
----------- SCAN REPORT -----------
TimeStamp: Wed, 25 Jun 2025 02:42:11 -0400
(/usr/sbin/cxs --clamdsock /var/clamd --dbreport --defapache nobody --doptions Mv --exploitscan --nofallback --filemax 10000 --noforce --html --ignore /etc/cxs/cxs.ignore.manual --options mMOLfSGchexdnwZDRru --noprobability --qoptions Mv --report /home/aisamachine/cxs_scan_aisamachine-2025-06-25_09.txt --sizemax 1000000 --ssl --summary --sversionscan --timemax 30 --unofficial --user aisamachine --virusscan --vmrssmax 2000000 --waitscan 0 --xtra /etc/cxs/cxs.xtra.manual)


Scanning /home/aisamachine:

'/home/aisamachine/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/aisamachine]

'/home/aisamachine/public_html/wp-admin/class.php'
# Universal decode regex match = [universal decoder]

'/home/aisamachine/public_html/wp-admin/logo.png'
# Suspicious image file (hidden script file)

'/home/aisamachine/public_html/wp-content/plugins/akismet/akismet.php'
# Script version check [OLD] [Akismet Anti-spam: Spam Protection v5.3.1 < v5.3.7]

'/home/aisamachine/public_html/wp-content/plugins/click-to-chat-for-whatsapp/click-to-chat.php'
# Script version check [OLD] [Click to Chat v3.32 < v4.20]

'/home/aisamachine/public_html/wp-content/plugins/click-to-chat-for-whatsapp/new/admin/class-ht-ctc-admin-main-page.php'
# Universal decode regex match = [universal decoder]

'/home/aisamachine/public_html/wp-content/plugins/copy-delete-posts/copy-delete-posts.php'
# Script version check [OLD] [Copy & Delete Posts v1.4.6 < v1.5.0]

'/home/aisamachine/public_html/wp-content/plugins/loginizer/loginizer.php'
# Script version check [OLD] [Loginizer v1.8.3 < v2.0.0]

'/home/aisamachine/public_html/wp-content/plugins/one-click-demo-import/one-click-demo-import.php'
# Script version check [OLD] [One Click Demo Import v3.1.2 < v3.3.0]

'/home/aisamachine/public_html/wp-content/plugins/polylang/polylang.php'
# Script version check [OLD] [Polylang v3.2.8 < v3.7]

'/home/aisamachine/public_html/wp-content/plugins/w3-total-cache/CdnEngine_Ftp.php'
# Regular expression match = [\n(?!\s*(//|\#|\*)).*\.ssh/]

'/home/aisamachine/public_html/wp-content/plugins/w3-total-cache/w3-total-cache.php'
# Script version check [OLD] [W3 Total Cache v2.2.7 < v2.8.8]

'/home/aisamachine/public_html/wp-content/plugins/w3-total-cache/vendor/aws/aws-php-sns-message-validator/tests/FunctionalValidationsTest.php'
# Universal decode regex match = [universal decoder]

'/home/aisamachine/public_html/wp-content/uploads/js_composer'
# World writeable directory

'/home/aisamachine/quarantine_clamavconnector/tmp_awstats_awstats072023.aisamachine.com.txt'
# ClamAV detected virus = [{HEX}php.malware.magento.599.UNOFFICIAL]

'/home/aisamachine/quarantine_clamavconnector/tmp_awstats_awstats082023.aisamachine.com.txt'
# ClamAV detected virus = [{HEX}php.malware.magento.599.UNOFFICIAL]

'/home/aisamachine/quarantine_clamavconnector/tmp_awstats_awstats092023.aisamachine.com.txt'
# ClamAV detected virus = [{HEX}php.malware.magento.599.UNOFFICIAL]

'/home/aisamachine/quarantine_clamavconnector/tmp_awstats_awstats102023.aisamachine.com.txt'
# ClamAV detected virus = [{HEX}php.malware.magento.599.UNOFFICIAL]

'/home/aisamachine/quarantine_clamavconnector/tmp_awstats_awstats112023.aisamachine.com.txt'
# ClamAV detected virus = [{HEX}php.malware.magento.599.UNOFFICIAL]

'/home/aisamachine/quarantine_clamavconnector/tmp_awstats_awstats122023.aisamachine.com.txt'
# ClamAV detected virus = [{HEX}php.malware.magento.599.UNOFFICIAL]

----------- SCAN SUMMARY -----------
Scanned directories: 2614
Scanned files: 12979
Ignored items: 126
Suspicious matches: 20
Viruses found: 6
Fingerprint matches: 0
Data scanned: 358.53 MB
Scan peak memory: 429524 kB
Scan time/item: 0.131 sec
Scan time: 2040.283 sec

