26381): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 21 2025 03:43:01 hybrid1120 maldet(26381): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 21 2025 03:43:01 hybrid1120 maldet(26381): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Oct 21 2025 03:43:01 hybrid1120 maldet(26381): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 21 2025 03:43:01 hybrid1120 maldet(26381): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 21 2025 03:48:33 hybrid1120 maldet(26381): {scan} file list completed in 332s, found 1483 files... Oct 21 2025 03:48:33 hybrid1120 maldet(26381): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1483 files) in progress... Oct 21 2025 03:49:16 hybrid1120 maldet(26381): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1483, malware hits 0, cleaned hits 0, time 375s Oct 21 2025 03:49:16 hybrid1120 maldet(26381): {scan} scan report saved, to view run: maldet --report 251021-0343.26381 Oct 22 2025 04:21:35 hybrid1120 maldet(29203): {update} checking for available updates... Oct 22 2025 04:21:35 hybrid1120 maldet(29203): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 22 2025 04:21:35 hybrid1120 maldet(29203): {update} hashing install files and checking against server... Oct 22 2025 04:21:36 hybrid1120 maldet(29203): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 22 2025 04:21:36 hybrid1120 maldet(29203): {update} latest version already installed. Oct 22 2025 04:21:36 hybrid1120 maldet(29321): {sigup} performing signature update check... Oct 22 2025 04:21:36 hybrid1120 maldet(29321): {sigup} local signature set is version 202510191559092 Oct 22 2025 04:21:36 hybrid1120 maldet(29321): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 22 2025 04:21:36 hybrid1120 maldet(29321): {sigup} latest signature set already installed Oct 22 2025 04:21:36 hybrid1120 maldet(29416): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 22 2025 04:21:37 hybrid1120 maldet(29416): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 22 2025 04:21:37 hybrid1120 maldet(29416): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Oct 22 2025 04:21:37 hybrid1120 maldet(29416): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 22 2025 04:21:37 hybrid1120 maldet(29416): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 22 2025 04:27:01 hybrid1120 maldet(29416): {scan} file list completed in 324s, found 1375 files... Oct 22 2025 04:27:01 hybrid1120 maldet(29416): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1375 files) in progress... Oct 22 2025 04:27:50 hybrid1120 maldet(29416): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1375, malware hits 0, cleaned hits 0, time 374s Oct 22 2025 04:27:50 hybrid1120 maldet(29416): {scan} scan report saved, to view run: maldet --report 251022-0421.29416 Oct 23 2025 04:09:16 hybrid1120 maldet(19794): {update} checking for available updates... Oct 23 2025 04:09:16 hybrid1120 maldet(19794): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 23 2025 04:09:16 hybrid1120 maldet(19794): {update} hashing install files and checking against server... Oct 23 2025 04:09:16 hybrid1120 maldet(19794): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 23 2025 04:09:16 hybrid1120 maldet(19794): {update} latest version already installed. Oct 23 2025 04:09:16 hybrid1120 maldet(20032): {sigup} performing signature update check... Oct 23 2025 04:09:16 hybrid1120 maldet(20032): {sigup} local signature set is version 202510191559092 Oct 23 2025 04:09:17 hybrid1120 maldet(20032): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 23 2025 04:09:17 hybrid1120 maldet(20032): {sigup} new signature set 202510222532165 available Oct 23 2025 04:09:17 hybrid1120 maldet(20032): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 23 2025 04:09:18 hybrid1120 maldet(20032): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 23 2025 04:09:19 hybrid1120 maldet(20032): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Oct 23 2025 04:09:19 hybrid1120 maldet(20032): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 23 2025 04:09:19 hybrid1120 maldet(20032): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 23 2025 04:09:19 hybrid1120 maldet(20032): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Oct 23 2025 04:09:19 hybrid1120 maldet(20032): {sigup} verified md5sum of maldet-sigpack.tgz Oct 23 2025 04:09:20 hybrid1120 maldet(20032): {sigup} unpacked and installed maldet-sigpack.tgz Oct 23 2025 04:09:20 hybrid1120 maldet(20032): {sigup} verified md5sum of maldet-clean.tgz Oct 23 2025 04:09:20 hybrid1120 maldet(20032): {sigup} unpacked and installed maldet-clean.tgz Oct 23 2025 04:09:20 hybrid1120 maldet(20032): {sigup} signature set update completed Oct 23 2025 04:09:20 hybrid1120 maldet(20032): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 23 2025 04:09:20 hybrid1120 maldet(20728): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 23 2025 04:09:20 hybrid1120 maldet(20728): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 23 2025 04:09:20 hybrid1120 maldet(20728): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Oct 23 2025 04:09:20 hybrid1120 maldet(20728): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 23 2025 04:09:20 hybrid1120 maldet(20728): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 23 2025 04:15:56 hybrid1120 maldet(20728): {scan} file list completed in 396s, found 1471 files... Oct 23 2025 04:15:56 hybrid1120 maldet(20728): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1471 files) in progress... Oct 23 2025 04:16:37 hybrid1120 maldet(20728): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1471, malware hits 0, cleaned hits 0, time 437s Oct 23 2025 04:16:37 hybrid1120 maldet(20728): {scan} scan report saved, to view run: maldet --report 251023-0409.20728 Oct 24 2025 03:09:59 hybrid1120 maldet(15734): {update} checking for available updates... Oct 24 2025 03:09:59 hybrid1120 maldet(15734): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 24 2025 03:09:59 hybrid1120 maldet(15734): {update} hashing install files and checking against server... Oct 24 2025 03:09:59 hybrid1120 maldet(15734): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 24 2025 03:09:59 hybrid1120 maldet(15734): {update} latest version already installed. Oct 24 2025 03:09:59 hybrid1120 maldet(15864): {sigup} performing signature update check... Oct 24 2025 03:09:59 hybrid1120 maldet(15864): {sigup} local signature set is version 202510222532165 Oct 24 2025 03:10:00 hybrid1120 maldet(15864): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 24 2025 03:10:00 hybrid1120 maldet(15864): {sigup} latest signature set already installed Oct 24 2025 03:10:00 hybrid1120 maldet(15962): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 24 2025 03:10:01 hybrid1120 maldet(15962): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 24 2025 03:10:01 hybrid1120 maldet(15962): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Oct 24 2025 03:10:01 hybrid1120 maldet(15962): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 24 2025 03:10:01 hybrid1120 maldet(15962): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 24 2025 03:15:46 hybrid1120 maldet(15962): {scan} file list completed in 345s, found 5385 files... Oct 24 2025 03:15:46 hybrid1120 maldet(15962): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (5385 files) in progress... Oct 24 2025 03:18:48 hybrid1120 maldet(15962): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 5385, malware hits 0, cleaned hits 0, time 528s Oct 24 2025 03:18:48 hybrid1120 maldet(15962): {scan} scan report saved, to view run: maldet --report 251024-0310.15962 Oct 25 2025 04:39:55 hybrid1120 maldet(20483): {update} checking for available updates... Oct 25 2025 04:39:55 hybrid1120 maldet(20483): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 25 2025 04:39:55 hybrid1120 maldet(20483): {update} hashing install files and checking against server... Oct 25 2025 04:39:56 hybrid1120 maldet(20483): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 25 2025 04:39:56 hybrid1120 maldet(20483): {update} latest version already installed. Oct 25 2025 04:39:56 hybrid1120 maldet(20613): {sigup} performing signature update check... Oct 25 2025 04:39:56 hybrid1120 maldet(20613): {sigup} local signature set is version 202510222532165 Oct 25 2025 04:39:56 hybrid1120 maldet(20613): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 25 2025 04:39:56 hybrid1120 maldet(20613): {sigup} latest signature set already installed Oct 25 2025 04:39:56 hybrid1120 maldet(20716): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 25 2025 04:39:56 hybrid1120 maldet(20716): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 25 2025 04:39:56 hybrid1120 maldet(20716): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Oct 25 2025 04:39:56 hybrid1120 maldet(20716): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 25 2025 04:39:56 hybrid1120 maldet(20716): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 25 2025 04:43:41 hybrid1120 maldet(20716): {scan} file list completed in 225s, found 2031 files... Oct 25 2025 04:43:41 hybrid1120 maldet(20716): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2031 files) in progress... Oct 25 2025 04:44:22 hybrid1120 maldet(20716): {hit} malware hit {HEX}php.nested.base64.652 found for /home/itscm/public_html/wp-content/uploads/mailpoet/random_compat/index.php Oct 25 2025 04:44:25 hybrid1120 maldet(20716): {hit} malware hit {HEX}php.base64.inject.182 found for /home/itscm/public_html/2736b/589428/index.php Oct 25 2025 04:44:35 hybrid1120 maldet(20716): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2031, malware hits 2, cleaned hits 0, time 279s Oct 25 2025 04:44:35 hybrid1120 maldet(20716): {scan} scan report saved, to view run: maldet --report 251025-0439.20716 Oct 25 2025 04:44:35 hybrid1120 maldet(20716): {scan} quarantine is disabled! set quarantine_hits=1 in conf.maldet or to quarantine results run: maldet -q 251025-0439.20716 Oct 25 2025 04:44:35 hybrid1120 maldet(20716): {alert} sent scan report to report@planethoster.info, belltver@yahoo.fr Oct 26 2025 03:19:54 hybrid1120 maldet(576): {update} checking for available updates... Oct 26 2025 03:19:54 hybrid1120 maldet(576): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 26 2025 03:19:54 hybrid1120 maldet(576): {update} hashing install files and checking against server... Oct 26 2025 03:19:55 hybrid1120 maldet(576): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 26 2025 03:19:55 hybrid1120 maldet(576): {update} latest version already installed. Oct 26 2025 03:19:55 hybrid1120 maldet(699): {sigup} performing signature update check... Oct 26 2025 03:19:55 hybrid1120 maldet(699): {sigup} local signature set is version 202510222532165 Oct 26 2025 03:19:55 hybrid1120 maldet(699): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 26 2025 03:19:55 hybrid1120 maldet(699): {sigup} new signature set 202510253505547 available Oct 26 2025 03:19:55 hybrid1120 maldet(699): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 26 2025 03:19:56 hybrid1120 maldet(699): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 26 2025 03:19:57 hybrid1120 maldet(699): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Oct 26 2025 03:19:57 hybrid1120 maldet(699): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 26 2025 03:19:57 hybrid1120 maldet(699): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 26 2025 03:19:57 hybrid1120 maldet(699): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Oct 26 2025 03:19:57 hybrid1120 maldet(699): {sigup} verified md5sum of maldet-sigpack.tgz Oct 26 2025 03:19:58 hybrid1120 maldet(699): {sigup} unpacked and installed maldet-sigpack.tgz Oct 26 2025 03:19:58 hybrid1120 maldet(699): {sigup} verified md5sum of maldet-clean.tgz Oct 26 2025 03:19:58 hybrid1120 maldet(699): {sigup} unpacked and installed maldet-clean.tgz Oct 26 2025 03:19:58 hybrid1120 maldet(699): {sigup} signature set update completed Oct 26 2025 03:19:58 hybrid1120 maldet(699): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 26 2025 03:19:58 hybrid1120 maldet(926): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 26 2025 03:19:58 hybrid1120 maldet(926): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 26 2025 03:19:58 hybrid1120 maldet(926): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Oct 26 2025 03:19:58 hybrid1120 maldet(926): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 26 2025 03:19:58 hybrid1120 maldet(926): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 26 2025 03:25:59 hybrid1120 maldet(926): {scan} file list completed in 361s, found 2471 files... Oct 26 2025 03:25:59 hybrid1120 maldet(926): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2471 files) in progress... Oct 26 2025 03:26:54 hybrid1120 maldet(926): {hit} malware hit {HEX}php.nested.base64.652 found for /home/itscm/public_html/wp-content/uploads/mailpoet/random_compat/index.php Oct 26 2025 03:26:58 hybrid1120 maldet(926): {hit} malware hit {HEX}php.base64.inject.182 found for /home/itscm/public_html/2736b/589428/index.php Oct 26 2025 03:27:10 hybrid1120 maldet(926): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2471, malware hits 2, cleaned hits 0, time 432s Oct 26 2025 03:27:10 hybrid1120 maldet(926): {scan} scan report saved, to view run: maldet --report 251026-0319.926 Oct 26 2025 03:27:10 hybrid1120 maldet(926): {scan} quarantine is disabled! set quarantine_hits=1 in conf.maldet or to quarantine results run: maldet -q 251026-0319.926 Oct 26 2025 03:27:10 hybrid1120 maldet(926): {alert} sent scan report to report@planethoster.info, belltver@yahoo.fr Oct 27 2025 04:02:24 hybrid1120 maldet(16154): {update} checking for available updates... Oct 27 2025 04:02:25 hybrid1120 maldet(16154): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 27 2025 04:02:25 hybrid1120 maldet(16154): {update} hashing install files and checking against server... Oct 27 2025 04:02:25 hybrid1120 maldet(16154): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 27 2025 04:02:25 hybrid1120 maldet(16154): {update} latest version already installed. Oct 27 2025 04:02:25 hybrid1120 maldet(16271): {sigup} performing signature update check... Oct 27 2025 04:02:25 hybrid1120 maldet(16271): {sigup} local signature set is version 202510253505547 Oct 27 2025 04:02:26 hybrid1120 maldet(16271): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 27 2025 04:02:26 hybrid1120 maldet(16271): {sigup} latest signature set already installed Oct 27 2025 04:02:26 hybrid1120 maldet(16372): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 27 2025 04:02:26 hybrid1120 maldet(16372): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 27 2025 04:02:26 hybrid1120 maldet(16372): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Oct 27 2025 04:02:26 hybrid1120 maldet(16372): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 27 2025 04:02:26 hybrid1120 maldet(16372): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 27 2025 04:07:52 hybrid1120 maldet(16372): {scan} file list completed in 326s, found 1687 files... Oct 27 2025 04:07:52 hybrid1120 maldet(16372): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1687 files) in progress... Oct 27 2025 04:08:35 hybrid1120 maldet(16372): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1687, malware hits 0, cleaned hits 0, time 369s Oct 27 2025 04:08:35 hybrid1120 maldet(16372): {scan} scan report saved, to view run: maldet --report 251027-0402.16372 Oct 28 2025 04:16:30 hybrid1120 maldet(30402): {update} checking for available updates... Oct 28 2025 04:16:30 hybrid1120 maldet(30402): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 28 2025 04:16:30 hybrid1120 maldet(30402): {update} hashing install files and checking against server... Oct 28 2025 04:16:30 hybrid1120 maldet(30402): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 28 2025 04:16:30 hybrid1120 maldet(30402): {update} latest version already installed. Oct 28 2025 04:16:30 hybrid1120 maldet(30519): {sigup} performing signature update check... Oct 28 2025 04:16:30 hybrid1120 maldet(30519): {sigup} local signature set is version 202510253505547 Oct 28 2025 04:16:31 hybrid1120 maldet(30519): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 28 2025 04:16:31 hybrid1120 maldet(30519): {sigup} latest signature set already installed Oct 28 2025 04:16:31 hybrid1120 maldet(30611): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 28 2025 04:16:31 hybrid1120 maldet(30611): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 28 2025 04:16:31 hybrid1120 maldet(30611): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Oct 28 2025 04:16:31 hybrid1120 maldet(30611): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 28 2025 04:16:31 hybrid1120 maldet(30611): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 28 2025 04:23:52 hybrid1120 maldet(30611): {scan} file list completed in 441s, found 1205 files... Oct 28 2025 04:23:52 hybrid1120 maldet(30611): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1205 files) in progress... Oct 28 2025 04:24:30 hybrid1120 maldet(30611): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1205, malware hits 0, cleaned hits 0, time 479s Oct 28 2025 04:24:30 hybrid1120 maldet(30611): {scan} scan report saved, to view run: maldet --report 251028-0416.30611 Oct 29 2025 05:00:32 hybrid1120 maldet(6949): {update} checking for available updates... Oct 29 2025 05:00:32 hybrid1120 maldet(6949): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 29 2025 05:00:32 hybrid1120 maldet(6949): {update} hashing install files and checking against server... Oct 29 2025 05:00:33 hybrid1120 maldet(6949): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 29 2025 05:00:33 hybrid1120 maldet(6949): {update} latest version already installed. Oct 29 2025 05:00:33 hybrid1120 maldet(7137): {sigup} performing signature update check... Oct 29 2025 05:00:33 hybrid1120 maldet(7137): {sigup} local signature set is version 202510253505547 Oct 29 2025 05:00:33 hybrid1120 maldet(7137): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 29 2025 05:00:34 hybrid1120 maldet(7137): {sigup} new signature set 20251028285016 available Oct 29 2025 05:00:34 hybrid1120 maldet(7137): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 29 2025 05:00:35 hybrid1120 maldet(7137): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 29 2025 05:00:35 hybrid1120 maldet(7137): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Oct 29 2025 05:00:35 hybrid1120 maldet(7137): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 29 2025 05:00:36 hybrid1120 maldet(7137): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 29 2025 05:00:36 hybrid1120 maldet(7137): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Oct 29 2025 05:00:36 hybrid1120 maldet(7137): {sigup} verified md5sum of maldet-sigpack.tgz Oct 29 2025 05:00:37 hybrid1120 maldet(7137): {sigup} unpacked and installed maldet-sigpack.tgz Oct 29 2025 05:00:37 hybrid1120 maldet(7137): {sigup} verified md5sum of maldet-clean.tgz Oct 29 2025 05:00:37 hybrid1120 maldet(7137): {sigup} unpacked and installed maldet-clean.tgz Oct 29 2025 05:00:37 hybrid1120 maldet(7137): {sigup} signature set update completed Oct 29 2025 05:00:37 hybrid1120 maldet(7137): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 29 2025 05:00:37 hybrid1120 maldet(7376): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 29 2025 05:00:38 hybrid1120 maldet(7376): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 29 2025 05:00:38 hybrid1120 maldet(7376): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Oct 29 2025 05:00:38 hybrid1120 maldet(7376): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 29 2025 05:00:38 hybrid1120 maldet(7376): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 29 2025 05:06:27 hybrid1120 maldet(7376): {scan} file list completed in 349s, found 1763 files... Oct 29 2025 05:06:27 hybrid1120 maldet(7376): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1763 files) in progress... Oct 29 2025 05:07:13 hybrid1120 maldet(7376): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1763, malware hits 0, cleaned hits 0, time 396s Oct 29 2025 05:07:13 hybrid1120 maldet(7376): {scan} scan report saved, to view run: maldet --report 251029-0500.7376 Oct 30 2025 04:10:45 hybrid1120 maldet(31715): {update} checking for available updates... Oct 30 2025 04:10:45 hybrid1120 maldet(31715): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 30 2025 04:10:45 hybrid1120 maldet(31715): {update} hashing install files and checking against server... Oct 30 2025 04:10:46 hybrid1120 maldet(31715): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 30 2025 04:10:46 hybrid1120 maldet(31715): {update} latest version already installed. Oct 30 2025 04:10:46 hybrid1120 maldet(31836): {sigup} performing signature update check... Oct 30 2025 04:10:46 hybrid1120 maldet(31836): {sigup} local signature set is version 20251028285016 Oct 30 2025 04:10:46 hybrid1120 maldet(31836): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 30 2025 04:10:46 hybrid1120 maldet(31836): {sigup} latest signature set already installed Oct 30 2025 04:10:47 hybrid1120 maldet(31929): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 30 2025 04:10:47 hybrid1120 maldet(31929): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 30 2025 04:10:47 hybrid1120 maldet(31929): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Oct 30 2025 04:10:47 hybrid1120 maldet(31929): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 30 2025 04:10:47 hybrid1120 maldet(31929): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 30 2025 04:16:56 hybrid1120 maldet(31929): {scan} file list completed in 369s, found 2492 files... Oct 30 2025 04:16:56 hybrid1120 maldet(31929): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2492 files) in progress... Oct 30 2025 04:18:09 hybrid1120 maldet(31929): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2492, malware hits 0, cleaned hits 0, time 442s Oct 30 2025 04:18:09 hybrid1120 maldet(31929): {scan} scan report saved, to view run: maldet --report 251030-0410.31929 Oct 31 2025 04:41:49 hybrid1120 maldet(13606): {update} checking for available updates... Oct 31 2025 04:41:49 hybrid1120 maldet(13606): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 31 2025 04:41:49 hybrid1120 maldet(13606): {update} hashing install files and checking against server... Oct 31 2025 04:41:50 hybrid1120 maldet(13606): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 31 2025 04:41:50 hybrid1120 maldet(13606): {update} latest version already installed. Oct 31 2025 04:41:50 hybrid1120 maldet(13722): {sigup} performing signature update check... Oct 31 2025 04:41:50 hybrid1120 maldet(13722): {sigup} local signature set is version 20251028285016 Oct 31 2025 04:41:50 hybrid1120 maldet(13722): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 31 2025 04:41:50 hybrid1120 maldet(13722): {sigup} latest signature set already installed Oct 31 2025 04:41:50 hybrid1120 maldet(13812): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 31 2025 04:41:50 hybrid1120 maldet(13812): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 31 2025 04:41:50 hybrid1120 maldet(13812): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Oct 31 2025 04:41:50 hybrid1120 maldet(13812): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 31 2025 04:41:50 hybrid1120 maldet(13812): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 31 2025 04:47:16 hybrid1120 maldet(13812): {scan} file list completed in 326s, found 1880 files... Oct 31 2025 04:47:16 hybrid1120 maldet(13812): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1880 files) in progress... Oct 31 2025 04:48:21 hybrid1120 maldet(13812): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1880, malware hits 0, cleaned hits 0, time 391s Oct 31 2025 04:48:21 hybrid1120 maldet(13812): {scan} scan report saved, to view run: maldet --report 251031-0441.13812 Nov 01 2025 04:29:47 hybrid1120 maldet(21524): {update} checking for available updates... Nov 01 2025 04:29:47 hybrid1120 maldet(21524): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 01 2025 04:29:47 hybrid1120 maldet(21524): {update} hashing install files and checking against server... Nov 01 2025 04:29:48 hybrid1120 maldet(21524): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 01 2025 04:29:48 hybrid1120 maldet(21524): {update} latest version already installed. Nov 01 2025 04:29:48 hybrid1120 maldet(21637): {sigup} performing signature update check... Nov 01 2025 04:29:48 hybrid1120 maldet(21637): {sigup} local signature set is version 20251028285016 Nov 01 2025 04:29:48 hybrid1120 maldet(21637): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 01 2025 04:29:48 hybrid1120 maldet(21637): {sigup} new signature set 20251031600486 available Nov 01 2025 04:29:48 hybrid1120 maldet(21637): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 01 2025 04:29:49 hybrid1120 maldet(21637): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 01 2025 04:29:50 hybrid1120 maldet(21637): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Nov 01 2025 04:29:50 hybrid1120 maldet(21637): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 01 2025 04:29:50 hybrid1120 maldet(21637): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 01 2025 04:29:51 hybrid1120 maldet(21637): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Nov 01 2025 04:29:51 hybrid1120 maldet(21637): {sigup} verified md5sum of maldet-sigpack.tgz Nov 01 2025 04:29:51 hybrid1120 maldet(21637): {sigup} unpacked and installed maldet-sigpack.tgz Nov 01 2025 04:29:51 hybrid1120 maldet(21637): {sigup} verified md5sum of maldet-clean.tgz Nov 01 2025 04:29:51 hybrid1120 maldet(21637): {sigup} unpacked and installed maldet-clean.tgz Nov 01 2025 04:29:51 hybrid1120 maldet(21637): {sigup} signature set update completed Nov 01 2025 04:29:51 hybrid1120 maldet(21637): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 01 2025 04:29:51 hybrid1120 maldet(21897): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 01 2025 04:29:51 hybrid1120 maldet(21897): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 01 2025 04:29:51 hybrid1120 maldet(21897): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 01 2025 04:29:51 hybrid1120 maldet(21897): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 01 2025 04:29:51 hybrid1120 maldet(21897): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 01 2025 04:34:25 hybrid1120 maldet(21897): {scan} file list completed in 274s, found 1626 files... Nov 01 2025 04:34:25 hybrid1120 maldet(21897): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1626 files) in progress... Nov 01 2025 04:35:09 hybrid1120 maldet(21897): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1626, malware hits 0, cleaned hits 0, time 318s Nov 01 2025 04:35:09 hybrid1120 maldet(21897): {scan} scan report saved, to view run: maldet --report 251101-0429.21897 Nov 02 2025 03:03:13 hybrid1120 maldet(17400): {update} checking for available updates... Nov 02 2025 03:03:13 hybrid1120 maldet(17400): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 02 2025 03:03:13 hybrid1120 maldet(17400): {update} hashing install files and checking against server... Nov 02 2025 03:03:29 hybrid1120 maldet(17400): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 02 2025 03:03:29 hybrid1120 maldet(17400): {update} latest version already installed. Nov 02 2025 03:03:29 hybrid1120 maldet(17776): {sigup} performing signature update check... Nov 02 2025 03:03:29 hybrid1120 maldet(17776): {sigup} local signature set is version 20251031600486 Nov 02 2025 03:03:29 hybrid1120 maldet(17776): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 02 2025 03:03:29 hybrid1120 maldet(17776): {sigup} new signature set 202511011342225 available Nov 02 2025 03:03:29 hybrid1120 maldet(17776): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 02 2025 03:03:36 hybrid1120 maldet(17776): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 02 2025 03:03:37 hybrid1120 maldet(17776): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Nov 02 2025 03:03:37 hybrid1120 maldet(17776): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 02 2025 03:03:37 hybrid1120 maldet(17776): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 02 2025 03:03:37 hybrid1120 maldet(17776): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Nov 02 2025 03:03:37 hybrid1120 maldet(17776): {sigup} verified md5sum of maldet-sigpack.tgz Nov 02 2025 03:03:38 hybrid1120 maldet(17776): {sigup} unpacked and installed maldet-sigpack.tgz Nov 02 2025 03:03:38 hybrid1120 maldet(17776): {sigup} verified md5sum of maldet-clean.tgz Nov 02 2025 03:03:38 hybrid1120 maldet(17776): {sigup} unpacked and installed maldet-clean.tgz Nov 02 2025 03:03:38 hybrid1120 maldet(17776): {sigup} signature set update completed Nov 02 2025 03:03:38 hybrid1120 maldet(17776): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 02 2025 03:03:38 hybrid1120 maldet(18037): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 02 2025 03:03:38 hybrid1120 maldet(18037): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 02 2025 03:03:38 hybrid1120 maldet(18037): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 02 2025 03:03:38 hybrid1120 maldet(18037): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 02 2025 03:03:38 hybrid1120 maldet(18037): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 02 2025 03:09:51 hybrid1120 maldet(18037): {scan} file list completed in 373s, found 1541 files... Nov 02 2025 03:09:51 hybrid1120 maldet(18037): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1541 files) in progress... Nov 02 2025 03:10:31 hybrid1120 maldet(18037): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1541, malware hits 0, cleaned hits 0, time 413s Nov 02 2025 03:10:31 hybrid1120 maldet(18037): {scan} scan report saved, to view run: maldet --report 251102-0303.18037 Nov 03 2025 05:11:16 hybrid1120 maldet(21474): {update} checking for available updates... Nov 03 2025 05:11:16 hybrid1120 maldet(21474): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 03 2025 05:11:16 hybrid1120 maldet(21474): {update} hashing install files and checking against server... Nov 03 2025 05:11:17 hybrid1120 maldet(21474): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 03 2025 05:11:17 hybrid1120 maldet(21474): {update} latest version already installed. Nov 03 2025 05:11:17 hybrid1120 maldet(21586): {sigup} performing signature update check... Nov 03 2025 05:11:17 hybrid1120 maldet(21586): {sigup} local signature set is version 202511011342225 Nov 03 2025 05:11:17 hybrid1120 maldet(21586): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 03 2025 05:11:17 hybrid1120 maldet(21586): {sigup} latest signature set already installed Nov 03 2025 05:11:17 hybrid1120 maldet(21678): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 03 2025 05:11:18 hybrid1120 maldet(21678): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 03 2025 05:11:18 hybrid1120 maldet(21678): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 03 2025 05:11:18 hybrid1120 maldet(21678): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 03 2025 05:11:18 hybrid1120 maldet(21678): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 03 2025 05:14:58 hybrid1120 maldet(21678): {scan} file list completed in 220s, found 1394 files... Nov 03 2025 05:14:58 hybrid1120 maldet(21678): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1394 files) in progress... Nov 03 2025 05:15:34 hybrid1120 maldet(21678): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1394, malware hits 0, cleaned hits 0, time 257s Nov 03 2025 05:15:34 hybrid1120 maldet(21678): {scan} scan report saved, to view run: maldet --report 251103-0511.21678 Nov 04 2025 04:46:40 hybrid1120 maldet(21902): {update} checking for available updates... Nov 04 2025 04:46:40 hybrid1120 maldet(21902): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 04 2025 04:46:40 hybrid1120 maldet(21902): {update} hashing install files and checking against server... Nov 04 2025 04:46:41 hybrid1120 maldet(21902): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 04 2025 04:46:41 hybrid1120 maldet(21902): {update} latest version already installed. Nov 04 2025 04:46:41 hybrid1120 maldet(22024): {sigup} performing signature update check... Nov 04 2025 04:46:41 hybrid1120 maldet(22024): {sigup} local signature set is version 202511011342225 Nov 04 2025 04:46:41 hybrid1120 maldet(22024): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 04 2025 04:46:41 hybrid1120 maldet(22024): {sigup} latest signature set already installed Nov 04 2025 04:46:41 hybrid1120 maldet(22113): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 04 2025 04:46:41 hybrid1120 maldet(22113): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 04 2025 04:46:41 hybrid1120 maldet(22113): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 04 2025 04:46:41 hybrid1120 maldet(22113): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 04 2025 04:46:41 hybrid1120 maldet(22113): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 04 2025 04:50:20 hybrid1120 maldet(22113): {scan} file list completed in 219s, found 1695 files... Nov 04 2025 04:50:20 hybrid1120 maldet(22113): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1695 files) in progress... Nov 04 2025 04:51:07 hybrid1120 maldet(22113): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1695, malware hits 0, cleaned hits 0, time 266s Nov 04 2025 04:51:07 hybrid1120 maldet(22113): {scan} scan report saved, to view run: maldet --report 251104-0446.22113 Nov 05 2025 03:56:49 hybrid1120 maldet(10653): {update} checking for available updates... Nov 05 2025 03:56:50 hybrid1120 maldet(10653): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 05 2025 03:56:50 hybrid1120 maldet(10653): {update} hashing install files and checking against server... Nov 05 2025 03:56:50 hybrid1120 maldet(10653): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 05 2025 03:56:50 hybrid1120 maldet(10653): {update} latest version already installed. Nov 05 2025 03:56:50 hybrid1120 maldet(10765): {sigup} performing signature update check... Nov 05 2025 03:56:50 hybrid1120 maldet(10765): {sigup} local signature set is version 202511011342225 Nov 05 2025 03:56:51 hybrid1120 maldet(10765): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 05 2025 03:56:51 hybrid1120 maldet(10765): {sigup} new signature set 20251104600740 available Nov 05 2025 03:56:51 hybrid1120 maldet(10765): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 05 2025 03:56:52 hybrid1120 maldet(10765): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 05 2025 03:56:52 hybrid1120 maldet(10765): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Nov 05 2025 03:56:52 hybrid1120 maldet(10765): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 05 2025 03:56:53 hybrid1120 maldet(10765): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 05 2025 03:56:53 hybrid1120 maldet(10765): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Nov 05 2025 03:56:53 hybrid1120 maldet(10765): {sigup} verified md5sum of maldet-sigpack.tgz Nov 05 2025 03:56:53 hybrid1120 maldet(10765): {sigup} unpacked and installed maldet-sigpack.tgz Nov 05 2025 03:56:53 hybrid1120 maldet(10765): {sigup} verified md5sum of maldet-clean.tgz Nov 05 2025 03:56:53 hybrid1120 maldet(10765): {sigup} unpacked and installed maldet-clean.tgz Nov 05 2025 03:56:53 hybrid1120 maldet(10765): {sigup} signature set update completed Nov 05 2025 03:56:53 hybrid1120 maldet(10765): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 05 2025 03:56:53 hybrid1120 maldet(10987): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 05 2025 03:56:54 hybrid1120 maldet(10987): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 05 2025 03:56:54 hybrid1120 maldet(10987): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 05 2025 03:56:54 hybrid1120 maldet(10987): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 05 2025 03:56:54 hybrid1120 maldet(10987): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 05 2025 04:03:13 hybrid1120 maldet(10987): {scan} file list completed in 379s, found 1700 files... Nov 05 2025 04:03:13 hybrid1120 maldet(10987): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1700 files) in progress... Nov 05 2025 04:03:59 hybrid1120 maldet(10987): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1700, malware hits 0, cleaned hits 0, time 426s Nov 05 2025 04:03:59 hybrid1120 maldet(10987): {scan} scan report saved, to view run: maldet --report 251105-0356.10987 Nov 06 2025 03:14:28 hybrid1120 maldet(15846): {update} checking for available updates... Nov 06 2025 03:14:28 hybrid1120 maldet(15846): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 06 2025 03:14:28 hybrid1120 maldet(15846): {update} hashing install files and checking against server... Nov 06 2025 03:14:29 hybrid1120 maldet(15846): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 06 2025 03:14:29 hybrid1120 maldet(15846): {update} latest version already installed. Nov 06 2025 03:14:29 hybrid1120 maldet(15995): {sigup} performing signature update check... Nov 06 2025 03:14:29 hybrid1120 maldet(15995): {sigup} local signature set is version 20251104600740 Nov 06 2025 03:14:29 hybrid1120 maldet(15995): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 06 2025 03:14:29 hybrid1120 maldet(15995): {sigup} latest signature set already installed Nov 06 2025 03:14:29 hybrid1120 maldet(16087): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 06 2025 03:14:30 hybrid1120 maldet(16087): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 06 2025 03:14:30 hybrid1120 maldet(16087): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 06 2025 03:14:30 hybrid1120 maldet(16087): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 06 2025 03:14:30 hybrid1120 maldet(16087): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 06 2025 03:19:33 hybrid1120 maldet(16087): {scan} file list completed in 303s, found 1625 files... Nov 06 2025 03:19:33 hybrid1120 maldet(16087): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1625 files) in progress... Nov 06 2025 03:20:15 hybrid1120 maldet(16087): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1625, malware hits 0, cleaned hits 0, time 346s Nov 06 2025 03:20:15 hybrid1120 maldet(16087): {scan} scan report saved, to view run: maldet --report 251106-0314.16087 Nov 07 2025 04:48:23 hybrid1120 maldet(15636): {update} checking for available updates... Nov 07 2025 04:48:23 hybrid1120 maldet(15636): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 07 2025 04:48:23 hybrid1120 maldet(15636): {update} hashing install files and checking against server... Nov 07 2025 04:48:24 hybrid1120 maldet(15636): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 07 2025 04:48:24 hybrid1120 maldet(15636): {update} latest version already installed. Nov 07 2025 04:48:24 hybrid1120 maldet(15790): {sigup} performing signature update check... Nov 07 2025 04:48:24 hybrid1120 maldet(15790): {sigup} local signature set is version 20251104600740 Nov 07 2025 04:48:24 hybrid1120 maldet(15790): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 07 2025 04:48:25 hybrid1120 maldet(15790): {sigup} latest signature set already installed Nov 07 2025 04:48:25 hybrid1120 maldet(15882): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 07 2025 04:48:25 hybrid1120 maldet(15882): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 07 2025 04:48:25 hybrid1120 maldet(15882): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 07 2025 04:48:25 hybrid1120 maldet(15882): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 07 2025 04:48:25 hybrid1120 maldet(15882): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 07 2025 04:53:12 hybrid1120 maldet(15882): {scan} file list completed in 287s, found 1760 files... Nov 07 2025 04:53:12 hybrid1120 maldet(15882): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1760 files) in progress... Nov 07 2025 04:54:11 hybrid1120 maldet(15882): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1760, malware hits 0, cleaned hits 0, time 346s Nov 07 2025 04:54:11 hybrid1120 maldet(15882): {scan} scan report saved, to view run: maldet --report 251107-0448.15882 Nov 08 2025 03:52:54 hybrid1120 maldet(23229): {update} checking for available updates... Nov 08 2025 03:52:54 hybrid1120 maldet(23229): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 08 2025 03:52:54 hybrid1120 maldet(23229): {update} hashing install files and checking against server... Nov 08 2025 03:52:55 hybrid1120 maldet(23229): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 08 2025 03:52:55 hybrid1120 maldet(23229): {update} latest version already installed. Nov 08 2025 03:52:55 hybrid1120 maldet(23342): {sigup} performing signature update check... Nov 08 2025 03:52:55 hybrid1120 maldet(23342): {sigup} local signature set is version 20251104600740 Nov 08 2025 03:52:55 hybrid1120 maldet(23342): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 08 2025 03:52:55 hybrid1120 maldet(23342): {sigup} new signature set 202511071572609 available Nov 08 2025 03:52:55 hybrid1120 maldet(23342): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 08 2025 03:52:56 hybrid1120 maldet(23342): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 08 2025 03:52:57 hybrid1120 maldet(23342): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Nov 08 2025 03:52:57 hybrid1120 maldet(23342): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 08 2025 03:52:57 hybrid1120 maldet(23342): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 08 2025 03:52:57 hybrid1120 maldet(23342): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Nov 08 2025 03:52:57 hybrid1120 maldet(23342): {sigup} verified md5sum of maldet-sigpack.tgz Nov 08 2025 03:52:58 hybrid1120 maldet(23342): {sigup} unpacked and installed maldet-sigpack.tgz Nov 08 2025 03:52:58 hybrid1120 maldet(23342): {sigup} verified md5sum of maldet-clean.tgz Nov 08 2025 03:52:58 hybrid1120 maldet(23342): {sigup} unpacked and installed maldet-clean.tgz Nov 08 2025 03:52:58 hybrid1120 maldet(23342): {sigup} signature set update completed Nov 08 2025 03:52:58 hybrid1120 maldet(23342): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 08 2025 03:52:58 hybrid1120 maldet(23585): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 08 2025 03:52:58 hybrid1120 maldet(23585): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 08 2025 03:52:58 hybrid1120 maldet(23585): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 08 2025 03:52:58 hybrid1120 maldet(23585): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 08 2025 03:52:58 hybrid1120 maldet(23585): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 08 2025 03:57:53 hybrid1120 maldet(23585): {scan} file list completed in 295s, found 1297 files... Nov 08 2025 03:57:53 hybrid1120 maldet(23585): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1297 files) in progress... Nov 08 2025 03:58:25 hybrid1120 maldet(23585): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1297, malware hits 0, cleaned hits 0, time 327s Nov 08 2025 03:58:25 hybrid1120 maldet(23585): {scan} scan report saved, to view run: maldet --report 251108-0352.23585 Nov 09 2025 04:25:22 hybrid1120 maldet(31122): {update} checking for available updates... Nov 09 2025 04:25:22 hybrid1120 maldet(31122): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 09 2025 04:25:22 hybrid1120 maldet(31122): {update} hashing install files and checking against server... Nov 09 2025 04:25:23 hybrid1120 maldet(31122): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 09 2025 04:25:23 hybrid1120 maldet(31122): {update} latest version already installed. Nov 09 2025 04:25:23 hybrid1120 maldet(31266): {sigup} performing signature update check... Nov 09 2025 04:25:23 hybrid1120 maldet(31266): {sigup} local signature set is version 202511071572609 Nov 09 2025 04:25:24 hybrid1120 maldet(31266): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 09 2025 04:25:24 hybrid1120 maldet(31266): {sigup} latest signature set already installed Nov 09 2025 04:25:24 hybrid1120 maldet(31357): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 09 2025 04:25:24 hybrid1120 maldet(31357): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 09 2025 04:25:24 hybrid1120 maldet(31357): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 09 2025 04:25:24 hybrid1120 maldet(31357): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 09 2025 04:25:24 hybrid1120 maldet(31357): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 09 2025 04:29:58 hybrid1120 maldet(31357): {scan} file list completed in 274s, found 1775 files... Nov 09 2025 04:29:58 hybrid1120 maldet(31357): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1775 files) in progress... Nov 09 2025 04:30:49 hybrid1120 maldet(31357): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1775, malware hits 0, cleaned hits 0, time 325s Nov 09 2025 04:30:49 hybrid1120 maldet(31357): {scan} scan report saved, to view run: maldet --report 251109-0425.31357 Nov 10 2025 03:44:51 hybrid1120 maldet(9522): {update} checking for available updates... Nov 10 2025 03:44:51 hybrid1120 maldet(9522): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 10 2025 03:44:51 hybrid1120 maldet(9522): {update} hashing install files and checking against server... Nov 10 2025 03:44:52 hybrid1120 maldet(9522): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 10 2025 03:44:52 hybrid1120 maldet(9522): {update} latest version already installed. Nov 10 2025 03:44:52 hybrid1120 maldet(9652): {sigup} performing signature update check... Nov 10 2025 03:44:52 hybrid1120 maldet(9652): {sigup} local signature set is version 202511071572609 Nov 10 2025 03:44:52 hybrid1120 maldet(9652): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 10 2025 03:44:52 hybrid1120 maldet(9652): {sigup} latest signature set already installed Nov 10 2025 03:44:52 hybrid1120 maldet(9741): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 10 2025 03:44:53 hybrid1120 maldet(9741): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 10 2025 03:44:53 hybrid1120 maldet(9741): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 10 2025 03:44:53 hybrid1120 maldet(9741): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 10 2025 03:44:53 hybrid1120 maldet(9741): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 10 2025 03:48:37 hybrid1120 maldet(9741): {scan} file list completed in 224s, found 1553 files... Nov 10 2025 03:48:38 hybrid1120 maldet(9741): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1553 files) in progress... Nov 10 2025 03:49:15 hybrid1120 maldet(9741): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1553, malware hits 0, cleaned hits 0, time 263s Nov 10 2025 03:49:15 hybrid1120 maldet(9741): {scan} scan report saved, to view run: maldet --report 251110-0344.9741 Nov 11 2025 03:53:09 hybrid1120 maldet(18398): {update} checking for available updates... Nov 11 2025 03:53:10 hybrid1120 maldet(18398): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 11 2025 03:53:10 hybrid1120 maldet(18398): {update} hashing install files and checking against server... Nov 11 2025 03:53:10 hybrid1120 maldet(18398): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 11 2025 03:53:10 hybrid1120 maldet(18398): {update} latest version already installed. Nov 11 2025 03:53:10 hybrid1120 maldet(18529): {sigup} performing signature update check... Nov 11 2025 03:53:10 hybrid1120 maldet(18529): {sigup} local signature set is version 202511071572609 Nov 11 2025 03:53:11 hybrid1120 maldet(18529): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 11 2025 03:53:11 hybrid1120 maldet(18529): {sigup} new signature set 20251110477208 available Nov 11 2025 03:53:11 hybrid1120 maldet(18529): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 11 2025 03:53:12 hybrid1120 maldet(18529): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 11 2025 03:53:12 hybrid1120 maldet(18529): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Nov 11 2025 03:53:12 hybrid1120 maldet(18529): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 11 2025 03:53:12 hybrid1120 maldet(18529): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 11 2025 03:53:13 hybrid1120 maldet(18529): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Nov 11 2025 03:53:13 hybrid1120 maldet(18529): {sigup} verified md5sum of maldet-sigpack.tgz Nov 11 2025 03:53:13 hybrid1120 maldet(18529): {sigup} unpacked and installed maldet-sigpack.tgz Nov 11 2025 03:53:14 hybrid1120 maldet(18529): {sigup} verified md5sum of maldet-clean.tgz Nov 11 2025 03:53:14 hybrid1120 maldet(18529): {sigup} unpacked and installed maldet-clean.tgz Nov 11 2025 03:53:14 hybrid1120 maldet(18529): {sigup} signature set update completed Nov 11 2025 03:53:14 hybrid1120 maldet(18529): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 11 2025 03:53:14 hybrid1120 maldet(18740): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 11 2025 03:53:14 hybrid1120 maldet(18740): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 11 2025 03:53:14 hybrid1120 maldet(18740): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 11 2025 03:53:14 hybrid1120 maldet(18740): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 11 2025 03:53:14 hybrid1120 maldet(18740): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 11 2025 03:58:27 hybrid1120 maldet(18740): {scan} file list completed in 313s, found 877 files... Nov 11 2025 03:58:27 hybrid1120 maldet(18740): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (877 files) in progress... Nov 11 2025 03:58:56 hybrid1120 maldet(18740): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 877, malware hits 0, cleaned hits 0, time 342s Nov 11 2025 03:58:56 hybrid1120 maldet(18740): {scan} scan report saved, to view run: maldet --report 251111-0353.18740 Nov 12 2025 04:55:56 hybrid1120 maldet(7443): {update} checking for available updates... Nov 12 2025 04:55:56 hybrid1120 maldet(7443): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 12 2025 04:55:56 hybrid1120 maldet(7443): {update} hashing install files and checking against server... Nov 12 2025 04:55:57 hybrid1120 maldet(7443): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 12 2025 04:55:57 hybrid1120 maldet(7443): {update} latest version already installed. Nov 12 2025 04:55:57 hybrid1120 maldet(7562): {sigup} performing signature update check... Nov 12 2025 04:55:57 hybrid1120 maldet(7562): {sigup} local signature set is version 20251110477208 Nov 12 2025 04:55:58 hybrid1120 maldet(7562): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 12 2025 04:55:58 hybrid1120 maldet(7562): {sigup} latest signature set already installed Nov 12 2025 04:55:58 hybrid1120 maldet(7666): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 12 2025 04:55:58 hybrid1120 maldet(7666): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 12 2025 04:55:58 hybrid1120 maldet(7666): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 12 2025 04:55:58 hybrid1120 maldet(7666): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 12 2025 04:55:58 hybrid1120 maldet(7666): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 12 2025 05:01:04 hybrid1120 maldet(7666): {scan} file list completed in 306s, found 1666 files... Nov 12 2025 05:01:04 hybrid1120 maldet(7666): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1666 files) in progress... Nov 12 2025 05:01:56 hybrid1120 maldet(7666): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1666, malware hits 0, cleaned hits 0, time 358s Nov 12 2025 05:01:56 hybrid1120 maldet(7666): {scan} scan report saved, to view run: maldet --report 251112-0455.7666 Nov 13 2025 03:52:57 hybrid1120 maldet(18107): {update} checking for available updates... Nov 13 2025 03:52:58 hybrid1120 maldet(18107): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 13 2025 03:52:58 hybrid1120 maldet(18107): {update} hashing install files and checking against server... Nov 13 2025 03:52:59 hybrid1120 maldet(18107): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 13 2025 03:52:59 hybrid1120 maldet(18107): {update} latest version already installed. Nov 13 2025 03:52:59 hybrid1120 maldet(18222): {sigup} performing signature update check... Nov 13 2025 03:52:59 hybrid1120 maldet(18222): {sigup} local signature set is version 20251110477208 Nov 13 2025 03:52:59 hybrid1120 maldet(18222): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 13 2025 03:52:59 hybrid1120 maldet(18222): {sigup} latest signature set already installed Nov 13 2025 03:52:59 hybrid1120 maldet(18311): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 13 2025 03:53:00 hybrid1120 maldet(18311): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 13 2025 03:53:00 hybrid1120 maldet(18311): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 13 2025 03:53:00 hybrid1120 maldet(18311): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 13 2025 03:53:00 hybrid1120 maldet(18311): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 13 2025 03:57:56 hybrid1120 maldet(18311): {scan} file list completed in 296s, found 1415 files... Nov 13 2025 03:57:56 hybrid1120 maldet(18311): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1415 files) in progress... Nov 13 2025 03:58:31 hybrid1120 maldet(18311): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1415, malware hits 0, cleaned hits 0, time 332s Nov 13 2025 03:58:31 hybrid1120 maldet(18311): {scan} scan report saved, to view run: maldet --report 251113-0352.18311 Nov 14 2025 03:46:44 hybrid1120 maldet(16295): {update} checking for available updates... Nov 14 2025 03:46:44 hybrid1120 maldet(16295): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 14 2025 03:46:44 hybrid1120 maldet(16295): {update} hashing install files and checking against server... Nov 14 2025 03:46:44 hybrid1120 maldet(16295): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 14 2025 03:46:44 hybrid1120 maldet(16295): {update} latest version already installed. Nov 14 2025 03:46:44 hybrid1120 maldet(16418): {sigup} performing signature update check... Nov 14 2025 03:46:44 hybrid1120 maldet(16418): {sigup} local signature set is version 20251110477208 Nov 14 2025 03:46:45 hybrid1120 maldet(16418): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 14 2025 03:46:45 hybrid1120 maldet(16418): {sigup} new signature set 202511131448686 available Nov 14 2025 03:46:45 hybrid1120 maldet(16418): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 14 2025 03:46:45 hybrid1120 maldet(16418): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 14 2025 03:46:46 hybrid1120 maldet(16418): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Nov 14 2025 03:46:46 hybrid1120 maldet(16418): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 14 2025 03:46:46 hybrid1120 maldet(16418): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 14 2025 03:46:46 hybrid1120 maldet(16418): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Nov 14 2025 03:46:46 hybrid1120 maldet(16418): {sigup} verified md5sum of maldet-sigpack.tgz Nov 14 2025 03:46:46 hybrid1120 maldet(16418): {sigup} unpacked and installed maldet-sigpack.tgz Nov 14 2025 03:46:47 hybrid1120 maldet(16418): {sigup} verified md5sum of maldet-clean.tgz Nov 14 2025 03:46:47 hybrid1120 maldet(16418): {sigup} unpacked and installed maldet-clean.tgz Nov 14 2025 03:46:47 hybrid1120 maldet(16418): {sigup} signature set update completed Nov 14 2025 03:46:47 hybrid1120 maldet(16418): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 14 2025 03:46:47 hybrid1120 maldet(16657): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 14 2025 03:46:47 hybrid1120 maldet(16657): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 14 2025 03:46:47 hybrid1120 maldet(16657): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 14 2025 03:46:47 hybrid1120 maldet(16657): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 14 2025 03:46:47 hybrid1120 maldet(16657): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 14 2025 03:51:27 hybrid1120 maldet(16657): {scan} file list completed in 280s, found 1884 files... Nov 14 2025 03:51:27 hybrid1120 maldet(16657): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1884 files) in progress... Nov 14 2025 03:52:26 hybrid1120 maldet(16657): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1884, malware hits 0, cleaned hits 0, time 339s Nov 14 2025 03:52:26 hybrid1120 maldet(16657): {scan} scan report saved, to view run: maldet --report 251114-0346.16657 Nov 15 2025 03:07:26 hybrid1120 maldet(2766): {update} checking for available updates... Nov 15 2025 03:07:27 hybrid1120 maldet(2766): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 15 2025 03:07:27 hybrid1120 maldet(2766): {update} hashing install files and checking against server... Nov 15 2025 03:07:27 hybrid1120 maldet(2766): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 15 2025 03:07:27 hybrid1120 maldet(2766): {update} latest version already installed. Nov 15 2025 03:07:27 hybrid1120 maldet(2899): {sigup} performing signature update check... Nov 15 2025 03:07:27 hybrid1120 maldet(2899): {sigup} local signature set is version 202511131448686 Nov 15 2025 03:07:27 hybrid1120 maldet(2899): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 15 2025 03:07:27 hybrid1120 maldet(2899): {sigup} latest signature set already installed Nov 15 2025 03:07:27 hybrid1120 maldet(2993): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 15 2025 03:07:28 hybrid1120 maldet(2993): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 15 2025 03:07:28 hybrid1120 maldet(2993): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 15 2025 03:07:28 hybrid1120 maldet(2993): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 15 2025 03:07:28 hybrid1120 maldet(2993): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 15 2025 03:13:37 hybrid1120 maldet(2993): {scan} file list completed in 369s, found 1440 files... Nov 15 2025 03:13:37 hybrid1120 maldet(2993): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1440 files) in progress... Nov 15 2025 03:14:17 hybrid1120 maldet(2993): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1440, malware hits 0, cleaned hits 0, time 410s Nov 15 2025 03:14:17 hybrid1120 maldet(2993): {scan} scan report saved, to view run: maldet --report 251115-0307.2993 Nov 16 2025 05:10:21 hybrid1120 maldet(30488): {update} checking for available updates... Nov 16 2025 05:10:21 hybrid1120 maldet(30488): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 16 2025 05:10:21 hybrid1120 maldet(30488): {update} hashing install files and checking against server... Nov 16 2025 05:10:22 hybrid1120 maldet(30488): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 16 2025 05:10:22 hybrid1120 maldet(30488): {update} latest version already installed. Nov 16 2025 05:10:22 hybrid1120 maldet(30615): {sigup} performing signature update check... Nov 16 2025 05:10:22 hybrid1120 maldet(30615): {sigup} local signature set is version 202511131448686 Nov 16 2025 05:10:22 hybrid1120 maldet(30615): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 16 2025 05:10:22 hybrid1120 maldet(30615): {sigup} latest signature set already installed Nov 16 2025 05:10:22 hybrid1120 maldet(30704): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 16 2025 05:10:22 hybrid1120 maldet(30704): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 16 2025 05:10:22 hybrid1120 maldet(30704): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 16 2025 05:10:22 hybrid1120 maldet(30704): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 16 2025 05:10:22 hybrid1120 maldet(30704): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 16 2025 05:13:53 hybrid1120 maldet(30704): {scan} file list completed in 211s, found 1909 files... Nov 16 2025 05:13:53 hybrid1120 maldet(30704): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1909 files) in progress... Nov 16 2025 05:14:40 hybrid1120 maldet(30704): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1909, malware hits 0, cleaned hits 0, time 258s Nov 16 2025 05:14:40 hybrid1120 maldet(30704): {scan} scan report saved, to view run: maldet --report 251116-0510.30704 Nov 17 2025 03:28:02 hybrid1120 maldet(13127): {update} checking for available updates... Nov 17 2025 03:28:02 hybrid1120 maldet(13127): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 17 2025 03:28:02 hybrid1120 maldet(13127): {update} hashing install files and checking against server... Nov 17 2025 03:28:03 hybrid1120 maldet(13127): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 17 2025 03:28:03 hybrid1120 maldet(13127): {update} latest version already installed. Nov 17 2025 03:28:03 hybrid1120 maldet(13264): {sigup} performing signature update check... Nov 17 2025 03:28:03 hybrid1120 maldet(13264): {sigup} local signature set is version 202511131448686 Nov 17 2025 03:28:03 hybrid1120 maldet(13264): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 17 2025 03:28:03 hybrid1120 maldet(13264): {sigup} new signature set 202511162420078 available Nov 17 2025 03:28:03 hybrid1120 maldet(13264): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 17 2025 03:28:04 hybrid1120 maldet(13264): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 17 2025 03:28:04 hybrid1120 maldet(13264): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Nov 17 2025 03:28:04 hybrid1120 maldet(13264): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 17 2025 03:28:05 hybrid1120 maldet(13264): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 17 2025 03:28:05 hybrid1120 maldet(13264): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Nov 17 2025 03:28:05 hybrid1120 maldet(13264): {sigup} verified md5sum of maldet-sigpack.tgz Nov 17 2025 03:28:06 hybrid1120 maldet(13264): {sigup} unpacked and installed maldet-sigpack.tgz Nov 17 2025 03:28:06 hybrid1120 maldet(13264): {sigup} verified md5sum of maldet-clean.tgz Nov 17 2025 03:28:06 hybrid1120 maldet(13264): {sigup} unpacked and installed maldet-clean.tgz Nov 17 2025 03:28:06 hybrid1120 maldet(13264): {sigup} signature set update completed Nov 17 2025 03:28:06 hybrid1120 maldet(13264): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 17 2025 03:28:06 hybrid1120 maldet(13472): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 17 2025 03:28:06 hybrid1120 maldet(13472): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 17 2025 03:28:06 hybrid1120 maldet(13472): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 17 2025 03:28:06 hybrid1120 maldet(13472): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 17 2025 03:28:06 hybrid1120 maldet(13472): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 17 2025 03:32:31 hybrid1120 maldet(13472): {scan} file list completed in 265s, found 1303 files... Nov 17 2025 03:32:31 hybrid1120 maldet(13472): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1303 files) in progress... Nov 17 2025 03:33:03 hybrid1120 maldet(13472): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1303, malware hits 0, cleaned hits 0, time 297s Nov 17 2025 03:33:03 hybrid1120 maldet(13472): {scan} scan report saved, to view run: maldet --report 251117-0328.13472 Nov 18 2025 03:02:11 hybrid1120 maldet(20936): {update} checking for available updates... Nov 18 2025 03:02:31 hybrid1120 maldet(20936): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 18 2025 03:02:31 hybrid1120 maldet(20936): {update} hashing install files and checking against server... Nov 18 2025 03:02:56 hybrid1120 maldet(20936): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 18 2025 03:02:56 hybrid1120 maldet(20936): {update} latest version already installed. Nov 18 2025 03:02:56 hybrid1120 maldet(21357): {sigup} performing signature update check... Nov 18 2025 03:02:56 hybrid1120 maldet(21357): {sigup} local signature set is version 202511162420078 Nov 18 2025 03:03:18 hybrid1120 maldet(21357): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 18 2025 03:03:18 hybrid1120 maldet(21357): {sigup} latest signature set already installed Nov 18 2025 03:03:18 hybrid1120 maldet(21618): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 18 2025 03:03:19 hybrid1120 maldet(21618): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 18 2025 03:03:19 hybrid1120 maldet(21618): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 18 2025 03:03:19 hybrid1120 maldet(21618): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 18 2025 03:03:19 hybrid1120 maldet(21618): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 18 2025 03:09:40 hybrid1120 maldet(21618): {scan} file list completed in 381s, found 1045 files... Nov 18 2025 03:09:40 hybrid1120 maldet(21618): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1045 files) in progress... Nov 18 2025 03:10:16 hybrid1120 maldet(21618): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1045, malware hits 0, cleaned hits 0, time 418s Nov 18 2025 03:10:16 hybrid1120 maldet(21618): {scan} scan report saved, to view run: maldet --report 251118-0303.21618 Nov 19 2025 04:34:07 hybrid1120 maldet(18801): {update} checking for available updates... Nov 19 2025 04:34:07 hybrid1120 maldet(18801): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 19 2025 04:34:07 hybrid1120 maldet(18801): {update} hashing install files and checking against server... Nov 19 2025 04:34:08 hybrid1120 maldet(18801): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 19 2025 04:34:08 hybrid1120 maldet(18801): {update} latest version already installed. Nov 19 2025 04:34:08 hybrid1120 maldet(18916): {sigup} performing signature update check... Nov 19 2025 04:34:08 hybrid1120 maldet(18916): {sigup} local signature set is version 202511162420078 Nov 19 2025 04:34:08 hybrid1120 maldet(18916): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 19 2025 04:34:09 hybrid1120 maldet(18916): {sigup} latest signature set already installed Nov 19 2025 04:34:09 hybrid1120 maldet(19005): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 19 2025 04:34:09 hybrid1120 maldet(19005): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 19 2025 04:34:09 hybrid1120 maldet(19005): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 19 2025 04:34:09 hybrid1120 maldet(19005): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 19 2025 04:34:09 hybrid1120 maldet(19005): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 19 2025 04:39:22 hybrid1120 maldet(19005): {scan} file list completed in 313s, found 1330 files... Nov 19 2025 04:39:22 hybrid1120 maldet(19005): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1330 files) in progress... Nov 19 2025 04:39:55 hybrid1120 maldet(19005): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1330, malware hits 0, cleaned hits 0, time 346s Nov 19 2025 04:39:55 hybrid1120 maldet(19005): {scan} scan report saved, to view run: maldet --report 251119-0434.19005 Nov 20 2025 03:12:19 hybrid1120 maldet(2375): {update} checking for available updates... Nov 20 2025 03:12:20 hybrid1120 maldet(2375): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 20 2025 03:12:20 hybrid1120 maldet(2375): {update} hashing install files and checking against server... Nov 20 2025 03:12:20 hybrid1120 maldet(2375): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 20 2025 03:12:20 hybrid1120 maldet(2375): {update} latest version already installed. Nov 20 2025 03:12:20 hybrid1120 maldet(2491): {sigup} performing signature update check... Nov 20 2025 03:12:20 hybrid1120 maldet(2491): {sigup} local signature set is version 202511162420078 Nov 20 2025 03:12:20 hybrid1120 maldet(2491): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 20 2025 03:12:20 hybrid1120 maldet(2491): {sigup} latest signature set already installed Nov 20 2025 03:12:20 hybrid1120 maldet(2579): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 20 2025 03:12:21 hybrid1120 maldet(2579): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 20 2025 03:12:21 hybrid1120 maldet(2579): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 20 2025 03:12:21 hybrid1120 maldet(2579): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 20 2025 03:12:21 hybrid1120 maldet(2579): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 20 2025 03:17:27 hybrid1120 maldet(2579): {scan} file list completed in 306s, found 1592 files... Nov 20 2025 03:17:27 hybrid1120 maldet(2579): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1592 files) in progress... Nov 20 2025 03:18:06 hybrid1120 maldet(2579): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1592, malware hits 0, cleaned hits 0, time 346s Nov 20 2025 03:18:06 hybrid1120 maldet(2579): {scan} scan report saved, to view run: maldet --report 251120-0312.2579 Nov 21 2025 03:57:16 hybrid1120 maldet(25535): {update} checking for available updates... Nov 21 2025 03:57:17 hybrid1120 maldet(25535): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 21 2025 03:57:17 hybrid1120 maldet(25535): {update} hashing install files and checking against server... Nov 21 2025 03:57:18 hybrid1120 maldet(25535): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 21 2025 03:57:18 hybrid1120 maldet(25535): {update} latest version already installed. Nov 21 2025 03:57:18 hybrid1120 maldet(25661): {sigup} performing signature update check... Nov 21 2025 03:57:18 hybrid1120 maldet(25661): {sigup} local signature set is version 202511162420078 Nov 21 2025 03:57:18 hybrid1120 maldet(25661): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 21 2025 03:57:18 hybrid1120 maldet(25661): {sigup} latest signature set already installed Nov 21 2025 03:57:18 hybrid1120 maldet(25751): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 21 2025 03:57:18 hybrid1120 maldet(25751): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 21 2025 03:57:18 hybrid1120 maldet(25751): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 21 2025 03:57:18 hybrid1120 maldet(25751): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 21 2025 03:57:18 hybrid1120 maldet(25751): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 21 2025 04:03:11 hybrid1120 maldet(25751): {scan} file list completed in 353s, found 1616 files... Nov 21 2025 04:03:11 hybrid1120 maldet(25751): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1616 files) in progress... Nov 21 2025 04:03:59 hybrid1120 maldet(25751): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1616, malware hits 0, cleaned hits 0, time 401s Nov 21 2025 04:03:59 hybrid1120 maldet(25751): {scan} scan report saved, to view run: maldet --report 251121-0357.25751 Nov 22 2025 04:00:10 hybrid1120 maldet(28133): {update} checking for available updates... Nov 22 2025 04:00:11 hybrid1120 maldet(28133): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 22 2025 04:00:11 hybrid1120 maldet(28133): {update} hashing install files and checking against server... Nov 22 2025 04:00:11 hybrid1120 maldet(28133): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 22 2025 04:00:11 hybrid1120 maldet(28133): {update} latest version already installed. Nov 22 2025 04:00:11 hybrid1120 maldet(28249): {sigup} performing signature update check... Nov 22 2025 04:00:11 hybrid1120 maldet(28249): {sigup} local signature set is version 202511162420078 Nov 22 2025 04:00:12 hybrid1120 maldet(28249): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 22 2025 04:00:12 hybrid1120 maldet(28249): {sigup} latest signature set already installed Nov 22 2025 04:00:12 hybrid1120 maldet(28339): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 22 2025 04:00:12 hybrid1120 maldet(28339): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 22 2025 04:00:12 hybrid1120 maldet(28339): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 22 2025 04:00:12 hybrid1120 maldet(28339): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 22 2025 04:00:12 hybrid1120 maldet(28339): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 22 2025 04:06:07 hybrid1120 maldet(28339): {scan} file list completed in 355s, found 1892 files... Nov 22 2025 04:06:07 hybrid1120 maldet(28339): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1892 files) in progress... Nov 22 2025 04:07:05 hybrid1120 maldet(28339): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1892, malware hits 0, cleaned hits 0, time 413s Nov 22 2025 04:07:05 hybrid1120 maldet(28339): {scan} scan report saved, to view run: maldet --report 251122-0400.28339 Nov 23 2025 04:03:00 hybrid1120 maldet(12274): {update} checking for available updates... Nov 23 2025 04:03:01 hybrid1120 maldet(12274): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 23 2025 04:03:01 hybrid1120 maldet(12274): {update} hashing install files and checking against server... Nov 23 2025 04:03:02 hybrid1120 maldet(12274): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 23 2025 04:03:02 hybrid1120 maldet(12274): {update} latest version already installed. Nov 23 2025 04:03:02 hybrid1120 maldet(12410): {sigup} performing signature update check... Nov 23 2025 04:03:02 hybrid1120 maldet(12410): {sigup} local signature set is version 202511162420078 Nov 23 2025 04:03:02 hybrid1120 maldet(12410): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 23 2025 04:03:02 hybrid1120 maldet(12410): {sigup} new signature set 20251122699816 available Nov 23 2025 04:03:02 hybrid1120 maldet(12410): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 23 2025 04:03:03 hybrid1120 maldet(12410): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 23 2025 04:03:04 hybrid1120 maldet(12410): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Nov 23 2025 04:03:04 hybrid1120 maldet(12410): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 23 2025 04:03:04 hybrid1120 maldet(12410): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 23 2025 04:03:04 hybrid1120 maldet(12410): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Nov 23 2025 04:03:04 hybrid1120 maldet(12410): {sigup} verified md5sum of maldet-sigpack.tgz Nov 23 2025 04:03:05 hybrid1120 maldet(12410): {sigup} unpacked and installed maldet-sigpack.tgz Nov 23 2025 04:03:05 hybrid1120 maldet(12410): {sigup} verified md5sum of maldet-clean.tgz Nov 23 2025 04:03:05 hybrid1120 maldet(12410): {sigup} unpacked and installed maldet-clean.tgz Nov 23 2025 04:03:05 hybrid1120 maldet(12410): {sigup} signature set update completed Nov 23 2025 04:03:05 hybrid1120 maldet(12410): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 23 2025 04:03:05 hybrid1120 maldet(12626): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 23 2025 04:03:05 hybrid1120 maldet(12626): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 23 2025 04:03:05 hybrid1120 maldet(12626): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 23 2025 04:03:05 hybrid1120 maldet(12626): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 23 2025 04:03:05 hybrid1120 maldet(12626): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 23 2025 04:08:48 hybrid1120 maldet(12626): {scan} file list completed in 343s, found 1175 files... Nov 23 2025 04:08:48 hybrid1120 maldet(12626): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1175 files) in progress... Nov 23 2025 04:09:18 hybrid1120 maldet(12626): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1175, malware hits 0, cleaned hits 0, time 373s Nov 23 2025 04:09:18 hybrid1120 maldet(12626): {scan} scan report saved, to view run: maldet --report 251123-0403.12626 Nov 24 2025 04:29:52 hybrid1120 maldet(13208): {update} checking for available updates... Nov 24 2025 04:29:52 hybrid1120 maldet(13208): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 24 2025 04:29:52 hybrid1120 maldet(13208): {update} hashing install files and checking against server... Nov 24 2025 04:29:52 hybrid1120 maldet(13208): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 24 2025 04:29:52 hybrid1120 maldet(13208): {update} latest version already installed. Nov 24 2025 04:29:52 hybrid1120 maldet(13319): {sigup} performing signature update check... Nov 24 2025 04:29:52 hybrid1120 maldet(13319): {sigup} local signature set is version 20251122699816 Nov 24 2025 04:29:53 hybrid1120 maldet(13319): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 24 2025 04:29:53 hybrid1120 maldet(13319): {sigup} latest signature set already installed Nov 24 2025 04:29:53 hybrid1120 maldet(13409): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 24 2025 04:29:53 hybrid1120 maldet(13409): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 24 2025 04:29:53 hybrid1120 maldet(13409): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 24 2025 04:29:53 hybrid1120 maldet(13409): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 24 2025 04:29:53 hybrid1120 maldet(13409): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 24 2025 04:34:28 hybrid1120 maldet(13409): {scan} file list completed in 275s, found 3252 files... Nov 24 2025 04:34:28 hybrid1120 maldet(13409): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (3252 files) in progress... Nov 24 2025 04:35:49 hybrid1120 maldet(13409): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 3252, malware hits 0, cleaned hits 0, time 356s Nov 24 2025 04:35:49 hybrid1120 maldet(13409): {scan} scan report saved, to view run: maldet --report 251124-0429.13409 Nov 25 2025 05:00:41 hybrid1120 maldet(19529): {update} checking for available updates... Nov 25 2025 05:00:41 hybrid1120 maldet(19529): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 25 2025 05:00:41 hybrid1120 maldet(19529): {update} hashing install files and checking against server... Nov 25 2025 05:00:42 hybrid1120 maldet(19529): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 25 2025 05:00:42 hybrid1120 maldet(19529): {update} latest version already installed. Nov 25 2025 05:00:42 hybrid1120 maldet(19661): {sigup} performing signature update check... Nov 25 2025 05:00:42 hybrid1120 maldet(19661): {sigup} local signature set is version 20251122699816 Nov 25 2025 05:00:42 hybrid1120 maldet(19661): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 25 2025 05:00:42 hybrid1120 maldet(19661): {sigup} latest signature set already installed Nov 25 2025 05:00:42 hybrid1120 maldet(19753): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 25 2025 05:00:43 hybrid1120 maldet(19753): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 25 2025 05:00:43 hybrid1120 maldet(19753): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 25 2025 05:00:43 hybrid1120 maldet(19753): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 25 2025 05:00:43 hybrid1120 maldet(19753): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 25 2025 05:05:46 hybrid1120 maldet(19753): {scan} file list completed in 303s, found 1194 files... Nov 25 2025 05:05:46 hybrid1120 maldet(19753): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1194 files) in progress... Nov 25 2025 05:06:19 hybrid1120 maldet(19753): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1194, malware hits 0, cleaned hits 0, time 337s Nov 25 2025 05:06:19 hybrid1120 maldet(19753): {scan} scan report saved, to view run: maldet --report 251125-0500.19753 Nov 26 2025 04:43:01 hybrid1120 maldet(19726): {update} checking for available updates... Nov 26 2025 04:43:01 hybrid1120 maldet(19726): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 26 2025 04:43:01 hybrid1120 maldet(19726): {update} hashing install files and checking against server... Nov 26 2025 04:43:02 hybrid1120 maldet(19726): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 26 2025 04:43:02 hybrid1120 maldet(19726): {update} latest version already installed. Nov 26 2025 04:43:02 hybrid1120 maldet(19852): {sigup} performing signature update check... Nov 26 2025 04:43:02 hybrid1120 maldet(19852): {sigup} local signature set is version 20251122699816 Nov 26 2025 04:43:02 hybrid1120 maldet(19852): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 26 2025 04:43:02 hybrid1120 maldet(19852): {sigup} new signature set 202511251727973 available Nov 26 2025 04:43:02 hybrid1120 maldet(19852): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 26 2025 04:43:04 hybrid1120 maldet(19852): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 26 2025 04:43:04 hybrid1120 maldet(19852): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Nov 26 2025 04:43:04 hybrid1120 maldet(19852): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 26 2025 04:43:04 hybrid1120 maldet(19852): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 26 2025 04:43:05 hybrid1120 maldet(19852): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Nov 26 2025 04:43:05 hybrid1120 maldet(19852): {sigup} verified md5sum of maldet-sigpack.tgz Nov 26 2025 04:43:05 hybrid1120 maldet(19852): {sigup} unpacked and installed maldet-sigpack.tgz Nov 26 2025 04:43:05 hybrid1120 maldet(19852): {sigup} verified md5sum of maldet-clean.tgz Nov 26 2025 04:43:05 hybrid1120 maldet(19852): {sigup} unpacked and installed maldet-clean.tgz Nov 26 2025 04:43:05 hybrid1120 maldet(19852): {sigup} signature set update completed Nov 26 2025 04:43:05 hybrid1120 maldet(19852): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 26 2025 04:43:06 hybrid1120 maldet(20065): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 26 2025 04:43:06 hybrid1120 maldet(20065): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 26 2025 04:43:06 hybrid1120 maldet(20065): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 26 2025 04:43:06 hybrid1120 maldet(20065): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 26 2025 04:43:06 hybrid1120 maldet(20065): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 26 2025 04:46:52 hybrid1120 maldet(20065): {scan} file list completed in 226s, found 1281 files... Nov 26 2025 04:46:52 hybrid1120 maldet(20065): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1281 files) in progress... Nov 26 2025 04:47:24 hybrid1120 maldet(20065): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1281, malware hits 0, cleaned hits 0, time 258s Nov 26 2025 04:47:24 hybrid1120 maldet(20065): {scan} scan report saved, to view run: maldet --report 251126-0443.20065 Nov 27 2025 05:05:17 hybrid1120 maldet(18175): {update} checking for available updates... Nov 27 2025 05:05:18 hybrid1120 maldet(18175): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 27 2025 05:05:18 hybrid1120 maldet(18175): {update} hashing install files and checking against server... Nov 27 2025 05:05:18 hybrid1120 maldet(18175): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 27 2025 05:05:18 hybrid1120 maldet(18175): {update} latest version already installed. Nov 27 2025 05:05:18 hybrid1120 maldet(18314): {sigup} performing signature update check... Nov 27 2025 05:05:18 hybrid1120 maldet(18314): {sigup} local signature set is version 202511251727973 Nov 27 2025 05:05:19 hybrid1120 maldet(18314): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 27 2025 05:05:19 hybrid1120 maldet(18314): {sigup} latest signature set already installed Nov 27 2025 05:05:19 hybrid1120 maldet(18406): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 27 2025 05:05:19 hybrid1120 maldet(18406): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 27 2025 05:05:19 hybrid1120 maldet(18406): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 27 2025 05:05:19 hybrid1120 maldet(18406): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 27 2025 05:05:19 hybrid1120 maldet(18406): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 27 2025 05:09:39 hybrid1120 maldet(18406): {scan} file list completed in 260s, found 1326 files... Nov 27 2025 05:09:39 hybrid1120 maldet(18406): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1326 files) in progress... Nov 27 2025 05:10:12 hybrid1120 maldet(18406): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1326, malware hits 0, cleaned hits 0, time 293s Nov 27 2025 05:10:12 hybrid1120 maldet(18406): {scan} scan report saved, to view run: maldet --report 251127-0505.18406 Nov 28 2025 03:44:03 hybrid1120 maldet(10696): {update} checking for available updates... Nov 28 2025 03:44:04 hybrid1120 maldet(10696): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 28 2025 03:44:04 hybrid1120 maldet(10696): {update} hashing install files and checking against server... Nov 28 2025 03:44:04 hybrid1120 maldet(10696): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 28 2025 03:44:04 hybrid1120 maldet(10696): {update} latest version already installed. Nov 28 2025 03:44:04 hybrid1120 maldet(10818): {sigup} performing signature update check... Nov 28 2025 03:44:04 hybrid1120 maldet(10818): {sigup} local signature set is version 202511251727973 Nov 28 2025 03:44:05 hybrid1120 maldet(10818): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 28 2025 03:44:05 hybrid1120 maldet(10818): {sigup} latest signature set already installed Nov 28 2025 03:44:05 hybrid1120 maldet(10910): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 28 2025 03:44:05 hybrid1120 maldet(10910): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 28 2025 03:44:05 hybrid1120 maldet(10910): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 28 2025 03:44:05 hybrid1120 maldet(10910): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 28 2025 03:44:05 hybrid1120 maldet(10910): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 28 2025 03:48:37 hybrid1120 maldet(10910): {scan} file list completed in 272s, found 1967 files... Nov 28 2025 03:48:37 hybrid1120 maldet(10910): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1967 files) in progress... Nov 28 2025 03:49:26 hybrid1120 maldet(10910): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1967, malware hits 0, cleaned hits 0, time 321s Nov 28 2025 03:49:26 hybrid1120 maldet(10910): {scan} scan report saved, to view run: maldet --report 251128-0344.10910 Nov 29 2025 03:05:54 hybrid1120 maldet(16213): {update} checking for available updates... Nov 29 2025 03:05:55 hybrid1120 maldet(16213): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 29 2025 03:05:55 hybrid1120 maldet(16213): {update} hashing install files and checking against server... Nov 29 2025 03:05:55 hybrid1120 maldet(16213): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 29 2025 03:05:55 hybrid1120 maldet(16213): {update} latest version already installed. Nov 29 2025 03:05:55 hybrid1120 maldet(16335): {sigup} performing signature update check... Nov 29 2025 03:05:55 hybrid1120 maldet(16335): {sigup} local signature set is version 202511251727973 Nov 29 2025 03:05:56 hybrid1120 maldet(16335): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 29 2025 03:05:56 hybrid1120 maldet(16335): {sigup} new signature set 202511282700055 available Nov 29 2025 03:05:56 hybrid1120 maldet(16335): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 29 2025 03:05:57 hybrid1120 maldet(16335): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 29 2025 03:05:57 hybrid1120 maldet(16335): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Nov 29 2025 03:05:57 hybrid1120 maldet(16335): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 29 2025 03:05:58 hybrid1120 maldet(16335): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 29 2025 03:05:58 hybrid1120 maldet(16335): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Nov 29 2025 03:05:58 hybrid1120 maldet(16335): {sigup} verified md5sum of maldet-sigpack.tgz Nov 29 2025 03:05:59 hybrid1120 maldet(16335): {sigup} unpacked and installed maldet-sigpack.tgz Nov 29 2025 03:05:59 hybrid1120 maldet(16335): {sigup} verified md5sum of maldet-clean.tgz Nov 29 2025 03:05:59 hybrid1120 maldet(16335): {sigup} unpacked and installed maldet-clean.tgz Nov 29 2025 03:05:59 hybrid1120 maldet(16335): {sigup} signature set update completed Nov 29 2025 03:05:59 hybrid1120 maldet(16335): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 29 2025 03:05:59 hybrid1120 maldet(16581): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 29 2025 03:05:59 hybrid1120 maldet(16581): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 29 2025 03:05:59 hybrid1120 maldet(16581): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 29 2025 03:05:59 hybrid1120 maldet(16581): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 29 2025 03:05:59 hybrid1120 maldet(16581): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 29 2025 03:12:11 hybrid1120 maldet(16581): {scan} file list completed in 372s, found 1538 files... Nov 29 2025 03:12:11 hybrid1120 maldet(16581): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1538 files) in progress... Nov 29 2025 03:13:01 hybrid1120 maldet(16581): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1538, malware hits 0, cleaned hits 0, time 422s Nov 29 2025 03:13:01 hybrid1120 maldet(16581): {scan} scan report saved, to view run: maldet --report 251129-0305.16581 Nov 30 2025 03:24:43 hybrid1120 maldet(19965): {update} checking for available updates... Nov 30 2025 03:24:43 hybrid1120 maldet(19965): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 30 2025 03:24:43 hybrid1120 maldet(19965): {update} hashing install files and checking against server... Nov 30 2025 03:24:44 hybrid1120 maldet(19965): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 30 2025 03:24:44 hybrid1120 maldet(19965): {update} latest version already installed. Nov 30 2025 03:24:44 hybrid1120 maldet(20085): {sigup} performing signature update check... Nov 30 2025 03:24:44 hybrid1120 maldet(20085): {sigup} local signature set is version 202511282700055 Nov 30 2025 03:24:45 hybrid1120 maldet(20085): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 30 2025 03:24:45 hybrid1120 maldet(20085): {sigup} latest signature set already installed Nov 30 2025 03:24:45 hybrid1120 maldet(20179): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 30 2025 03:24:45 hybrid1120 maldet(20179): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 30 2025 03:24:45 hybrid1120 maldet(20179): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 30 2025 03:24:45 hybrid1120 maldet(20179): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 30 2025 03:24:45 hybrid1120 maldet(20179): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 30 2025 03:29:32 hybrid1120 maldet(20179): {scan} file list completed in 287s, found 1345 files... Nov 30 2025 03:29:32 hybrid1120 maldet(20179): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1345 files) in progress... Nov 30 2025 03:30:06 hybrid1120 maldet(20179): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1345, malware hits 0, cleaned hits 0, time 321s Nov 30 2025 03:30:06 hybrid1120 maldet(20179): {scan} scan report saved, to view run: maldet --report 251130-0324.20179 Dec 01 2025 04:18:51 hybrid1120 maldet(23232): {update} checking for available updates... Dec 01 2025 04:18:52 hybrid1120 maldet(23232): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 01 2025 04:18:52 hybrid1120 maldet(23232): {update} hashing install files and checking against server... Dec 01 2025 04:18:52 hybrid1120 maldet(23232): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 01 2025 04:18:52 hybrid1120 maldet(23232): {update} latest version already installed. Dec 01 2025 04:18:52 hybrid1120 maldet(23356): {sigup} performing signature update check... Dec 01 2025 04:18:52 hybrid1120 maldet(23356): {sigup} local signature set is version 202511282700055 Dec 01 2025 04:18:53 hybrid1120 maldet(23356): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 01 2025 04:18:53 hybrid1120 maldet(23356): {sigup} latest signature set already installed Dec 01 2025 04:18:53 hybrid1120 maldet(23449): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 01 2025 04:18:54 hybrid1120 maldet(23449): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 01 2025 04:18:54 hybrid1120 maldet(23449): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 01 2025 04:18:54 hybrid1120 maldet(23449): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 01 2025 04:18:54 hybrid1120 maldet(23449): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 01 2025 04:23:59 hybrid1120 maldet(23449): {scan} file list completed in 305s, found 1271 files... Dec 01 2025 04:23:59 hybrid1120 maldet(23449): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1271 files) in progress... Dec 01 2025 04:24:44 hybrid1120 maldet(23449): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1271, malware hits 0, cleaned hits 0, time 351s Dec 01 2025 04:24:44 hybrid1120 maldet(23449): {scan} scan report saved, to view run: maldet --report 251201-0418.23449 Dec 02 2025 04:29:32 hybrid1120 maldet(24123): {update} checking for available updates... Dec 02 2025 04:29:32 hybrid1120 maldet(24123): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 02 2025 04:29:32 hybrid1120 maldet(24123): {update} hashing install files and checking against server... Dec 02 2025 04:29:33 hybrid1120 maldet(24123): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 02 2025 04:29:33 hybrid1120 maldet(24123): {update} latest version already installed. Dec 02 2025 04:29:33 hybrid1120 maldet(24242): {sigup} performing signature update check... Dec 02 2025 04:29:33 hybrid1120 maldet(24242): {sigup} local signature set is version 202511282700055 Dec 02 2025 04:29:33 hybrid1120 maldet(24242): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 02 2025 04:29:34 hybrid1120 maldet(24242): {sigup} new signature set 202512013675489 available Dec 02 2025 04:29:34 hybrid1120 maldet(24242): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 02 2025 04:29:35 hybrid1120 maldet(24242): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 02 2025 04:29:35 hybrid1120 maldet(24242): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Dec 02 2025 04:29:35 hybrid1120 maldet(24242): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 02 2025 04:29:35 hybrid1120 maldet(24242): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 02 2025 04:29:36 hybrid1120 maldet(24242): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Dec 02 2025 04:29:36 hybrid1120 maldet(24242): {sigup} verified md5sum of maldet-sigpack.tgz Dec 02 2025 04:29:36 hybrid1120 maldet(24242): {sigup} unpacked and installed maldet-sigpack.tgz Dec 02 2025 04:29:36 hybrid1120 maldet(24242): {sigup} verified md5sum of maldet-clean.tgz Dec 02 2025 04:29:36 hybrid1120 maldet(24242): {sigup} unpacked and installed maldet-clean.tgz Dec 02 2025 04:29:36 hybrid1120 maldet(24242): {sigup} signature set update completed Dec 02 2025 04:29:36 hybrid1120 maldet(24242): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 02 2025 04:29:36 hybrid1120 maldet(24490): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 02 2025 04:29:36 hybrid1120 maldet(24490): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 02 2025 04:29:36 hybrid1120 maldet(24490): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 02 2025 04:29:36 hybrid1120 maldet(24490): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 02 2025 04:29:36 hybrid1120 maldet(24490): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 02 2025 04:34:15 hybrid1120 maldet(24490): {scan} file list completed in 279s, found 1162 files... Dec 02 2025 04:34:15 hybrid1120 maldet(24490): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1162 files) in progress... Dec 02 2025 04:34:51 hybrid1120 maldet(24490): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1162, malware hits 0, cleaned hits 0, time 315s Dec 02 2025 04:34:51 hybrid1120 maldet(24490): {scan} scan report saved, to view run: maldet --report 251202-0429.24490 Dec 03 2025 03:05:14 hybrid1120 maldet(355): {update} checking for available updates... Dec 03 2025 03:05:14 hybrid1120 maldet(355): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 03 2025 03:05:14 hybrid1120 maldet(355): {update} hashing install files and checking against server... Dec 03 2025 03:05:15 hybrid1120 maldet(355): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 03 2025 03:05:15 hybrid1120 maldet(355): {update} latest version already installed. Dec 03 2025 03:05:15 hybrid1120 maldet(481): {sigup} performing signature update check... Dec 03 2025 03:05:15 hybrid1120 maldet(481): {sigup} local signature set is version 202512013675489 Dec 03 2025 03:05:15 hybrid1120 maldet(481): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 03 2025 03:05:15 hybrid1120 maldet(481): {sigup} latest signature set already installed Dec 03 2025 03:05:16 hybrid1120 maldet(572): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 03 2025 03:05:16 hybrid1120 maldet(572): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 03 2025 03:05:16 hybrid1120 maldet(572): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 03 2025 03:05:16 hybrid1120 maldet(572): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 03 2025 03:05:16 hybrid1120 maldet(572): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 03 2025 03:11:15 hybrid1120 maldet(572): {scan} file list completed in 359s, found 1371 files... Dec 03 2025 03:11:15 hybrid1120 maldet(572): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1371 files) in progress... Dec 03 2025 03:11:53 hybrid1120 maldet(572): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1371, malware hits 0, cleaned hits 0, time 397s Dec 03 2025 03:11:53 hybrid1120 maldet(572): {scan} scan report saved, to view run: maldet --report 251203-0305.572 Dec 04 2025 04:13:21 hybrid1120 maldet(27553): {update} checking for available updates... Dec 04 2025 04:13:22 hybrid1120 maldet(27553): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 04 2025 04:13:22 hybrid1120 maldet(27553): {update} hashing install files and checking against server... Dec 04 2025 04:13:22 hybrid1120 maldet(27553): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 04 2025 04:13:22 hybrid1120 maldet(27553): {update} latest version already installed. Dec 04 2025 04:13:22 hybrid1120 maldet(27669): {sigup} performing signature update check... Dec 04 2025 04:13:22 hybrid1120 maldet(27669): {sigup} local signature set is version 202512013675489 Dec 04 2025 04:13:23 hybrid1120 maldet(27669): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 04 2025 04:13:23 hybrid1120 maldet(27669): {sigup} latest signature set already installed Dec 04 2025 04:13:23 hybrid1120 maldet(27768): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 04 2025 04:13:23 hybrid1120 maldet(27768): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 04 2025 04:13:23 hybrid1120 maldet(27768): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 04 2025 04:13:23 hybrid1120 maldet(27768): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 04 2025 04:13:23 hybrid1120 maldet(27768): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 04 2025 04:20:14 hybrid1120 maldet(27768): {scan} file list completed in 411s, found 2363 files... Dec 04 2025 04:20:14 hybrid1120 maldet(27768): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2363 files) in progress... Dec 04 2025 04:21:59 hybrid1120 maldet(27768): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2363, malware hits 0, cleaned hits 0, time 516s Dec 04 2025 04:21:59 hybrid1120 maldet(27768): {scan} scan report saved, to view run: maldet --report 251204-0413.27768 Dec 05 2025 04:23:07 hybrid1120 maldet(31254): {update} checking for available updates... Dec 05 2025 04:23:08 hybrid1120 maldet(31254): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 05 2025 04:23:08 hybrid1120 maldet(31254): {update} hashing install files and checking against server... Dec 05 2025 04:23:08 hybrid1120 maldet(31254): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 05 2025 04:23:08 hybrid1120 maldet(31254): {update} latest version already installed. Dec 05 2025 04:23:08 hybrid1120 maldet(31369): {sigup} performing signature update check... Dec 05 2025 04:23:08 hybrid1120 maldet(31369): {sigup} local signature set is version 202512013675489 Dec 05 2025 04:23:08 hybrid1120 maldet(31369): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 05 2025 04:23:09 hybrid1120 maldet(31369): {sigup} new signature set 20251204452786 available Dec 05 2025 04:23:09 hybrid1120 maldet(31369): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 05 2025 04:23:09 hybrid1120 maldet(31369): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 05 2025 04:23:10 hybrid1120 maldet(31369): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Dec 05 2025 04:23:10 hybrid1120 maldet(31369): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 05 2025 04:23:10 hybrid1120 maldet(31369): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 05 2025 04:23:11 hybrid1120 maldet(31369): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Dec 05 2025 04:23:11 hybrid1120 maldet(31369): {sigup} verified md5sum of maldet-sigpack.tgz Dec 05 2025 04:23:11 hybrid1120 maldet(31369): {sigup} unpacked and installed maldet-sigpack.tgz Dec 05 2025 04:23:11 hybrid1120 maldet(31369): {sigup} verified md5sum of maldet-clean.tgz Dec 05 2025 04:23:11 hybrid1120 maldet(31369): {sigup} unpacked and installed maldet-clean.tgz Dec 05 2025 04:23:11 hybrid1120 maldet(31369): {sigup} signature set update completed Dec 05 2025 04:23:11 hybrid1120 maldet(31369): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 05 2025 04:23:11 hybrid1120 maldet(31681): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 05 2025 04:23:11 hybrid1120 maldet(31681): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 05 2025 04:23:11 hybrid1120 maldet(31681): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 05 2025 04:23:11 hybrid1120 maldet(31681): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 05 2025 04:23:11 hybrid1120 maldet(31681): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 05 2025 04:27:44 hybrid1120 maldet(31681): {scan} file list completed in 273s, found 1656 files... Dec 05 2025 04:27:44 hybrid1120 maldet(31681): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1656 files) in progress... Dec 05 2025 04:28:28 hybrid1120 maldet(31681): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1656, malware hits 0, cleaned hits 0, time 317s Dec 05 2025 04:28:28 hybrid1120 maldet(31681): {scan} scan report saved, to view run: maldet --report 251205-0423.31681 Dec 06 2025 03:56:00 hybrid1120 maldet(18031): {update} checking for available updates... Dec 06 2025 03:56:01 hybrid1120 maldet(18031): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 06 2025 03:56:01 hybrid1120 maldet(18031): {update} hashing install files and checking against server... Dec 06 2025 03:56:02 hybrid1120 maldet(18031): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 06 2025 03:56:02 hybrid1120 maldet(18031): {update} latest version already installed. Dec 06 2025 03:56:02 hybrid1120 maldet(18150): {sigup} performing signature update check... Dec 06 2025 03:56:02 hybrid1120 maldet(18150): {sigup} local signature set is version 20251204452786 Dec 06 2025 03:56:02 hybrid1120 maldet(18150): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 06 2025 03:56:02 hybrid1120 maldet(18150): {sigup} latest signature set already installed Dec 06 2025 03:56:02 hybrid1120 maldet(18252): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 06 2025 03:56:03 hybrid1120 maldet(18252): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 06 2025 03:56:03 hybrid1120 maldet(18252): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 06 2025 03:56:03 hybrid1120 maldet(18252): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 06 2025 03:56:03 hybrid1120 maldet(18252): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 06 2025 04:01:26 hybrid1120 maldet(18252): {scan} file list completed in 323s, found 2114 files... Dec 06 2025 04:01:26 hybrid1120 maldet(18252): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2114 files) in progress... Dec 06 2025 04:02:20 hybrid1120 maldet(18252): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2114, malware hits 0, cleaned hits 0, time 378s Dec 06 2025 04:02:20 hybrid1120 maldet(18252): {scan} scan report saved, to view run: maldet --report 251206-0356.18252 Dec 07 2025 03:46:11 hybrid1120 maldet(9033): {update} checking for available updates... Dec 07 2025 03:46:12 hybrid1120 maldet(9033): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 07 2025 03:46:12 hybrid1120 maldet(9033): {update} hashing install files and checking against server... Dec 07 2025 03:46:12 hybrid1120 maldet(9033): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 07 2025 03:46:12 hybrid1120 maldet(9033): {update} latest version already installed. Dec 07 2025 03:46:12 hybrid1120 maldet(9143): {sigup} performing signature update check... Dec 07 2025 03:46:12 hybrid1120 maldet(9143): {sigup} local signature set is version 20251204452786 Dec 07 2025 03:46:13 hybrid1120 maldet(9143): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 07 2025 03:46:13 hybrid1120 maldet(9143): {sigup} latest signature set already installed Dec 07 2025 03:46:13 hybrid1120 maldet(9235): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 07 2025 03:46:13 hybrid1120 maldet(9235): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 07 2025 03:46:13 hybrid1120 maldet(9235): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 07 2025 03:46:13 hybrid1120 maldet(9235): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 07 2025 03:46:13 hybrid1120 maldet(9235): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 07 2025 03:50:52 hybrid1120 maldet(9235): {scan} file list completed in 279s, found 1467 files... Dec 07 2025 03:50:52 hybrid1120 maldet(9235): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1467 files) in progress... Dec 07 2025 03:51:33 hybrid1120 maldet(9235): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1467, malware hits 0, cleaned hits 0, time 320s Dec 07 2025 03:51:33 hybrid1120 maldet(9235): {scan} scan report saved, to view run: maldet --report 251207-0346.9235 Dec 08 2025 03:35:21 hybrid1120 maldet(11420): {update} checking for available updates... Dec 08 2025 03:35:21 hybrid1120 maldet(11420): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 08 2025 03:35:21 hybrid1120 maldet(11420): {update} hashing install files and checking against server... Dec 08 2025 03:35:22 hybrid1120 maldet(11420): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 08 2025 03:35:22 hybrid1120 maldet(11420): {update} latest version already installed. Dec 08 2025 03:35:22 hybrid1120 maldet(11535): {sigup} performing signature update check... Dec 08 2025 03:35:22 hybrid1120 maldet(11535): {sigup} local signature set is version 20251204452786 Dec 08 2025 03:35:22 hybrid1120 maldet(11535): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 08 2025 03:35:22 hybrid1120 maldet(11535): {sigup} new signature set 202512071424671 available Dec 08 2025 03:35:22 hybrid1120 maldet(11535): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 08 2025 03:35:23 hybrid1120 maldet(11535): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 08 2025 03:35:24 hybrid1120 maldet(11535): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Dec 08 2025 03:35:24 hybrid1120 maldet(11535): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 08 2025 03:35:24 hybrid1120 maldet(11535): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 08 2025 03:35:25 hybrid1120 maldet(11535): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Dec 08 2025 03:35:25 hybrid1120 maldet(11535): {sigup} verified md5sum of maldet-sigpack.tgz Dec 08 2025 03:35:25 hybrid1120 maldet(11535): {sigup} unpacked and installed maldet-sigpack.tgz Dec 08 2025 03:35:25 hybrid1120 maldet(11535): {sigup} verified md5sum of maldet-clean.tgz Dec 08 2025 03:35:25 hybrid1120 maldet(11535): {sigup} unpacked and installed maldet-clean.tgz Dec 08 2025 03:35:25 hybrid1120 maldet(11535): {sigup} signature set update completed Dec 08 2025 03:35:25 hybrid1120 maldet(11535): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 08 2025 03:35:25 hybrid1120 maldet(11745): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 08 2025 03:35:26 hybrid1120 maldet(11745): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 08 2025 03:35:26 hybrid1120 maldet(11745): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 08 2025 03:35:26 hybrid1120 maldet(11745): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 08 2025 03:35:26 hybrid1120 maldet(11745): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 08 2025 03:40:00 hybrid1120 maldet(11745): {scan} file list completed in 274s, found 1264 files... Dec 08 2025 03:40:00 hybrid1120 maldet(11745): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1264 files) in progress... Dec 08 2025 03:40:34 hybrid1120 maldet(11745): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1264, malware hits 0, cleaned hits 0, time 309s Dec 08 2025 03:40:34 hybrid1120 maldet(11745): {scan} scan report saved, to view run: maldet --report 251208-0335.11745 Dec 09 2025 03:27:08 hybrid1120 maldet(13348): {update} checking for available updates... Dec 09 2025 03:27:09 hybrid1120 maldet(13348): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 09 2025 03:27:09 hybrid1120 maldet(13348): {update} hashing install files and checking against server... Dec 09 2025 03:27:09 hybrid1120 maldet(13348): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 09 2025 03:27:09 hybrid1120 maldet(13348): {update} latest version already installed. Dec 09 2025 03:27:09 hybrid1120 maldet(13464): {sigup} performing signature update check... Dec 09 2025 03:27:09 hybrid1120 maldet(13464): {sigup} local signature set is version 202512071424671 Dec 09 2025 03:27:10 hybrid1120 maldet(13464): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 09 2025 03:27:10 hybrid1120 maldet(13464): {sigup} latest signature set already installed Dec 09 2025 03:27:10 hybrid1120 maldet(13554): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 09 2025 03:27:10 hybrid1120 maldet(13554): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 09 2025 03:27:10 hybrid1120 maldet(13554): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 09 2025 03:27:10 hybrid1120 maldet(13554): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 09 2025 03:27:10 hybrid1120 maldet(13554): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 09 2025 03:32:53 hybrid1120 maldet(13554): {scan} file list completed in 343s, found 1934 files... Dec 09 2025 03:32:53 hybrid1120 maldet(13554): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1934 files) in progress... Dec 09 2025 03:33:41 hybrid1120 maldet(13554): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1934, malware hits 0, cleaned hits 0, time 391s Dec 09 2025 03:33:41 hybrid1120 maldet(13554): {scan} scan report saved, to view run: maldet --report 251209-0327.13554 Dec 10 2025 04:20:30 hybrid1120 maldet(3357): {update} checking for available updates... Dec 10 2025 04:20:30 hybrid1120 maldet(3357): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 10 2025 04:20:30 hybrid1120 maldet(3357): {update} hashing install files and checking against server... Dec 10 2025 04:20:31 hybrid1120 maldet(3357): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 10 2025 04:20:31 hybrid1120 maldet(3357): {update} latest version already installed. Dec 10 2025 04:20:31 hybrid1120 maldet(3474): {sigup} performing signature update check... Dec 10 2025 04:20:31 hybrid1120 maldet(3474): {sigup} local signature set is version 202512071424671 Dec 10 2025 04:20:31 hybrid1120 maldet(3474): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 10 2025 04:20:31 hybrid1120 maldet(3474): {sigup} latest signature set already installed Dec 10 2025 04:20:32 hybrid1120 maldet(3566): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 10 2025 04:20:32 hybrid1120 maldet(3566): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 10 2025 04:20:32 hybrid1120 maldet(3566): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 10 2025 04:20:32 hybrid1120 maldet(3566): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 10 2025 04:20:32 hybrid1120 maldet(3566): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 10 2025 04:25:42 hybrid1120 maldet(3566): {scan} file list completed in 310s, found 1666 files... Dec 10 2025 04:25:42 hybrid1120 maldet(3566): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1666 files) in progress... Dec 10 2025 04:26:27 hybrid1120 maldet(3566): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1666, malware hits 0, cleaned hits 0, time 355s Dec 10 2025 04:26:27 hybrid1120 maldet(3566): {scan} scan report saved, to view run: maldet --report 251210-0420.3566 Dec 11 2025 04:01:34 hybrid1120 maldet(9051): {update} checking for available updates... Dec 11 2025 04:01:34 hybrid1120 maldet(9051): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 11 2025 04:01:34 hybrid1120 maldet(9051): {update} hashing install files and checking against server... Dec 11 2025 04:01:35 hybrid1120 maldet(9051): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 11 2025 04:01:35 hybrid1120 maldet(9051): {update} latest version already installed. Dec 11 2025 04:01:35 hybrid1120 maldet(9170): {sigup} performing signature update check... Dec 11 2025 04:01:35 hybrid1120 maldet(9170): {sigup} local signature set is version 202512071424671 Dec 11 2025 04:01:35 hybrid1120 maldet(9170): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 11 2025 04:01:35 hybrid1120 maldet(9170): {sigup} new signature set 202512102395847 available Dec 11 2025 04:01:35 hybrid1120 maldet(9170): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 11 2025 04:01:36 hybrid1120 maldet(9170): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 11 2025 04:01:37 hybrid1120 maldet(9170): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Dec 11 2025 04:01:37 hybrid1120 maldet(9170): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 11 2025 04:01:37 hybrid1120 maldet(9170): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 11 2025 04:01:38 hybrid1120 maldet(9170): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Dec 11 2025 04:01:38 hybrid1120 maldet(9170): {sigup} verified md5sum of maldet-sigpack.tgz Dec 11 2025 04:01:39 hybrid1120 maldet(9170): {sigup} unpacked and installed maldet-sigpack.tgz Dec 11 2025 04:01:39 hybrid1120 maldet(9170): {sigup} verified md5sum of maldet-clean.tgz Dec 11 2025 04:01:39 hybrid1120 maldet(9170): {sigup} unpacked and installed maldet-clean.tgz Dec 11 2025 04:01:39 hybrid1120 maldet(9170): {sigup} signature set update completed Dec 11 2025 04:01:39 hybrid1120 maldet(9170): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 11 2025 04:01:39 hybrid1120 maldet(9383): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 11 2025 04:01:39 hybrid1120 maldet(9383): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 11 2025 04:01:39 hybrid1120 maldet(9383): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 11 2025 04:01:39 hybrid1120 maldet(9383): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 11 2025 04:01:39 hybrid1120 maldet(9383): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 11 2025 04:08:03 hybrid1120 maldet(9383): {scan} file list completed in 384s, found 1636 files... Dec 11 2025 04:08:03 hybrid1120 maldet(9383): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1636 files) in progress... Dec 11 2025 04:08:53 hybrid1120 maldet(9383): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1636, malware hits 0, cleaned hits 0, time 434s Dec 11 2025 04:08:53 hybrid1120 maldet(9383): {scan} scan report saved, to view run: maldet --report 251211-0401.9383 Dec 12 2025 03:37:35 hybrid1120 maldet(21024): {update} checking for available updates... Dec 12 2025 03:37:35 hybrid1120 maldet(21024): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 12 2025 03:37:35 hybrid1120 maldet(21024): {update} hashing install files and checking against server... Dec 12 2025 03:37:36 hybrid1120 maldet(21024): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 12 2025 03:37:36 hybrid1120 maldet(21024): {update} latest version already installed. Dec 12 2025 03:37:36 hybrid1120 maldet(21148): {sigup} performing signature update check... Dec 12 2025 03:37:36 hybrid1120 maldet(21148): {sigup} local signature set is version 202512102395847 Dec 12 2025 03:37:36 hybrid1120 maldet(21148): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 12 2025 03:37:36 hybrid1120 maldet(21148): {sigup} latest signature set already installed Dec 12 2025 03:37:36 hybrid1120 maldet(21240): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 12 2025 03:37:37 hybrid1120 maldet(21240): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 12 2025 03:37:37 hybrid1120 maldet(21240): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 12 2025 03:37:37 hybrid1120 maldet(21240): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 12 2025 03:37:37 hybrid1120 maldet(21240): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 12 2025 03:42:06 hybrid1120 maldet(21240): {scan} file list completed in 269s, found 1733 files... Dec 12 2025 03:42:06 hybrid1120 maldet(21240): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1733 files) in progress... Dec 12 2025 03:42:49 hybrid1120 maldet(21240): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1733, malware hits 0, cleaned hits 0, time 313s Dec 12 2025 03:42:49 hybrid1120 maldet(21240): {scan} scan report saved, to view run: maldet --report 251212-0337.21240 Dec 13 2025 04:40:57 hybrid1120 maldet(21674): {update} checking for available updates... Dec 13 2025 04:40:58 hybrid1120 maldet(21674): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 13 2025 04:40:58 hybrid1120 maldet(21674): {update} hashing install files and checking against server... Dec 13 2025 04:40:59 hybrid1120 maldet(21674): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 13 2025 04:40:59 hybrid1120 maldet(21674): {update} latest version already installed. Dec 13 2025 04:40:59 hybrid1120 maldet(21789): {sigup} performing signature update check... Dec 13 2025 04:40:59 hybrid1120 maldet(21789): {sigup} local signature set is version 202512102395847 Dec 13 2025 04:40:59 hybrid1120 maldet(21789): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 13 2025 04:40:59 hybrid1120 maldet(21789): {sigup} latest signature set already installed Dec 13 2025 04:40:59 hybrid1120 maldet(21880): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 13 2025 04:41:00 hybrid1120 maldet(21880): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 13 2025 04:41:00 hybrid1120 maldet(21880): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 13 2025 04:41:00 hybrid1120 maldet(21880): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 13 2025 04:41:00 hybrid1120 maldet(21880): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 13 2025 04:45:29 hybrid1120 maldet(21880): {scan} file list completed in 269s, found 1707 files... Dec 13 2025 04:45:29 hybrid1120 maldet(21880): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1707 files) in progress... Dec 13 2025 04:46:12 hybrid1120 maldet(21880): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1707, malware hits 0, cleaned hits 0, time 313s Dec 13 2025 04:46:12 hybrid1120 maldet(21880): {scan} scan report saved, to view run: maldet --report 251213-0440.21880 Dec 14 2025 03:58:48 hybrid1120 maldet(23990): {update} checking for available updates... Dec 14 2025 03:58:48 hybrid1120 maldet(23990): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 14 2025 03:58:49 hybrid1120 maldet(23990): {update} hashing install files and checking against server... Dec 14 2025 03:58:49 hybrid1120 maldet(23990): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 14 2025 03:58:49 hybrid1120 maldet(23990): {update} latest version already installed. Dec 14 2025 03:58:49 hybrid1120 maldet(24106): {sigup} performing signature update check... Dec 14 2025 03:58:49 hybrid1120 maldet(24106): {sigup} local signature set is version 202512102395847 Dec 14 2025 03:58:49 hybrid1120 maldet(24106): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 14 2025 03:58:50 hybrid1120 maldet(24106): {sigup} new signature set 20251213586061 available Dec 14 2025 03:58:50 hybrid1120 maldet(24106): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 14 2025 03:58:50 hybrid1120 maldet(24106): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 14 2025 03:58:50 hybrid1120 maldet(24106): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Dec 14 2025 03:58:50 hybrid1120 maldet(24106): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 14 2025 03:58:51 hybrid1120 maldet(24106): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 14 2025 03:58:51 hybrid1120 maldet(24106): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Dec 14 2025 03:58:51 hybrid1120 maldet(24106): {sigup} verified md5sum of maldet-sigpack.tgz Dec 14 2025 03:58:51 hybrid1120 maldet(24106): {sigup} unpacked and installed maldet-sigpack.tgz Dec 14 2025 03:58:51 hybrid1120 maldet(24106): {sigup} verified md5sum of maldet-clean.tgz Dec 14 2025 03:58:51 hybrid1120 maldet(24106): {sigup} unpacked and installed maldet-clean.tgz Dec 14 2025 03:58:51 hybrid1120 maldet(24106): {sigup} signature set update completed Dec 14 2025 03:58:52 hybrid1120 maldet(24106): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 14 2025 03:58:52 hybrid1120 maldet(24319): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 14 2025 03:58:52 hybrid1120 maldet(24319): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 14 2025 03:58:52 hybrid1120 maldet(24319): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 14 2025 03:58:52 hybrid1120 maldet(24319): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 14 2025 03:58:52 hybrid1120 maldet(24319): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 14 2025 04:04:01 hybrid1120 maldet(24319): {scan} file list completed in 309s, found 1783 files... Dec 14 2025 04:04:01 hybrid1120 maldet(24319): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1783 files) in progress... Dec 14 2025 04:04:45 hybrid1120 maldet(24319): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1783, malware hits 0, cleaned hits 0, time 353s Dec 14 2025 04:04:45 hybrid1120 maldet(24319): {scan} scan report saved, to view run: maldet --report 251214-0358.24319 Dec 15 2025 05:22:54 hybrid1120 maldet(26808): {update} checking for available updates... Dec 15 2025 05:22:54 hybrid1120 maldet(26808): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 15 2025 05:22:54 hybrid1120 maldet(26808): {update} hashing install files and checking against server... Dec 15 2025 05:22:55 hybrid1120 maldet(26808): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 15 2025 05:22:55 hybrid1120 maldet(26808): {update} latest version already installed. Dec 15 2025 05:22:55 hybrid1120 maldet(26934): {sigup} performing signature update check... Dec 15 2025 05:22:55 hybrid1120 maldet(26934): {sigup} local signature set is version 20251213586061 Dec 15 2025 05:22:55 hybrid1120 maldet(26934): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 15 2025 05:22:55 hybrid1120 maldet(26934): {sigup} latest signature set already installed Dec 15 2025 05:22:55 hybrid1120 maldet(27027): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 15 2025 05:22:56 hybrid1120 maldet(27027): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 15 2025 05:22:56 hybrid1120 maldet(27027): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 15 2025 05:22:56 hybrid1120 maldet(27027): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 15 2025 05:22:56 hybrid1120 maldet(27027): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 15 2025 05:26:53 hybrid1120 maldet(27027): {scan} file list completed in 237s, found 2204 files... Dec 15 2025 05:26:53 hybrid1120 maldet(27027): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2204 files) in progress... Dec 15 2025 05:27:47 hybrid1120 maldet(27027): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2204, malware hits 0, cleaned hits 0, time 292s Dec 15 2025 05:27:47 hybrid1120 maldet(27027): {scan} scan report saved, to view run: maldet --report 251215-0522.27027 Dec 16 2025 03:29:53 hybrid1120 maldet(3799): {update} checking for available updates... Dec 16 2025 03:29:53 hybrid1120 maldet(3799): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 16 2025 03:29:53 hybrid1120 maldet(3799): {update} hashing install files and checking against server... Dec 16 2025 03:29:54 hybrid1120 maldet(3799): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 16 2025 03:29:54 hybrid1120 maldet(3799): {update} latest version already installed. Dec 16 2025 03:29:54 hybrid1120 maldet(3921): {sigup} performing signature update check... Dec 16 2025 03:29:54 hybrid1120 maldet(3921): {sigup} local signature set is version 20251213586061 Dec 16 2025 03:29:54 hybrid1120 maldet(3921): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 16 2025 03:29:54 hybrid1120 maldet(3921): {sigup} latest signature set already installed Dec 16 2025 03:29:54 hybrid1120 maldet(4012): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 16 2025 03:29:55 hybrid1120 maldet(4012): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 16 2025 03:29:55 hybrid1120 maldet(4012): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 16 2025 03:29:55 hybrid1120 maldet(4012): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 16 2025 03:29:55 hybrid1120 maldet(4012): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 16 2025 03:36:11 hybrid1120 maldet(4012): {scan} file list completed in 375s, found 1529 files... Dec 16 2025 03:36:11 hybrid1120 maldet(4012): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1529 files) in progress... Dec 16 2025 03:36:50 hybrid1120 maldet(4012): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1529, malware hits 0, cleaned hits 0, time 416s Dec 16 2025 03:36:50 hybrid1120 maldet(4012): {scan} scan report saved, to view run: maldet --report 251216-0329.4012 Dec 17 2025 03:40:42 hybrid1120 maldet(14735): {update} checking for available updates... Dec 17 2025 03:40:43 hybrid1120 maldet(14735): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 17 2025 03:40:43 hybrid1120 maldet(14735): {update} hashing install files and checking against server... Dec 17 2025 03:40:43 hybrid1120 maldet(14735): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 17 2025 03:40:43 hybrid1120 maldet(14735): {update} latest version already installed. Dec 17 2025 03:40:43 hybrid1120 maldet(14848): {sigup} performing signature update check... Dec 17 2025 03:40:43 hybrid1120 maldet(14848): {sigup} local signature set is version 20251213586061 Dec 17 2025 03:40:44 hybrid1120 maldet(14848): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 17 2025 03:40:44 hybrid1120 maldet(14848): {sigup} new signature set 202512161556343 available Dec 17 2025 03:40:44 hybrid1120 maldet(14848): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 17 2025 03:40:45 hybrid1120 maldet(14848): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 17 2025 03:40:46 hybrid1120 maldet(14848): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Dec 17 2025 03:40:46 hybrid1120 maldet(14848): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 17 2025 03:40:46 hybrid1120 maldet(14848): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 17 2025 03:40:46 hybrid1120 maldet(14848): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Dec 17 2025 03:40:46 hybrid1120 maldet(14848): {sigup} verified md5sum of maldet-sigpack.tgz Dec 17 2025 03:40:47 hybrid1120 maldet(14848): {sigup} unpacked and installed maldet-sigpack.tgz Dec 17 2025 03:40:47 hybrid1120 maldet(14848): {sigup} verified md5sum of maldet-clean.tgz Dec 17 2025 03:40:47 hybrid1120 maldet(14848): {sigup} unpacked and installed maldet-clean.tgz Dec 17 2025 03:40:47 hybrid1120 maldet(14848): {sigup} signature set update completed Dec 17 2025 03:40:47 hybrid1120 maldet(14848): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 17 2025 03:40:47 hybrid1120 maldet(15101): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 17 2025 03:40:47 hybrid1120 maldet(15101): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 17 2025 03:40:47 hybrid1120 maldet(15101): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 17 2025 03:40:47 hybrid1120 maldet(15101): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 17 2025 03:40:47 hybrid1120 maldet(15101): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 17 2025 03:46:58 hybrid1120 maldet(15101): {scan} file list completed in 371s, found 1916 files... Dec 17 2025 03:46:58 hybrid1120 maldet(15101): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1916 files) in progress... Dec 17 2025 03:47:56 hybrid1120 maldet(15101): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1916, malware hits 0, cleaned hits 0, time 429s Dec 17 2025 03:47:56 hybrid1120 maldet(15101): {scan} scan report saved, to view run: maldet --report 251217-0340.15101 Dec 18 2025 03:11:34 hybrid1120 maldet(27281): {update} checking for available updates... Dec 18 2025 03:11:35 hybrid1120 maldet(27281): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 18 2025 03:11:35 hybrid1120 maldet(27281): {update} hashing install files and checking against server... Dec 18 2025 03:11:35 hybrid1120 maldet(27281): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 18 2025 03:11:35 hybrid1120 maldet(27281): {update} latest version already installed. Dec 18 2025 03:11:35 hybrid1120 maldet(27398): {sigup} performing signature update check... Dec 18 2025 03:11:35 hybrid1120 maldet(27398): {sigup} local signature set is version 202512161556343 Dec 18 2025 03:11:36 hybrid1120 maldet(27398): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 18 2025 03:11:36 hybrid1120 maldet(27398): {sigup} latest signature set already installed Dec 18 2025 03:11:36 hybrid1120 maldet(27493): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 18 2025 03:11:36 hybrid1120 maldet(27493): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 18 2025 03:11:36 hybrid1120 maldet(27493): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 18 2025 03:11:36 hybrid1120 maldet(27493): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 18 2025 03:11:36 hybrid1120 maldet(27493): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 18 2025 03:18:54 hybrid1120 maldet(27493): {scan} file list completed in 438s, found 1895 files... Dec 18 2025 03:18:54 hybrid1120 maldet(27493): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1895 files) in progress... Dec 18 2025 03:19:48 hybrid1120 maldet(27493): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1895, malware hits 0, cleaned hits 0, time 492s Dec 18 2025 03:19:48 hybrid1120 maldet(27493): {scan} scan report saved, to view run: maldet --report 251218-0311.27493 Dec 19 2025 05:02:43 hybrid1120 maldet(9101): {update} checking for available updates... Dec 19 2025 05:02:43 hybrid1120 maldet(9101): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 19 2025 05:02:43 hybrid1120 maldet(9101): {update} hashing install files and checking against server... Dec 19 2025 05:02:44 hybrid1120 maldet(9101): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 19 2025 05:02:44 hybrid1120 maldet(9101): {update} latest version already installed. Dec 19 2025 05:02:44 hybrid1120 maldet(9222): {sigup} performing signature update check... Dec 19 2025 05:02:44 hybrid1120 maldet(9222): {sigup} local signature set is version 202512161556343 Dec 19 2025 05:02:45 hybrid1120 maldet(9222): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 19 2025 05:02:45 hybrid1120 maldet(9222): {sigup} latest signature set already installed Dec 19 2025 05:02:45 hybrid1120 maldet(9317): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 19 2025 05:02:45 hybrid1120 maldet(9317): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 19 2025 05:02:45 hybrid1120 maldet(9317): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 19 2025 05:02:45 hybrid1120 maldet(9317): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 19 2025 05:02:45 hybrid1120 maldet(9317): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 19 2025 05:08:18 hybrid1120 maldet(9317): {scan} file list completed in 333s, found 2240 files... Dec 19 2025 05:08:18 hybrid1120 maldet(9317): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2240 files) in progress... Dec 19 2025 05:09:27 hybrid1120 maldet(9317): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2240, malware hits 0, cleaned hits 0, time 402s Dec 19 2025 05:09:27 hybrid1120 maldet(9317): {scan} scan report saved, to view run: maldet --report 251219-0502.9317 Dec 20 2025 05:06:45 hybrid1120 maldet(31488): {update} checking for available updates... Dec 20 2025 05:06:45 hybrid1120 maldet(31488): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 20 2025 05:06:45 hybrid1120 maldet(31488): {update} hashing install files and checking against server... Dec 20 2025 05:06:45 hybrid1120 maldet(31488): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 20 2025 05:06:45 hybrid1120 maldet(31488): {update} latest version already installed. Dec 20 2025 05:06:46 hybrid1120 maldet(31626): {sigup} performing signature update check... Dec 20 2025 05:06:46 hybrid1120 maldet(31626): {sigup} local signature set is version 202512161556343 Dec 20 2025 05:06:46 hybrid1120 maldet(31626): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 20 2025 05:06:46 hybrid1120 maldet(31626): {sigup} new signature set 202512192526679 available Dec 20 2025 05:06:46 hybrid1120 maldet(31626): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 20 2025 05:06:47 hybrid1120 maldet(31626): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 20 2025 05:06:48 hybrid1120 maldet(31626): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Dec 20 2025 05:06:48 hybrid1120 maldet(31626): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 20 2025 05:06:48 hybrid1120 maldet(31626): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 20 2025 05:06:49 hybrid1120 maldet(31626): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Dec 20 2025 05:06:49 hybrid1120 maldet(31626): {sigup} verified md5sum of maldet-sigpack.tgz Dec 20 2025 05:06:49 hybrid1120 maldet(31626): {sigup} unpacked and installed maldet-sigpack.tgz Dec 20 2025 05:06:49 hybrid1120 maldet(31626): {sigup} verified md5sum of maldet-clean.tgz Dec 20 2025 05:06:49 hybrid1120 maldet(31626): {sigup} unpacked and installed maldet-clean.tgz Dec 20 2025 05:06:49 hybrid1120 maldet(31626): {sigup} signature set update completed Dec 20 2025 05:06:49 hybrid1120 maldet(31626): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 20 2025 05:06:49 hybrid1120 maldet(31859): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 20 2025 05:06:49 hybrid1120 maldet(31859): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 20 2025 05:06:49 hybrid1120 maldet(31859): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 20 2025 05:06:49 hybrid1120 maldet(31859): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 20 2025 05:06:49 hybrid1120 maldet(31859): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 20 2025 05:11:30 hybrid1120 maldet(31859): {scan} file list completed in 281s, found 2148 files... Dec 20 2025 05:11:30 hybrid1120 maldet(31859): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2148 files) in progress... Dec 20 2025 05:12:26 hybrid1120 maldet(31859): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2148, malware hits 0, cleaned hits 0, time 337s Dec 20 2025 05:12:26 hybrid1120 maldet(31859): {scan} scan report saved, to view run: maldet --report 251220-0506.31859 Dec 21 2025 03:19:59 hybrid1120 maldet(19999): {update} checking for available updates... Dec 21 2025 03:19:59 hybrid1120 maldet(19999): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 21 2025 03:19:59 hybrid1120 maldet(19999): {update} hashing install files and checking against server... Dec 21 2025 03:20:00 hybrid1120 maldet(19999): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 21 2025 03:20:00 hybrid1120 maldet(19999): {update} latest version already installed. Dec 21 2025 03:20:00 hybrid1120 maldet(20111): {sigup} performing signature update check... Dec 21 2025 03:20:00 hybrid1120 maldet(20111): {sigup} local signature set is version 202512192526679 Dec 21 2025 03:20:00 hybrid1120 maldet(20111): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 21 2025 03:20:00 hybrid1120 maldet(20111): {sigup} latest signature set already installed Dec 21 2025 03:20:00 hybrid1120 maldet(20200): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 21 2025 03:20:01 hybrid1120 maldet(20200): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 21 2025 03:20:01 hybrid1120 maldet(20200): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 21 2025 03:20:01 hybrid1120 maldet(20200): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 21 2025 03:20:01 hybrid1120 maldet(20200): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 21 2025 03:25:17 hybrid1120 maldet(20200): {scan} file list completed in 316s, found 1730 files... Dec 21 2025 03:25:17 hybrid1120 maldet(20200): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1730 files) in progress... Dec 21 2025 03:26:01 hybrid1120 maldet(20200): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1730, malware hits 0, cleaned hits 0, time 361s Dec 21 2025 03:26:01 hybrid1120 maldet(20200): {scan} scan report saved, to view run: maldet --report 251221-0320.20200 Dec 22 2025 02:38:21 hybrid1120 maldet(1154): {update} checking for available updates... Dec 22 2025 02:38:21 hybrid1120 maldet(1154): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 22 2025 02:38:21 hybrid1120 maldet(1154): {update} hashing install files and checking against server... Dec 22 2025 02:38:22 hybrid1120 maldet(1154): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 22 2025 02:38:22 hybrid1120 maldet(1154): {update} latest version already installed. Dec 22 2025 02:38:22 hybrid1120 maldet(1284): {sigup} performing signature update check... Dec 22 2025 02:38:22 hybrid1120 maldet(1284): {sigup} local signature set is version 202512192526679 Dec 22 2025 02:38:23 hybrid1120 maldet(1284): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 22 2025 02:38:23 hybrid1120 maldet(1284): {sigup} latest signature set already installed Dec 22 2025 02:38:23 hybrid1120 maldet(1385): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 22 2025 02:38:23 hybrid1120 maldet(1385): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 22 2025 02:38:23 hybrid1120 maldet(1385): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 22 2025 02:38:23 hybrid1120 maldet(1385): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 22 2025 02:38:23 hybrid1120 maldet(1385): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 22 2025 02:43:33 hybrid1120 maldet(1385): {scan} file list completed in 310s, found 1453 files... Dec 22 2025 02:43:33 hybrid1120 maldet(1385): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1453 files) in progress... Dec 22 2025 02:44:10 hybrid1120 maldet(1385): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1453, malware hits 0, cleaned hits 0, time 347s Dec 22 2025 02:44:10 hybrid1120 maldet(1385): {scan} scan report saved, to view run: maldet --report 251222-0238.1385 Dec 23 2025 05:02:24 hybrid1120 maldet(28951): {update} checking for available updates... Dec 23 2025 05:02:25 hybrid1120 maldet(28951): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 23 2025 05:02:25 hybrid1120 maldet(28951): {update} hashing install files and checking against server... Dec 23 2025 05:02:25 hybrid1120 maldet(28951): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 23 2025 05:02:25 hybrid1120 maldet(28951): {update} latest version already installed. Dec 23 2025 05:02:25 hybrid1120 maldet(29067): {sigup} performing signature update check... Dec 23 2025 05:02:25 hybrid1120 maldet(29067): {sigup} local signature set is version 202512192526679 Dec 23 2025 05:02:26 hybrid1120 maldet(29067): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 23 2025 05:02:26 hybrid1120 maldet(29067): {sigup} new signature set 202512223496934 available Dec 23 2025 05:02:26 hybrid1120 maldet(29067): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 23 2025 05:02:27 hybrid1120 maldet(29067): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 23 2025 05:02:27 hybrid1120 maldet(29067): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Dec 23 2025 05:02:27 hybrid1120 maldet(29067): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 23 2025 05:02:28 hybrid1120 maldet(29067): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 23 2025 05:02:28 hybrid1120 maldet(29067): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Dec 23 2025 05:02:28 hybrid1120 maldet(29067): {sigup} verified md5sum of maldet-sigpack.tgz Dec 23 2025 05:02:29 hybrid1120 maldet(29067): {sigup} unpacked and installed maldet-sigpack.tgz Dec 23 2025 05:02:29 hybrid1120 maldet(29067): {sigup} verified md5sum of maldet-clean.tgz Dec 23 2025 05:02:29 hybrid1120 maldet(29067): {sigup} unpacked and installed maldet-clean.tgz Dec 23 2025 05:02:29 hybrid1120 maldet(29067): {sigup} signature set update completed Dec 23 2025 05:02:29 hybrid1120 maldet(29067): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 23 2025 05:02:29 hybrid1120 maldet(29302): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 23 2025 05:02:30 hybrid1120 maldet(29302): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 23 2025 05:02:30 hybrid1120 maldet(29302): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 23 2025 05:02:30 hybrid1120 maldet(29302): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 23 2025 05:02:30 hybrid1120 maldet(29302): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 23 2025 05:08:25 hybrid1120 maldet(29302): {scan} file list completed in 355s, found 1488 files... Dec 23 2025 05:08:25 hybrid1120 maldet(29302): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1488 files) in progress... Dec 23 2025 05:09:10 hybrid1120 maldet(29302): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1488, malware hits 0, cleaned hits 0, time 401s Dec 23 2025 05:09:10 hybrid1120 maldet(29302): {scan} scan report saved, to view run: maldet --report 251223-0502.29302 Dec 24 2025 04:15:34 hybrid1120 maldet(5808): {update} checking for available updates... Dec 24 2025 04:15:35 hybrid1120 maldet(5808): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 24 2025 04:15:35 hybrid1120 maldet(5808): {update} hashing install files and checking against server... Dec 24 2025 04:15:35 hybrid1120 maldet(5808): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 24 2025 04:15:35 hybrid1120 maldet(5808): {update} latest version already installed. Dec 24 2025 04:15:35 hybrid1120 maldet(5921): {sigup} performing signature update check... Dec 24 2025 04:15:35 hybrid1120 maldet(5921): {sigup} local signature set is version 202512223496934 Dec 24 2025 04:15:36 hybrid1120 maldet(5921): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 24 2025 04:15:36 hybrid1120 maldet(5921): {sigup} latest signature set already installed Dec 24 2025 04:15:36 hybrid1120 maldet(6009): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 24 2025 04:15:36 hybrid1120 maldet(6009): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 24 2025 04:15:36 hybrid1120 maldet(6009): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 24 2025 04:15:36 hybrid1120 maldet(6009): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 24 2025 04:15:36 hybrid1120 maldet(6009): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 24 2025 04:23:04 hybrid1120 maldet(6009): {scan} file list completed in 448s, found 1749 files... Dec 24 2025 04:23:04 hybrid1120 maldet(6009): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1749 files) in progress... Dec 24 2025 04:23:54 hybrid1120 maldet(6009): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1749, malware hits 0, cleaned hits 0, time 498s Dec 24 2025 04:23:54 hybrid1120 maldet(6009): {scan} scan report saved, to view run: maldet --report 251224-0415.6009 Dec 25 2025 04:48:47 hybrid1120 maldet(13383): {update} checking for available updates... Dec 25 2025 04:48:48 hybrid1120 maldet(13383): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 25 2025 04:48:48 hybrid1120 maldet(13383): {update} hashing install files and checking against server... Dec 25 2025 04:48:48 hybrid1120 maldet(13383): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 25 2025 04:48:48 hybrid1120 maldet(13383): {update} latest version already installed. Dec 25 2025 04:48:48 hybrid1120 maldet(13508): {sigup} performing signature update check... Dec 25 2025 04:48:48 hybrid1120 maldet(13508): {sigup} local signature set is version 202512223496934 Dec 25 2025 04:48:48 hybrid1120 maldet(13508): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 25 2025 04:48:48 hybrid1120 maldet(13508): {sigup} latest signature set already installed Dec 25 2025 04:48:49 hybrid1120 maldet(13597): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 25 2025 04:48:49 hybrid1120 maldet(13597): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 25 2025 04:48:49 hybrid1120 maldet(13597): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 25 2025 04:48:49 hybrid1120 maldet(13597): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 25 2025 04:48:49 hybrid1120 maldet(13597): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 25 2025 04:53:53 hybrid1120 maldet(13597): {scan} file list completed in 304s, found 2156 files... Dec 25 2025 04:53:53 hybrid1120 maldet(13597): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2156 files) in progress... Dec 25 2025 04:55:06 hybrid1120 maldet(13597): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2156, malware hits 0, cleaned hits 0, time 377s Dec 25 2025 04:55:06 hybrid1120 maldet(13597): {scan} scan report saved, to view run: maldet --report 251225-0448.13597 Dec 26 2025 04:03:52 hybrid1120 maldet(20660): {update} checking for available updates... Dec 26 2025 04:03:53 hybrid1120 maldet(20660): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 26 2025 04:03:53 hybrid1120 maldet(20660): {update} hashing install files and checking against server... Dec 26 2025 04:03:54 hybrid1120 maldet(20660): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 26 2025 04:03:54 hybrid1120 maldet(20660): {update} latest version already installed. Dec 26 2025 04:03:54 hybrid1120 maldet(20770): {sigup} performing signature update check... Dec 26 2025 04:03:54 hybrid1120 maldet(20770): {sigup} local signature set is version 202512223496934 Dec 26 2025 04:03:54 hybrid1120 maldet(20770): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 26 2025 04:03:54 hybrid1120 maldet(20770): {sigup} new signature set 20251225273290 available Dec 26 2025 04:03:54 hybrid1120 maldet(20770): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 26 2025 04:03:55 hybrid1120 maldet(20770): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 26 2025 04:03:55 hybrid1120 maldet(20770): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Dec 26 2025 04:03:56 hybrid1120 maldet(20770): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 26 2025 04:03:56 hybrid1120 maldet(20770): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 26 2025 04:03:56 hybrid1120 maldet(20770): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Dec 26 2025 04:03:56 hybrid1120 maldet(20770): {sigup} verified md5sum of maldet-sigpack.tgz Dec 26 2025 04:03:57 hybrid1120 maldet(20770): {sigup} unpacked and installed maldet-sigpack.tgz Dec 26 2025 04:03:57 hybrid1120 maldet(20770): {sigup} verified md5sum of maldet-clean.tgz Dec 26 2025 04:03:57 hybrid1120 maldet(20770): {sigup} unpacked and installed maldet-clean.tgz Dec 26 2025 04:03:57 hybrid1120 maldet(20770): {sigup} signature set update completed Dec 26 2025 04:03:57 hybrid1120 maldet(20770): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 26 2025 04:03:57 hybrid1120 maldet(21013): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 26 2025 04:03:58 hybrid1120 maldet(21013): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 26 2025 04:03:58 hybrid1120 maldet(21013): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 26 2025 04:03:58 hybrid1120 maldet(21013): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 26 2025 04:03:58 hybrid1120 maldet(21013): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 26 2025 04:10:58 hybrid1120 maldet(21013): {scan} file list completed in 420s, found 1964 files... Dec 26 2025 04:10:59 hybrid1120 maldet(21013): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1964 files) in progress... Dec 26 2025 04:12:01 hybrid1120 maldet(21013): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1964, malware hits 0, cleaned hits 0, time 484s Dec 26 2025 04:12:01 hybrid1120 maldet(21013): {scan} scan report saved, to view run: maldet --report 251226-0403.21013 Dec 27 2025 04:06:04 hybrid1120 maldet(26093): {update} checking for available updates... Dec 27 2025 04:06:04 hybrid1120 maldet(26093): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 27 2025 04:06:04 hybrid1120 maldet(26093): {update} hashing install files and checking against server... Dec 27 2025 04:06:05 hybrid1120 maldet(26093): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 27 2025 04:06:05 hybrid1120 maldet(26093): {update} latest version already installed. Dec 27 2025 04:06:05 hybrid1120 maldet(26206): {sigup} performing signature update check... Dec 27 2025 04:06:05 hybrid1120 maldet(26206): {sigup} local signature set is version 20251225273290 Dec 27 2025 04:06:06 hybrid1120 maldet(26206): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 27 2025 04:06:06 hybrid1120 maldet(26206): {sigup} latest signature set already installed Dec 27 2025 04:06:06 hybrid1120 maldet(26296): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 27 2025 04:06:06 hybrid1120 maldet(26296): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 27 2025 04:06:06 hybrid1120 maldet(26296): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 27 2025 04:06:06 hybrid1120 maldet(26296): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 27 2025 04:06:06 hybrid1120 maldet(26296): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 27 2025 04:15:05 hybrid1120 maldet(26296): {scan} file list completed in 539s, found 1932 files... Dec 27 2025 04:15:06 hybrid1120 maldet(26296): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1932 files) in progress... Dec 27 2025 04:16:11 hybrid1120 maldet(26296): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1932, malware hits 0, cleaned hits 0, time 605s Dec 27 2025 04:16:11 hybrid1120 maldet(26296): {scan} scan report saved, to view run: maldet --report 251227-0406.26296 Dec 28 2025 04:23:24 hybrid1120 maldet(2960): {update} checking for available updates... Dec 28 2025 04:23:24 hybrid1120 maldet(2960): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 28 2025 04:23:24 hybrid1120 maldet(2960): {update} hashing install files and checking against server... Dec 28 2025 04:23:25 hybrid1120 maldet(2960): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 28 2025 04:23:25 hybrid1120 maldet(2960): {update} latest version already installed. Dec 28 2025 04:23:25 hybrid1120 maldet(3070): {sigup} performing signature update check... Dec 28 2025 04:23:25 hybrid1120 maldet(3070): {sigup} local signature set is version 20251225273290 Dec 28 2025 04:23:25 hybrid1120 maldet(3070): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 28 2025 04:23:25 hybrid1120 maldet(3070): {sigup} latest signature set already installed Dec 28 2025 04:23:25 hybrid1120 maldet(3160): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 28 2025 04:23:26 hybrid1120 maldet(3160): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 28 2025 04:23:26 hybrid1120 maldet(3160): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 28 2025 04:23:26 hybrid1120 maldet(3160): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 28 2025 04:23:26 hybrid1120 maldet(3160): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 28 2025 04:28:38 hybrid1120 maldet(3160): {scan} file list completed in 311s, found 1278 files... Dec 28 2025 04:28:38 hybrid1120 maldet(3160): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1278 files) in progress... Dec 28 2025 04:29:12 hybrid1120 maldet(3160): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1278, malware hits 0, cleaned hits 0, time 347s Dec 28 2025 04:29:12 hybrid1120 maldet(3160): {scan} scan report saved, to view run: maldet --report 251228-0423.3160 Dec 29 2025 04:33:31 hybrid1120 maldet(10369): {update} checking for available updates... Dec 29 2025 04:33:32 hybrid1120 maldet(10369): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 29 2025 04:33:32 hybrid1120 maldet(10369): {update} hashing install files and checking against server... Dec 29 2025 04:33:33 hybrid1120 maldet(10369): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 29 2025 04:33:33 hybrid1120 maldet(10369): {update} latest version already installed. Dec 29 2025 04:33:33 hybrid1120 maldet(10482): {sigup} performing signature update check... Dec 29 2025 04:33:33 hybrid1120 maldet(10482): {sigup} local signature set is version 20251225273290 Dec 29 2025 04:33:33 hybrid1120 maldet(10482): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 29 2025 04:33:33 hybrid1120 maldet(10482): {sigup} new signature set 202512281244183 available Dec 29 2025 04:33:33 hybrid1120 maldet(10482): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 29 2025 04:33:35 hybrid1120 maldet(10482): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 29 2025 04:33:35 hybrid1120 maldet(10482): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Dec 29 2025 04:33:35 hybrid1120 maldet(10482): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 29 2025 04:33:36 hybrid1120 maldet(10482): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 29 2025 04:33:36 hybrid1120 maldet(10482): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Dec 29 2025 04:33:36 hybrid1120 maldet(10482): {sigup} verified md5sum of maldet-sigpack.tgz Dec 29 2025 04:33:37 hybrid1120 maldet(10482): {sigup} unpacked and installed maldet-sigpack.tgz Dec 29 2025 04:33:37 hybrid1120 maldet(10482): {sigup} verified md5sum of maldet-clean.tgz Dec 29 2025 04:33:37 hybrid1120 maldet(10482): {sigup} unpacked and installed maldet-clean.tgz Dec 29 2025 04:33:37 hybrid1120 maldet(10482): {sigup} signature set update completed Dec 29 2025 04:33:37 hybrid1120 maldet(10482): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 29 2025 04:33:37 hybrid1120 maldet(10701): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 29 2025 04:33:37 hybrid1120 maldet(10701): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 29 2025 04:33:37 hybrid1120 maldet(10701): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 29 2025 04:33:37 hybrid1120 maldet(10701): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 29 2025 04:33:37 hybrid1120 maldet(10701): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 29 2025 04:41:38 hybrid1120 maldet(10701): {scan} file list completed in 480s, found 1590 files... Dec 29 2025 04:41:38 hybrid1120 maldet(10701): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1590 files) in progress... Dec 29 2025 04:42:20 hybrid1120 maldet(10701): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1590, malware hits 0, cleaned hits 0, time 523s Dec 29 2025 04:42:20 hybrid1120 maldet(10701): {scan} scan report saved, to view run: maldet --report 251229-0433.10701 Dec 30 2025 05:31:21 hybrid1120 maldet(28194): {update} checking for available updates... Dec 30 2025 05:31:22 hybrid1120 maldet(28194): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 30 2025 05:31:22 hybrid1120 maldet(28194): {update} hashing install files and checking against server... Dec 30 2025 05:31:23 hybrid1120 maldet(28194): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 30 2025 05:31:23 hybrid1120 maldet(28194): {update} latest version already installed. Dec 30 2025 05:31:23 hybrid1120 maldet(28304): {sigup} performing signature update check... Dec 30 2025 05:31:23 hybrid1120 maldet(28304): {sigup} local signature set is version 202512281244183 Dec 30 2025 05:31:23 hybrid1120 maldet(28304): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 30 2025 05:31:23 hybrid1120 maldet(28304): {sigup} latest signature set already installed Dec 30 2025 05:31:23 hybrid1120 maldet(28402): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 30 2025 05:31:24 hybrid1120 maldet(28402): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 30 2025 05:31:24 hybrid1120 maldet(28402): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 30 2025 05:31:24 hybrid1120 maldet(28402): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 30 2025 05:31:24 hybrid1120 maldet(28402): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 30 2025 05:38:28 hybrid1120 maldet(28402): {scan} file list completed in 423s, found 1695 files... Dec 30 2025 05:38:28 hybrid1120 maldet(28402): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1695 files) in progress... Dec 30 2025 05:39:22 hybrid1120 maldet(28402): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1695, malware hits 0, cleaned hits 0, time 479s Dec 30 2025 05:39:22 hybrid1120 maldet(28402): {scan} scan report saved, to view run: maldet --report 251230-0531.28402 Dec 31 2025 04:33:37 hybrid1120 maldet(16914): {update} checking for available updates... Dec 31 2025 04:33:37 hybrid1120 maldet(16914): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 31 2025 04:33:37 hybrid1120 maldet(16914): {update} hashing install files and checking against server... Dec 31 2025 04:33:38 hybrid1120 maldet(16914): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 31 2025 04:33:38 hybrid1120 maldet(16914): {update} latest version already installed. Dec 31 2025 04:33:38 hybrid1120 maldet(17024): {sigup} performing signature update check... Dec 31 2025 04:33:38 hybrid1120 maldet(17024): {sigup} local signature set is version 202512281244183 Dec 31 2025 04:33:38 hybrid1120 maldet(17024): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 31 2025 04:33:38 hybrid1120 maldet(17024): {sigup} latest signature set already installed Dec 31 2025 04:33:38 hybrid1120 maldet(17112): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 31 2025 04:33:39 hybrid1120 maldet(17112): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 31 2025 04:33:39 hybrid1120 maldet(17112): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 31 2025 04:33:39 hybrid1120 maldet(17112): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 31 2025 04:33:39 hybrid1120 maldet(17112): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 31 2025 04:39:30 hybrid1120 maldet(17112): {scan} file list completed in 351s, found 1768 files... Dec 31 2025 04:39:30 hybrid1120 maldet(17112): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1768 files) in progress... Dec 31 2025 04:40:16 hybrid1120 maldet(17112): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1768, malware hits 0, cleaned hits 0, time 398s Dec 31 2025 04:40:16 hybrid1120 maldet(17112): {scan} scan report saved, to view run: maldet --report 251231-0433.17112 Jan 01 2026 04:16:55 hybrid1120 maldet(25193): {update} checking for available updates... Jan 01 2026 04:16:56 hybrid1120 maldet(25193): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 01 2026 04:16:56 hybrid1120 maldet(25193): {update} hashing install files and checking against server... Jan 01 2026 04:16:56 hybrid1120 maldet(25193): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 01 2026 04:16:56 hybrid1120 maldet(25193): {update} latest version already installed. Jan 01 2026 04:16:56 hybrid1120 maldet(25307): {sigup} performing signature update check... Jan 01 2026 04:16:56 hybrid1120 maldet(25307): {sigup} local signature set is version 202512281244183 Jan 01 2026 04:16:57 hybrid1120 maldet(25307): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 01 2026 04:16:57 hybrid1120 maldet(25307): {sigup} new signature set 202512312207256 available Jan 01 2026 04:16:57 hybrid1120 maldet(25307): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 01 2026 04:16:58 hybrid1120 maldet(25307): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 01 2026 04:16:58 hybrid1120 maldet(25307): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jan 01 2026 04:16:58 hybrid1120 maldet(25307): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 01 2026 04:16:58 hybrid1120 maldet(25307): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 01 2026 04:16:59 hybrid1120 maldet(25307): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jan 01 2026 04:16:59 hybrid1120 maldet(25307): {sigup} verified md5sum of maldet-sigpack.tgz Jan 01 2026 04:16:59 hybrid1120 maldet(25307): {sigup} unpacked and installed maldet-sigpack.tgz Jan 01 2026 04:16:59 hybrid1120 maldet(25307): {sigup} verified md5sum of maldet-clean.tgz Jan 01 2026 04:17:00 hybrid1120 maldet(25307): {sigup} unpacked and installed maldet-clean.tgz Jan 01 2026 04:17:00 hybrid1120 maldet(25307): {sigup} signature set update completed Jan 01 2026 04:17:00 hybrid1120 maldet(25307): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 01 2026 04:17:00 hybrid1120 maldet(25549): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 01 2026 04:17:00 hybrid1120 maldet(25549): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 01 2026 04:17:00 hybrid1120 maldet(25549): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 01 2026 04:17:00 hybrid1120 maldet(25549): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 01 2026 04:17:00 hybrid1120 maldet(25549): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 01 2026 04:26:50 hybrid1120 maldet(25549): {scan} file list completed in 590s, found 1689 files... Jan 01 2026 04:26:51 hybrid1120 maldet(25549): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1689 files) in progress... Jan 01 2026 04:27:41 hybrid1120 maldet(25549): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1689, malware hits 0, cleaned hits 0, time 641s Jan 01 2026 04:27:41 hybrid1120 maldet(25549): {scan} scan report saved, to view run: maldet --report 260101-0417.25549 Jan 02 2026 04:47:59 hybrid1120 maldet(29022): {update} checking for available updates... Jan 02 2026 04:48:00 hybrid1120 maldet(29022): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 02 2026 04:48:00 hybrid1120 maldet(29022): {update} hashing install files and checking against server... Jan 02 2026 04:48:00 hybrid1120 maldet(29022): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 02 2026 04:48:00 hybrid1120 maldet(29022): {update} latest version already installed. Jan 02 2026 04:48:00 hybrid1120 maldet(29133): {sigup} performing signature update check... Jan 02 2026 04:48:00 hybrid1120 maldet(29133): {sigup} local signature set is version 202512312207256 Jan 02 2026 04:48:01 hybrid1120 maldet(29133): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 02 2026 04:48:01 hybrid1120 maldet(29133): {sigup} new signature set 202601012945490 available Jan 02 2026 04:48:01 hybrid1120 maldet(29133): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 02 2026 04:48:02 hybrid1120 maldet(29133): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 02 2026 04:48:03 hybrid1120 maldet(29133): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jan 02 2026 04:48:03 hybrid1120 maldet(29133): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 02 2026 04:48:03 hybrid1120 maldet(29133): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 02 2026 04:48:03 hybrid1120 maldet(29133): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jan 02 2026 04:48:03 hybrid1120 maldet(29133): {sigup} verified md5sum of maldet-sigpack.tgz Jan 02 2026 04:48:04 hybrid1120 maldet(29133): {sigup} unpacked and installed maldet-sigpack.tgz Jan 02 2026 04:48:04 hybrid1120 maldet(29133): {sigup} verified md5sum of maldet-clean.tgz Jan 02 2026 04:48:04 hybrid1120 maldet(29133): {sigup} unpacked and installed maldet-clean.tgz Jan 02 2026 04:48:04 hybrid1120 maldet(29133): {sigup} signature set update completed Jan 02 2026 04:48:04 hybrid1120 maldet(29133): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 02 2026 04:48:04 hybrid1120 maldet(29367): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 02 2026 04:48:05 hybrid1120 maldet(29367): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 02 2026 04:48:05 hybrid1120 maldet(29367): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 02 2026 04:48:05 hybrid1120 maldet(29367): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 02 2026 04:48:05 hybrid1120 maldet(29367): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 02 2026 04:53:27 hybrid1120 maldet(29367): {scan} file list completed in 322s, found 1995 files... Jan 02 2026 04:53:27 hybrid1120 maldet(29367): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1995 files) in progress... Jan 02 2026 04:54:44 hybrid1120 maldet(29367): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1995, malware hits 0, cleaned hits 0, time 399s Jan 02 2026 04:54:44 hybrid1120 maldet(29367): {scan} scan report saved, to view run: maldet --report 260102-0448.29367 Jan 03 2026 04:37:57 hybrid1120 maldet(11140): {update} checking for available updates... Jan 03 2026 04:37:58 hybrid1120 maldet(11140): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 03 2026 04:37:58 hybrid1120 maldet(11140): {update} hashing install files and checking against server... Jan 03 2026 04:37:58 hybrid1120 maldet(11140): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 03 2026 04:37:58 hybrid1120 maldet(11140): {update} latest version already installed. Jan 03 2026 04:37:58 hybrid1120 maldet(11278): {sigup} performing signature update check... Jan 03 2026 04:37:58 hybrid1120 maldet(11278): {sigup} local signature set is version 202601012945490 Jan 03 2026 04:37:59 hybrid1120 maldet(11278): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 03 2026 04:37:59 hybrid1120 maldet(11278): {sigup} latest signature set already installed Jan 03 2026 04:37:59 hybrid1120 maldet(11372): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 03 2026 04:38:00 hybrid1120 maldet(11372): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 03 2026 04:38:00 hybrid1120 maldet(11372): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 03 2026 04:38:00 hybrid1120 maldet(11372): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 03 2026 04:38:00 hybrid1120 maldet(11372): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 03 2026 04:43:35 hybrid1120 maldet(11372): {scan} file list completed in 335s, found 2291 files... Jan 03 2026 04:43:35 hybrid1120 maldet(11372): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2291 files) in progress... Jan 03 2026 04:45:02 hybrid1120 maldet(11372): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2291, malware hits 0, cleaned hits 0, time 423s Jan 03 2026 04:45:02 hybrid1120 maldet(11372): {scan} scan report saved, to view run: maldet --report 260103-0437.11372 Jan 04 2026 03:57:52 hybrid1120 maldet(32718): {update} checking for available updates... Jan 04 2026 03:57:53 hybrid1120 maldet(32718): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 04 2026 03:57:53 hybrid1120 maldet(32718): {update} hashing install files and checking against server... Jan 04 2026 03:57:53 hybrid1120 maldet(32718): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 04 2026 03:57:53 hybrid1120 maldet(32718): {update} latest version already installed. Jan 04 2026 03:57:53 hybrid1120 maldet(391): {sigup} performing signature update check... Jan 04 2026 03:57:53 hybrid1120 maldet(391): {sigup} local signature set is version 202601012945490 Jan 04 2026 03:57:54 hybrid1120 maldet(391): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 04 2026 03:57:54 hybrid1120 maldet(391): {sigup} latest signature set already installed Jan 04 2026 03:57:54 hybrid1120 maldet(479): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 04 2026 03:57:54 hybrid1120 maldet(479): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 04 2026 03:57:54 hybrid1120 maldet(479): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 04 2026 03:57:54 hybrid1120 maldet(479): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 04 2026 03:57:54 hybrid1120 maldet(479): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 04 2026 04:03:19 hybrid1120 maldet(479): {scan} file list completed in 325s, found 1828 files... Jan 04 2026 04:03:19 hybrid1120 maldet(479): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1828 files) in progress... Jan 04 2026 04:04:13 hybrid1120 maldet(479): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1828, malware hits 0, cleaned hits 0, time 379s Jan 04 2026 04:04:13 hybrid1120 maldet(479): {scan} scan report saved, to view run: maldet --report 260104-0357.479 Jan 05 2026 02:53:33 hybrid1120 maldet(26085): {update} checking for available updates... Jan 05 2026 02:53:34 hybrid1120 maldet(26085): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 05 2026 02:53:34 hybrid1120 maldet(26085): {update} hashing install files and checking against server... Jan 05 2026 02:53:34 hybrid1120 maldet(26085): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 05 2026 02:53:34 hybrid1120 maldet(26085): {update} latest version already installed. Jan 05 2026 02:53:34 hybrid1120 maldet(26199): {sigup} performing signature update check... Jan 05 2026 02:53:34 hybrid1120 maldet(26199): {sigup} local signature set is version 202601012945490 Jan 05 2026 02:53:35 hybrid1120 maldet(26199): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 05 2026 02:53:35 hybrid1120 maldet(26199): {sigup} new signature set 202601043906265 available Jan 05 2026 02:53:35 hybrid1120 maldet(26199): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 05 2026 02:53:36 hybrid1120 maldet(26199): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 05 2026 02:53:36 hybrid1120 maldet(26199): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jan 05 2026 02:53:36 hybrid1120 maldet(26199): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 05 2026 02:53:36 hybrid1120 maldet(26199): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 05 2026 02:53:37 hybrid1120 maldet(26199): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jan 05 2026 02:53:37 hybrid1120 maldet(26199): {sigup} verified md5sum of maldet-sigpack.tgz Jan 05 2026 02:53:37 hybrid1120 maldet(26199): {sigup} unpacked and installed maldet-sigpack.tgz Jan 05 2026 02:53:37 hybrid1120 maldet(26199): {sigup} verified md5sum of maldet-clean.tgz Jan 05 2026 02:53:37 hybrid1120 maldet(26199): {sigup} unpacked and installed maldet-clean.tgz Jan 05 2026 02:53:37 hybrid1120 maldet(26199): {sigup} signature set update completed Jan 05 2026 02:53:37 hybrid1120 maldet(26199): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 05 2026 02:53:38 hybrid1120 maldet(26418): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 05 2026 02:53:38 hybrid1120 maldet(26418): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 05 2026 02:53:38 hybrid1120 maldet(26418): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 05 2026 02:53:38 hybrid1120 maldet(26418): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 05 2026 02:53:38 hybrid1120 maldet(26418): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 05 2026 02:58:24 hybrid1120 maldet(26418): {scan} file list completed in 286s, found 1496 files... Jan 05 2026 02:58:24 hybrid1120 maldet(26418): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1496 files) in progress... Jan 05 2026 02:59:02 hybrid1120 maldet(26418): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1496, malware hits 0, cleaned hits 0, time 324s Jan 05 2026 02:59:02 hybrid1120 maldet(26418): {scan} scan report saved, to view run: maldet --report 260105-0253.26418 Jan 06 2026 04:50:30 hybrid1120 maldet(16083): {update} checking for available updates... Jan 06 2026 04:50:30 hybrid1120 maldet(16083): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 06 2026 04:50:30 hybrid1120 maldet(16083): {update} hashing install files and checking against server... Jan 06 2026 04:50:31 hybrid1120 maldet(16083): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 06 2026 04:50:31 hybrid1120 maldet(16083): {update} latest version already installed. Jan 06 2026 04:50:31 hybrid1120 maldet(16201): {sigup} performing signature update check... Jan 06 2026 04:50:31 hybrid1120 maldet(16201): {sigup} local signature set is version 202601043906265 Jan 06 2026 04:50:32 hybrid1120 maldet(16201): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 06 2026 04:50:32 hybrid1120 maldet(16201): {sigup} latest signature set already installed Jan 06 2026 04:50:32 hybrid1120 maldet(16290): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 06 2026 04:50:32 hybrid1120 maldet(16290): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 06 2026 04:50:32 hybrid1120 maldet(16290): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 06 2026 04:50:32 hybrid1120 maldet(16290): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 06 2026 04:50:32 hybrid1120 maldet(16290): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 06 2026 04:55:16 hybrid1120 maldet(16290): {scan} file list completed in 284s, found 1464 files... Jan 06 2026 04:55:16 hybrid1120 maldet(16290): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1464 files) in progress... Jan 06 2026 04:55:56 hybrid1120 maldet(16290): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1464, malware hits 0, cleaned hits 0, time 324s Jan 06 2026 04:55:56 hybrid1120 maldet(16290): {scan} scan report saved, to view run: maldet --report 260106-0450.16290 Jan 07 2026 05:44:05 hybrid1120 maldet(21191): {update} checking for available updates... Jan 07 2026 05:44:06 hybrid1120 maldet(21191): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 07 2026 05:44:06 hybrid1120 maldet(21191): {update} hashing install files and checking against server... Jan 07 2026 05:44:07 hybrid1120 maldet(21191): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 07 2026 05:44:07 hybrid1120 maldet(21191): {update} latest version already installed. Jan 07 2026 05:44:07 hybrid1120 maldet(21308): {sigup} performing signature update check... Jan 07 2026 05:44:07 hybrid1120 maldet(21308): {sigup} local signature set is version 202601043906265 Jan 07 2026 05:44:07 hybrid1120 maldet(21308): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 07 2026 05:44:07 hybrid1120 maldet(21308): {sigup} latest signature set already installed Jan 07 2026 05:44:07 hybrid1120 maldet(21397): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 07 2026 05:44:08 hybrid1120 maldet(21397): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 07 2026 05:44:08 hybrid1120 maldet(21397): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 07 2026 05:44:08 hybrid1120 maldet(21397): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 07 2026 05:44:08 hybrid1120 maldet(21397): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 07 2026 05:49:08 hybrid1120 maldet(21397): {scan} file list completed in 299s, found 1428 files... Jan 07 2026 05:49:08 hybrid1120 maldet(21397): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1428 files) in progress... Jan 07 2026 05:49:46 hybrid1120 maldet(21397): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1428, malware hits 0, cleaned hits 0, time 339s Jan 07 2026 05:49:46 hybrid1120 maldet(21397): {scan} scan report saved, to view run: maldet --report 260107-0544.21397 Jan 08 2026 03:52:00 hybrid1120 maldet(16784): {update} checking for available updates... Jan 08 2026 03:52:01 hybrid1120 maldet(16784): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 08 2026 03:52:01 hybrid1120 maldet(16784): {update} hashing install files and checking against server... Jan 08 2026 03:52:02 hybrid1120 maldet(16784): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 08 2026 03:52:02 hybrid1120 maldet(16784): {update} latest version already installed. Jan 08 2026 03:52:02 hybrid1120 maldet(16904): {sigup} performing signature update check... Jan 08 2026 03:52:02 hybrid1120 maldet(16904): {sigup} local signature set is version 202601043906265 Jan 08 2026 03:52:02 hybrid1120 maldet(16904): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 08 2026 03:52:03 hybrid1120 maldet(16904): {sigup} new signature set 20260107676235 available Jan 08 2026 03:52:03 hybrid1120 maldet(16904): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 08 2026 03:52:04 hybrid1120 maldet(16904): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 08 2026 03:52:04 hybrid1120 maldet(16904): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jan 08 2026 03:52:04 hybrid1120 maldet(16904): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 08 2026 03:52:04 hybrid1120 maldet(16904): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 08 2026 03:52:05 hybrid1120 maldet(16904): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jan 08 2026 03:52:05 hybrid1120 maldet(16904): {sigup} verified md5sum of maldet-sigpack.tgz Jan 08 2026 03:52:06 hybrid1120 maldet(16904): {sigup} unpacked and installed maldet-sigpack.tgz Jan 08 2026 03:52:06 hybrid1120 maldet(16904): {sigup} verified md5sum of maldet-clean.tgz Jan 08 2026 03:52:06 hybrid1120 maldet(16904): {sigup} unpacked and installed maldet-clean.tgz Jan 08 2026 03:52:06 hybrid1120 maldet(16904): {sigup} signature set update completed Jan 08 2026 03:52:06 hybrid1120 maldet(16904): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 08 2026 03:52:06 hybrid1120 maldet(17119): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 08 2026 03:52:06 hybrid1120 maldet(17119): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 08 2026 03:52:06 hybrid1120 maldet(17119): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 08 2026 03:52:06 hybrid1120 maldet(17119): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 08 2026 03:52:06 hybrid1120 maldet(17119): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 08 2026 03:57:28 hybrid1120 maldet(17119): {scan} file list completed in 322s, found 1893 files... Jan 08 2026 03:57:28 hybrid1120 maldet(17119): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1893 files) in progress... Jan 08 2026 03:58:16 hybrid1120 maldet(17119): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1893, malware hits 0, cleaned hits 0, time 370s Jan 08 2026 03:58:16 hybrid1120 maldet(17119): {scan} scan report saved, to view run: maldet --report 260108-0352.17119 Jan 09 2026 03:56:35 hybrid1120 maldet(7470): {update} checking for available updates... Jan 09 2026 03:56:35 hybrid1120 maldet(7470): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 09 2026 03:56:35 hybrid1120 maldet(7470): {update} hashing install files and checking against server... Jan 09 2026 03:56:36 hybrid1120 maldet(7470): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 09 2026 03:56:36 hybrid1120 maldet(7470): {update} latest version already installed. Jan 09 2026 03:56:36 hybrid1120 maldet(7582): {sigup} performing signature update check... Jan 09 2026 03:56:36 hybrid1120 maldet(7582): {sigup} local signature set is version 20260107676235 Jan 09 2026 03:56:36 hybrid1120 maldet(7582): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 09 2026 03:56:36 hybrid1120 maldet(7582): {sigup} latest signature set already installed Jan 09 2026 03:56:36 hybrid1120 maldet(7670): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 09 2026 03:56:37 hybrid1120 maldet(7670): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 09 2026 03:56:37 hybrid1120 maldet(7670): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 09 2026 03:56:37 hybrid1120 maldet(7670): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 09 2026 03:56:37 hybrid1120 maldet(7670): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 09 2026 04:02:55 hybrid1120 maldet(7670): {scan} file list completed in 377s, found 1906 files... Jan 09 2026 04:02:55 hybrid1120 maldet(7670): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1906 files) in progress... Jan 09 2026 04:03:52 hybrid1120 maldet(7670): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1906, malware hits 0, cleaned hits 0, time 436s Jan 09 2026 04:03:52 hybrid1120 maldet(7670): {scan} scan report saved, to view run: maldet --report 260109-0356.7670 Jan 10 2026 04:53:47 hybrid1120 maldet(11008): {update} checking for available updates... Jan 10 2026 04:53:47 hybrid1120 maldet(11008): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 10 2026 04:53:47 hybrid1120 maldet(11008): {update} hashing install files and checking against server... Jan 10 2026 04:53:48 hybrid1120 maldet(11008): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 10 2026 04:53:48 hybrid1120 maldet(11008): {update} latest version already installed. Jan 10 2026 04:53:48 hybrid1120 maldet(11120): {sigup} performing signature update check... Jan 10 2026 04:53:48 hybrid1120 maldet(11120): {sigup} local signature set is version 20260107676235 Jan 10 2026 04:53:49 hybrid1120 maldet(11120): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 10 2026 04:53:49 hybrid1120 maldet(11120): {sigup} latest signature set already installed Jan 10 2026 04:53:49 hybrid1120 maldet(11210): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 10 2026 04:53:49 hybrid1120 maldet(11210): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 10 2026 04:53:49 hybrid1120 maldet(11210): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 10 2026 04:53:49 hybrid1120 maldet(11210): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 10 2026 04:53:49 hybrid1120 maldet(11210): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 10 2026 04:58:18 hybrid1120 maldet(11210): {scan} file list completed in 269s, found 1182 files... Jan 10 2026 04:58:18 hybrid1120 maldet(11210): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1182 files) in progress... Jan 10 2026 04:58:59 hybrid1120 maldet(11210): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1182, malware hits 0, cleaned hits 0, time 310s Jan 10 2026 04:58:59 hybrid1120 maldet(11210): {scan} scan report saved, to view run: maldet --report 260110-0453.11210 Jan 10 2026 09:50:05 hybrid1120 maldet(1470): {mon} could not find monitor mode dependency 'ed' in PATH, please apt/yum/dnf install ed and try again. Jan 10 2026 15:51:28 hybrid1120 maldet(1290): {mon} could not find monitor mode dependency 'ed' in PATH, please apt/yum/dnf install ed and try again. Jan 11 2026 05:45:41 hybrid1120 maldet(21377): {update} checking for available updates... Jan 11 2026 05:45:42 hybrid1120 maldet(21377): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 11 2026 05:45:42 hybrid1120 maldet(21377): {update} hashing install files and checking against server... Jan 11 2026 05:45:42 hybrid1120 maldet(21377): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 11 2026 05:45:42 hybrid1120 maldet(21377): {update} latest version already installed. Jan 11 2026 05:45:42 hybrid1120 maldet(21488): {sigup} performing signature update check... Jan 11 2026 05:45:42 hybrid1120 maldet(21488): {sigup} local signature set is version 20260107676235 Jan 11 2026 05:45:42 hybrid1120 maldet(21488): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 11 2026 05:45:42 hybrid1120 maldet(21488): {sigup} new signature set 202601101643813 available Jan 11 2026 05:45:42 hybrid1120 maldet(21488): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 11 2026 05:45:43 hybrid1120 maldet(21488): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 11 2026 05:45:44 hybrid1120 maldet(21488): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jan 11 2026 05:45:44 hybrid1120 maldet(21488): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 11 2026 05:45:44 hybrid1120 maldet(21488): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 11 2026 05:45:45 hybrid1120 maldet(21488): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jan 11 2026 05:45:45 hybrid1120 maldet(21488): {sigup} verified md5sum of maldet-sigpack.tgz Jan 11 2026 05:45:45 hybrid1120 maldet(21488): {sigup} unpacked and installed maldet-sigpack.tgz Jan 11 2026 05:45:45 hybrid1120 maldet(21488): {sigup} verified md5sum of maldet-clean.tgz Jan 11 2026 05:45:45 hybrid1120 maldet(21488): {sigup} unpacked and installed maldet-clean.tgz Jan 11 2026 05:45:45 hybrid1120 maldet(21488): {sigup} signature set update completed Jan 11 2026 05:45:45 hybrid1120 maldet(21488): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 11 2026 05:45:46 hybrid1120 maldet(21711): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 11 2026 05:45:46 hybrid1120 maldet(21711): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 11 2026 05:45:46 hybrid1120 maldet(21711): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 11 2026 05:45:46 hybrid1120 maldet(21711): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 11 2026 05:45:46 hybrid1120 maldet(21711): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 11 2026 05:51:20 hybrid1120 maldet(21711): {scan} file list completed in 333s, found 1119 files... Jan 11 2026 05:51:20 hybrid1120 maldet(21711): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1119 files) in progress... Jan 11 2026 05:51:53 hybrid1120 maldet(21711): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1119, malware hits 0, cleaned hits 0, time 367s Jan 11 2026 05:51:53 hybrid1120 maldet(21711): {scan} scan report saved, to view run: maldet --report 260111-0545.21711 Jan 12 2026 03:30:09 hybrid1120 maldet(18170): {update} checking for available updates... Jan 12 2026 03:30:10 hybrid1120 maldet(18170): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 12 2026 03:30:10 hybrid1120 maldet(18170): {update} hashing install files and checking against server... Jan 12 2026 03:30:10 hybrid1120 maldet(18170): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 12 2026 03:30:10 hybrid1120 maldet(18170): {update} latest version already installed. Jan 12 2026 03:30:10 hybrid1120 maldet(18326): {sigup} performing signature update check... Jan 12 2026 03:30:10 hybrid1120 maldet(18326): {sigup} local signature set is version 202601101643813 Jan 12 2026 03:30:11 hybrid1120 maldet(18326): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 12 2026 03:30:11 hybrid1120 maldet(18326): {sigup} latest signature set already installed Jan 12 2026 03:30:11 hybrid1120 maldet(18435): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 12 2026 03:30:12 hybrid1120 maldet(18435): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 12 2026 03:30:12 hybrid1120 maldet(18435): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 12 2026 03:30:12 hybrid1120 maldet(18435): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 12 2026 03:30:12 hybrid1120 maldet(18435): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 12 2026 03:36:38 hybrid1120 maldet(18435): {scan} file list completed in 385s, found 1459 files... Jan 12 2026 03:36:38 hybrid1120 maldet(18435): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1459 files) in progress... Jan 12 2026 03:37:23 hybrid1120 maldet(18435): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1459, malware hits 0, cleaned hits 0, time 432s Jan 12 2026 03:37:23 hybrid1120 maldet(18435): {scan} scan report saved, to view run: maldet --report 260112-0330.18435 Jan 13 2026 04:00:03 hybrid1120 maldet(3411): {update} checking for available updates... Jan 13 2026 04:00:04 hybrid1120 maldet(3411): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 13 2026 04:00:04 hybrid1120 maldet(3411): {update} hashing install files and checking against server... Jan 13 2026 04:00:05 hybrid1120 maldet(3411): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 13 2026 04:00:05 hybrid1120 maldet(3411): {update} latest version already installed. Jan 13 2026 04:00:05 hybrid1120 maldet(3526): {sigup} performing signature update check... Jan 13 2026 04:00:05 hybrid1120 maldet(3526): {sigup} local signature set is version 202601101643813 Jan 13 2026 04:00:05 hybrid1120 maldet(3526): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 13 2026 04:00:05 hybrid1120 maldet(3526): {sigup} latest signature set already installed Jan 13 2026 04:00:05 hybrid1120 maldet(3616): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 13 2026 04:00:06 hybrid1120 maldet(3616): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 13 2026 04:00:06 hybrid1120 maldet(3616): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 13 2026 04:00:06 hybrid1120 maldet(3616): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 13 2026 04:00:06 hybrid1120 maldet(3616): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 13 2026 04:08:51 hybrid1120 maldet(3616): {scan} file list completed in 525s, found 1762 files... Jan 13 2026 04:08:51 hybrid1120 maldet(3616): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1762 files) in progress... Jan 13 2026 04:09:39 hybrid1120 maldet(3616): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1762, malware hits 0, cleaned hits 0, time 573s Jan 13 2026 04:09:39 hybrid1120 maldet(3616): {scan} scan report saved, to view run: maldet --report 260113-0400.3616 Jan 14 2026 03:19:49 hybrid1120 maldet(29472): {update} checking for available updates... Jan 14 2026 03:19:50 hybrid1120 maldet(29472): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 14 2026 03:19:50 hybrid1120 maldet(29472): {update} hashing install files and checking against server... Jan 14 2026 03:19:50 hybrid1120 maldet(29472): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 14 2026 03:19:50 hybrid1120 maldet(29472): {update} latest version already installed. Jan 14 2026 03:19:50 hybrid1120 maldet(29587): {sigup} performing signature update check... Jan 14 2026 03:19:50 hybrid1120 maldet(29587): {sigup} local signature set is version 202601101643813 Jan 14 2026 03:19:51 hybrid1120 maldet(29587): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 14 2026 03:19:51 hybrid1120 maldet(29587): {sigup} latest signature set already installed Jan 14 2026 03:19:51 hybrid1120 maldet(29675): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 14 2026 03:19:52 hybrid1120 maldet(29675): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 14 2026 03:19:52 hybrid1120 maldet(29675): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 14 2026 03:19:52 hybrid1120 maldet(29675): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 14 2026 03:19:52 hybrid1120 maldet(29675): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 14 2026 03:28:47 hybrid1120 maldet(29675): {scan} file list completed in 535s, found 1978 files... Jan 14 2026 03:28:47 hybrid1120 maldet(29675): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1978 files) in progress... Jan 14 2026 03:29:56 hybrid1120 maldet(29675): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1978, malware hits 0, cleaned hits 0, time 605s Jan 14 2026 03:29:56 hybrid1120 maldet(29675): {scan} scan report saved, to view run: maldet --report 260114-0319.29675 Jan 15 2026 04:05:28 hybrid1120 maldet(32693): {update} checking for available updates... Jan 15 2026 04:05:29 hybrid1120 maldet(32693): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 15 2026 04:05:29 hybrid1120 maldet(32693): {update} hashing install files and checking against server... Jan 15 2026 04:05:29 hybrid1120 maldet(32693): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 15 2026 04:05:29 hybrid1120 maldet(32693): {update} latest version already installed. Jan 15 2026 04:05:29 hybrid1120 maldet(349): {sigup} performing signature update check... Jan 15 2026 04:05:29 hybrid1120 maldet(349): {sigup} local signature set is version 202601101643813 Jan 15 2026 04:05:30 hybrid1120 maldet(349): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 15 2026 04:05:30 hybrid1120 maldet(349): {sigup} latest signature set already installed Jan 15 2026 04:05:30 hybrid1120 maldet(440): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 15 2026 04:05:31 hybrid1120 maldet(440): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 15 2026 04:05:31 hybrid1120 maldet(440): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 15 2026 04:05:31 hybrid1120 maldet(440): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 15 2026 04:05:31 hybrid1120 maldet(440): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 15 2026 04:11:33 hybrid1120 maldet(440): {scan} file list completed in 362s, found 2006 files... Jan 15 2026 04:11:33 hybrid1120 maldet(440): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2006 files) in progress... Jan 15 2026 04:12:27 hybrid1120 maldet(440): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2006, malware hits 0, cleaned hits 0, time 417s Jan 15 2026 04:12:27 hybrid1120 maldet(440): {scan} scan report saved, to view run: maldet --report 260115-0405.440 Jan 16 2026 03:30:04 hybrid1120 maldet(31974): {update} checking for available updates... Jan 16 2026 03:30:05 hybrid1120 maldet(31974): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 16 2026 03:30:05 hybrid1120 maldet(31974): {update} hashing install files and checking against server... Jan 16 2026 03:30:06 hybrid1120 maldet(31974): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 16 2026 03:30:06 hybrid1120 maldet(31974): {update} latest version already installed. Jan 16 2026 03:30:06 hybrid1120 maldet(32190): {sigup} performing signature update check... Jan 16 2026 03:30:06 hybrid1120 maldet(32190): {sigup} local signature set is version 202601101643813 Jan 16 2026 03:30:06 hybrid1120 maldet(32190): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 16 2026 03:30:06 hybrid1120 maldet(32190): {sigup} latest signature set already installed Jan 16 2026 03:30:06 hybrid1120 maldet(32335): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 16 2026 03:30:07 hybrid1120 maldet(32335): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 16 2026 03:30:07 hybrid1120 maldet(32335): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 16 2026 03:30:07 hybrid1120 maldet(32335): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 16 2026 03:30:07 hybrid1120 maldet(32335): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 16 2026 03:35:15 hybrid1120 maldet(32335): {scan} file list completed in 308s, found 1774 files... Jan 16 2026 03:35:15 hybrid1120 maldet(32335): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1774 files) in progress... Jan 16 2026 03:36:07 hybrid1120 maldet(32335): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1774, malware hits 0, cleaned hits 0, time 361s Jan 16 2026 03:36:07 hybrid1120 maldet(32335): {scan} scan report saved, to view run: maldet --report 260116-0330.32335 Jan 17 2026 04:52:47 hybrid1120 maldet(1741): {update} checking for available updates... Jan 17 2026 04:52:48 hybrid1120 maldet(1741): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 17 2026 04:52:48 hybrid1120 maldet(1741): {update} hashing install files and checking against server... Jan 17 2026 04:52:48 hybrid1120 maldet(1741): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 17 2026 04:52:48 hybrid1120 maldet(1741): {update} latest version already installed. Jan 17 2026 04:52:48 hybrid1120 maldet(1878): {sigup} performing signature update check... Jan 17 2026 04:52:48 hybrid1120 maldet(1878): {sigup} local signature set is version 202601101643813 Jan 17 2026 04:52:49 hybrid1120 maldet(1878): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 17 2026 04:52:49 hybrid1120 maldet(1878): {sigup} new signature set 20260116700884 available Jan 17 2026 04:52:49 hybrid1120 maldet(1878): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 17 2026 04:52:50 hybrid1120 maldet(1878): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 17 2026 04:52:51 hybrid1120 maldet(1878): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jan 17 2026 04:52:51 hybrid1120 maldet(1878): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 17 2026 04:52:51 hybrid1120 maldet(1878): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 17 2026 04:52:51 hybrid1120 maldet(1878): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jan 17 2026 04:52:51 hybrid1120 maldet(1878): {sigup} verified md5sum of maldet-sigpack.tgz Jan 17 2026 04:52:52 hybrid1120 maldet(1878): {sigup} unpacked and installed maldet-sigpack.tgz Jan 17 2026 04:52:52 hybrid1120 maldet(1878): {sigup} verified md5sum of maldet-clean.tgz Jan 17 2026 04:52:52 hybrid1120 maldet(1878): {sigup} unpacked and installed maldet-clean.tgz Jan 17 2026 04:52:52 hybrid1120 maldet(1878): {sigup} signature set update completed Jan 17 2026 04:52:52 hybrid1120 maldet(1878): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 17 2026 04:52:52 hybrid1120 maldet(2180): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 17 2026 04:52:53 hybrid1120 maldet(2180): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 17 2026 04:52:53 hybrid1120 maldet(2180): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 17 2026 04:52:53 hybrid1120 maldet(2180): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 17 2026 04:52:53 hybrid1120 maldet(2180): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 17 2026 04:57:51 hybrid1120 maldet(2180): {scan} file list completed in 298s, found 1376 files... Jan 17 2026 04:57:51 hybrid1120 maldet(2180): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1376 files) in progress... Jan 17 2026 04:58:29 hybrid1120 maldet(2180): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1376, malware hits 0, cleaned hits 0, time 337s Jan 17 2026 04:58:29 hybrid1120 maldet(2180): {scan} scan report saved, to view run: maldet --report 260117-0452.2180 Jan 18 2026 03:01:37 hybrid1120 maldet(13674): {update} checking for available updates... Jan 18 2026 03:02:17 hybrid1120 maldet(13674): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 18 2026 03:02:17 hybrid1120 maldet(13674): {update} hashing install files and checking against server... Jan 18 2026 03:02:49 hybrid1120 maldet(13674): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 18 2026 03:02:49 hybrid1120 maldet(13674): {update} latest version already installed. Jan 18 2026 03:02:49 hybrid1120 maldet(14043): {sigup} performing signature update check... Jan 18 2026 03:02:49 hybrid1120 maldet(14043): {sigup} local signature set is version 20260116700884 Jan 18 2026 03:03:12 hybrid1120 maldet(14043): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 18 2026 03:03:12 hybrid1120 maldet(14043): {sigup} latest signature set already installed Jan 18 2026 03:03:12 hybrid1120 maldet(14210): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 18 2026 03:03:13 hybrid1120 maldet(14210): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 18 2026 03:03:13 hybrid1120 maldet(14210): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 18 2026 03:03:13 hybrid1120 maldet(14210): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 18 2026 03:03:13 hybrid1120 maldet(14210): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 18 2026 03:07:54 hybrid1120 maldet(14210): {scan} file list completed in 281s, found 1362 files... Jan 18 2026 03:07:54 hybrid1120 maldet(14210): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1362 files) in progress... Jan 18 2026 03:08:29 hybrid1120 maldet(14210): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1362, malware hits 0, cleaned hits 0, time 317s Jan 18 2026 03:08:29 hybrid1120 maldet(14210): {scan} scan report saved, to view run: maldet --report 260118-0303.14210 Jan 19 2026 04:04:59 hybrid1120 maldet(5681): {update} checking for available updates... Jan 19 2026 04:04:59 hybrid1120 maldet(5681): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 19 2026 04:04:59 hybrid1120 maldet(5681): {update} hashing install files and checking against server... Jan 19 2026 04:05:00 hybrid1120 maldet(5681): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 19 2026 04:05:00 hybrid1120 maldet(5681): {update} latest version already installed. Jan 19 2026 04:05:00 hybrid1120 maldet(5794): {sigup} performing signature update check... Jan 19 2026 04:05:00 hybrid1120 maldet(5794): {sigup} local signature set is version 20260116700884 Jan 19 2026 04:05:00 hybrid1120 maldet(5794): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 19 2026 04:05:00 hybrid1120 maldet(5794): {sigup} latest signature set already installed Jan 19 2026 04:05:00 hybrid1120 maldet(5883): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 19 2026 04:05:01 hybrid1120 maldet(5883): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 19 2026 04:05:01 hybrid1120 maldet(5883): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 19 2026 04:05:01 hybrid1120 maldet(5883): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 19 2026 04:05:01 hybrid1120 maldet(5883): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 19 2026 04:10:17 hybrid1120 maldet(5883): {scan} file list completed in 316s, found 1651 files... Jan 19 2026 04:10:17 hybrid1120 maldet(5883): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1651 files) in progress... Jan 19 2026 04:10:58 hybrid1120 maldet(5883): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1651, malware hits 0, cleaned hits 0, time 358s Jan 19 2026 04:10:58 hybrid1120 maldet(5883): {scan} scan report saved, to view run: maldet --report 260119-0405.5883 Jan 20 2026 04:43:00 hybrid1120 maldet(6274): {update} checking for available updates... Jan 20 2026 04:43:00 hybrid1120 maldet(6274): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 20 2026 04:43:00 hybrid1120 maldet(6274): {update} hashing install files and checking against server... Jan 20 2026 04:43:01 hybrid1120 maldet(6274): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 20 2026 04:43:01 hybrid1120 maldet(6274): {update} latest version already installed. Jan 20 2026 04:43:01 hybrid1120 maldet(6398): {sigup} performing signature update check... Jan 20 2026 04:43:01 hybrid1120 maldet(6398): {sigup} local signature set is version 20260116700884 Jan 20 2026 04:43:01 hybrid1120 maldet(6398): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 20 2026 04:43:01 hybrid1120 maldet(6398): {sigup} new signature set 202601191671201 available Jan 20 2026 04:43:01 hybrid1120 maldet(6398): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 20 2026 04:43:02 hybrid1120 maldet(6398): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 20 2026 04:43:03 hybrid1120 maldet(6398): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jan 20 2026 04:43:03 hybrid1120 maldet(6398): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 20 2026 04:43:03 hybrid1120 maldet(6398): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 20 2026 04:43:04 hybrid1120 maldet(6398): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jan 20 2026 04:43:04 hybrid1120 maldet(6398): {sigup} verified md5sum of maldet-sigpack.tgz Jan 20 2026 04:43:04 hybrid1120 maldet(6398): {sigup} unpacked and installed maldet-sigpack.tgz Jan 20 2026 04:43:04 hybrid1120 maldet(6398): {sigup} verified md5sum of maldet-clean.tgz Jan 20 2026 04:43:04 hybrid1120 maldet(6398): {sigup} unpacked and installed maldet-clean.tgz Jan 20 2026 04:43:04 hybrid1120 maldet(6398): {sigup} signature set update completed Jan 20 2026 04:43:04 hybrid1120 maldet(6398): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 20 2026 04:43:04 hybrid1120 maldet(6625): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 20 2026 04:43:04 hybrid1120 maldet(6625): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 20 2026 04:43:04 hybrid1120 maldet(6625): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 20 2026 04:43:04 hybrid1120 maldet(6625): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 20 2026 04:43:04 hybrid1120 maldet(6625): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 20 2026 04:47:48 hybrid1120 maldet(6625): {scan} file list completed in 284s, found 1912 files... Jan 20 2026 04:47:48 hybrid1120 maldet(6625): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1912 files) in progress... Jan 20 2026 04:48:37 hybrid1120 maldet(6625): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1912, malware hits 0, cleaned hits 0, time 333s Jan 20 2026 04:48:37 hybrid1120 maldet(6625): {scan} scan report saved, to view run: maldet --report 260120-0443.6625 Jan 21 2026 03:44:04 hybrid1120 maldet(8685): {update} checking for available updates... Jan 21 2026 03:44:04 hybrid1120 maldet(8685): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 21 2026 03:44:04 hybrid1120 maldet(8685): {update} hashing install files and checking against server... Jan 21 2026 03:44:05 hybrid1120 maldet(8685): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 21 2026 03:44:05 hybrid1120 maldet(8685): {update} latest version already installed. Jan 21 2026 03:44:05 hybrid1120 maldet(8846): {sigup} performing signature update check... Jan 21 2026 03:44:05 hybrid1120 maldet(8846): {sigup} local signature set is version 202601191671201 Jan 21 2026 03:44:06 hybrid1120 maldet(8846): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 21 2026 03:44:06 hybrid1120 maldet(8846): {sigup} latest signature set already installed Jan 21 2026 03:44:06 hybrid1120 maldet(8966): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 21 2026 03:44:06 hybrid1120 maldet(8966): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 21 2026 03:44:06 hybrid1120 maldet(8966): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 21 2026 03:44:06 hybrid1120 maldet(8966): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 21 2026 03:44:06 hybrid1120 maldet(8966): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 21 2026 03:48:33 hybrid1120 maldet(8966): {scan} file list completed in 267s, found 1881 files... Jan 21 2026 03:48:33 hybrid1120 maldet(8966): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1881 files) in progress... Jan 21 2026 03:49:24 hybrid1120 maldet(8966): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1881, malware hits 0, cleaned hits 0, time 318s Jan 21 2026 03:49:24 hybrid1120 maldet(8966): {scan} scan report saved, to view run: maldet --report 260121-0344.8966 Jan 22 2026 04:10:26 hybrid1120 maldet(10666): {update} checking for available updates... Jan 22 2026 04:10:27 hybrid1120 maldet(10666): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 22 2026 04:10:27 hybrid1120 maldet(10666): {update} hashing install files and checking against server... Jan 22 2026 04:10:27 hybrid1120 maldet(10666): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 22 2026 04:10:27 hybrid1120 maldet(10666): {update} latest version already installed. Jan 22 2026 04:10:27 hybrid1120 maldet(10791): {sigup} performing signature update check... Jan 22 2026 04:10:27 hybrid1120 maldet(10791): {sigup} local signature set is version 202601191671201 Jan 22 2026 04:10:28 hybrid1120 maldet(10791): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 22 2026 04:10:28 hybrid1120 maldet(10791): {sigup} latest signature set already installed Jan 22 2026 04:10:28 hybrid1120 maldet(10918): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 22 2026 04:10:29 hybrid1120 maldet(10918): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 22 2026 04:10:29 hybrid1120 maldet(10918): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 22 2026 04:10:29 hybrid1120 maldet(10918): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 22 2026 04:10:29 hybrid1120 maldet(10918): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 22 2026 04:16:25 hybrid1120 maldet(10918): {scan} file list completed in 356s, found 2306 files... Jan 22 2026 04:16:25 hybrid1120 maldet(10918): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2306 files) in progress... Jan 22 2026 04:17:23 hybrid1120 maldet(10918): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2306, malware hits 0, cleaned hits 0, time 415s Jan 22 2026 04:17:23 hybrid1120 maldet(10918): {scan} scan report saved, to view run: maldet --report 260122-0410.10918 Jan 23 2026 05:59:10 hybrid1120 maldet(10304): {update} checking for available updates... Jan 23 2026 05:59:10 hybrid1120 maldet(10304): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 23 2026 05:59:10 hybrid1120 maldet(10304): {update} hashing install files and checking against server... Jan 23 2026 05:59:11 hybrid1120 maldet(10304): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 23 2026 05:59:11 hybrid1120 maldet(10304): {update} latest version already installed. Jan 23 2026 05:59:11 hybrid1120 maldet(10452): {sigup} performing signature update check... Jan 23 2026 05:59:11 hybrid1120 maldet(10452): {sigup} local signature set is version 202601191671201 Jan 23 2026 05:59:11 hybrid1120 maldet(10452): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 23 2026 05:59:11 hybrid1120 maldet(10452): {sigup} new signature set 202601222641432 available Jan 23 2026 05:59:11 hybrid1120 maldet(10452): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 23 2026 05:59:12 hybrid1120 maldet(10452): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 23 2026 05:59:13 hybrid1120 maldet(10452): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jan 23 2026 05:59:13 hybrid1120 maldet(10452): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 23 2026 05:59:13 hybrid1120 maldet(10452): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 23 2026 05:59:13 hybrid1120 maldet(10452): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jan 23 2026 05:59:13 hybrid1120 maldet(10452): {sigup} verified md5sum of maldet-sigpack.tgz Jan 23 2026 05:59:14 hybrid1120 maldet(10452): {sigup} unpacked and installed maldet-sigpack.tgz Jan 23 2026 05:59:14 hybrid1120 maldet(10452): {sigup} verified md5sum of maldet-clean.tgz Jan 23 2026 05:59:14 hybrid1120 maldet(10452): {sigup} unpacked and installed maldet-clean.tgz Jan 23 2026 05:59:14 hybrid1120 maldet(10452): {sigup} signature set update completed Jan 23 2026 05:59:14 hybrid1120 maldet(10452): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 23 2026 05:59:14 hybrid1120 maldet(10750): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 23 2026 05:59:14 hybrid1120 maldet(10750): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 23 2026 05:59:14 hybrid1120 maldet(10750): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 23 2026 05:59:14 hybrid1120 maldet(10750): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 23 2026 05:59:14 hybrid1120 maldet(10750): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 23 2026 06:02:00 hybrid1120 maldet(10750): {scan} file list completed in 165s, found 1703 files... Jan 23 2026 06:02:00 hybrid1120 maldet(10750): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1703 files) in progress... Jan 23 2026 06:02:47 hybrid1120 maldet(10750): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1703, malware hits 0, cleaned hits 0, time 213s Jan 23 2026 06:02:47 hybrid1120 maldet(10750): {scan} scan report saved, to view run: maldet --report 260123-0559.10750 Jan 24 2026 03:57:33 hybrid1120 maldet(17132): {update} checking for available updates... Jan 24 2026 03:57:34 hybrid1120 maldet(17132): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 24 2026 03:57:34 hybrid1120 maldet(17132): {update} hashing install files and checking against server... Jan 24 2026 03:57:34 hybrid1120 maldet(17132): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 24 2026 03:57:34 hybrid1120 maldet(17132): {update} latest version already installed. Jan 24 2026 03:57:34 hybrid1120 maldet(17281): {sigup} performing signature update check... Jan 24 2026 03:57:34 hybrid1120 maldet(17281): {sigup} local signature set is version 202601222641432 Jan 24 2026 03:57:34 hybrid1120 maldet(17281): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 24 2026 03:57:34 hybrid1120 maldet(17281): {sigup} latest signature set already installed Jan 24 2026 03:57:34 hybrid1120 maldet(17380): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 24 2026 03:57:35 hybrid1120 maldet(17380): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 24 2026 03:57:35 hybrid1120 maldet(17380): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 24 2026 03:57:35 hybrid1120 maldet(17380): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 24 2026 03:57:35 hybrid1120 maldet(17380): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 24 2026 04:03:19 hybrid1120 maldet(17380): {scan} file list completed in 344s, found 1610 files... Jan 24 2026 04:03:19 hybrid1120 maldet(17380): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1610 files) in progress... Jan 24 2026 04:04:03 hybrid1120 maldet(17380): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1610, malware hits 0, cleaned hits 0, time 389s Jan 24 2026 04:04:03 hybrid1120 maldet(17380): {scan} scan report saved, to view run: maldet --report 260124-0357.17380 Jan 25 2026 03:56:55 hybrid1120 maldet(29004): {update} checking for available updates... Jan 25 2026 03:56:55 hybrid1120 maldet(29004): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 25 2026 03:56:55 hybrid1120 maldet(29004): {update} hashing install files and checking against server... Jan 25 2026 03:56:56 hybrid1120 maldet(29004): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 25 2026 03:56:56 hybrid1120 maldet(29004): {update} latest version already installed. Jan 25 2026 03:56:56 hybrid1120 maldet(29122): {sigup} performing signature update check... Jan 25 2026 03:56:56 hybrid1120 maldet(29122): {sigup} local signature set is version 202601222641432 Jan 25 2026 03:56:56 hybrid1120 maldet(29122): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 25 2026 03:56:56 hybrid1120 maldet(29122): {sigup} latest signature set already installed Jan 25 2026 03:56:56 hybrid1120 maldet(29220): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 25 2026 03:56:57 hybrid1120 maldet(29220): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 25 2026 03:56:57 hybrid1120 maldet(29220): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 25 2026 03:56:57 hybrid1120 maldet(29220): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 25 2026 03:56:57 hybrid1120 maldet(29220): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 25 2026 04:01:54 hybrid1120 maldet(29220): {scan} file list completed in 297s, found 1318 files... Jan 25 2026 04:01:54 hybrid1120 maldet(29220): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1318 files) in progress... Jan 25 2026 04:02:28 hybrid1120 maldet(29220): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1318, malware hits 0, cleaned hits 0, time 332s Jan 25 2026 04:02:28 hybrid1120 maldet(29220): {scan} scan report saved, to view run: maldet --report 260125-0356.29220 Jan 26 2026 04:11:13 hybrid1120 maldet(11071): {update} checking for available updates... Jan 26 2026 04:11:13 hybrid1120 maldet(11071): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 26 2026 04:11:14 hybrid1120 maldet(11071): {update} hashing install files and checking against server... Jan 26 2026 04:11:14 hybrid1120 maldet(11071): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 26 2026 04:11:14 hybrid1120 maldet(11071): {update} version check shows latest but hash check failed, forcing update... Jan 26 2026 04:11:14 hybrid1120 maldet(11071): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz Jan 26 2026 04:11:15 hybrid1120 maldet(11071): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz.md5 Jan 26 2026 04:11:15 hybrid1120 maldet(11071): {update} verified md5sum of maldetect-current.tar.gz
Coded With 💗 by
0x6ick