文件操作 - event_log
返回文件管理
返回主菜单
删除本文件
文件: /usr/local/maldetect/logs/event_log
编辑文件内容
May 14 2026 03:16:51 mail maldet(10212): {sigup} performing signature update check... May 14 2026 03:16:51 mail maldet(10212): {sigup} could not determine signature version May 14 2026 03:16:52 mail maldet(10212): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 14 2026 03:16:52 mail maldet(10212): {sigup} signature files missing or corrupted, forcing update... May 14 2026 03:16:52 mail maldet(10212): {sigup} new signature set 2026051290484 available May 14 2026 03:16:52 mail maldet(10212): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 14 2026 03:16:52 mail maldet(10212): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 14 2026 03:16:53 mail maldet(10212): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 14 2026 03:16:53 mail maldet(10212): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 14 2026 03:16:53 mail maldet(10212): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 14 2026 03:16:54 mail maldet(10212): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 14 2026 03:16:54 mail maldet(10212): {sigup} verified md5sum of maldet-sigpack.tgz May 14 2026 03:16:54 mail maldet(10212): {sigup} unpacked and installed maldet-sigpack.tgz May 14 2026 03:16:54 mail maldet(10212): {sigup} verified md5sum of maldet-clean.tgz May 14 2026 03:16:54 mail maldet(10212): {sigup} unpacked and installed maldet-clean.tgz May 14 2026 03:16:54 mail maldet(10212): {sigup} signature set update completed May 14 2026 03:16:54 mail maldet(10212): {sigup} 51468 signatures (45387 MD5 | 2375 HEX | 3706 YARA | 0 USER) May 14 2026 03:16:54 mail maldet(8169): {update} completed update v1.6.6 3a1792 => v1.6.6 e54dca, running signature updates... May 14 2026 03:16:55 mail maldet(11261): {sigup} performing signature update check... May 14 2026 03:16:55 mail maldet(11261): {sigup} local signature set is version 2026051290484 May 14 2026 03:16:55 mail maldet(11261): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 14 2026 03:16:55 mail maldet(11261): {sigup} latest signature set already installed May 14 2026 03:16:55 mail maldet(8169): {update} update and config import completed May 14 2026 03:16:56 mail maldet(12171): {sigup} performing signature update check... May 14 2026 03:16:56 mail maldet(12171): {sigup} local signature set is version 2026051290484 May 14 2026 03:16:56 mail maldet(12171): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 14 2026 03:16:56 mail maldet(12171): {sigup} latest signature set already installed May 14 2026 03:16:57 mail maldet(13089): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 14 2026 03:16:57 mail maldet(13089): {scan} signatures loaded: 51468 (45387 MD5 | 2375 HEX | 3706 YARA | 0 USER) May 14 2026 03:16:57 mail maldet(13089): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 14 2026 03:16:57 mail maldet(13089): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 14 2026 03:16:57 mail maldet(13089): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 May 14 2026 03:27:45 mail maldet(13089): {scan} file list completed in 648s, found 6262 files... May 14 2026 03:27:45 mail maldet(13089): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 14 2026 03:27:45 mail maldet(13089): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (6262 files) in progress... May 14 2026 03:39:14 mail maldet(13089): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 6262, malware hits 0, cleaned hits 0, time 1337s May 14 2026 03:39:14 mail maldet(13089): {scan} scan report saved, to view run: maldet --report 260514-0316.13089 May 15 2026 03:55:55 mail maldet(29335): {update} checking for available updates... May 15 2026 03:55:55 mail maldet(29335): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 15 2026 03:55:55 mail maldet(29335): {update} hashing install files and checking against server... May 15 2026 03:55:56 mail maldet(29335): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 15 2026 03:55:56 mail maldet(29335): {update} latest version already installed. May 15 2026 03:55:57 mail maldet(30272): {sigup} performing signature update check... May 15 2026 03:55:57 mail maldet(30272): {sigup} local signature set is version 2026051290484 May 15 2026 03:55:57 mail maldet(30272): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 15 2026 03:55:57 mail maldet(30272): {sigup} latest signature set already installed May 15 2026 03:55:58 mail maldet(31218): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 15 2026 03:55:59 mail maldet(31218): {scan} signatures loaded: 51468 (45387 MD5 | 2375 HEX | 3706 YARA | 0 USER) May 15 2026 03:55:59 mail maldet(31218): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 15 2026 03:55:59 mail maldet(31218): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 15 2026 03:55:59 mail maldet(31218): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 May 15 2026 04:01:59 mail maldet(31218): {scan} file list completed in 360s, found 2011 files... May 15 2026 04:01:59 mail maldet(31218): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 15 2026 04:01:59 mail maldet(31218): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2011 files) in progress... May 15 2026 04:08:25 mail maldet(31218): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details; quarantine_on_error=0 or unset, quarantine has been disabled! May 15 2026 04:08:25 mail maldet(31218): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2011, malware hits 0, cleaned hits 0, time 747s May 15 2026 04:08:25 mail maldet(31218): {scan} scan report saved, to view run: maldet --report 260515-0355.31218 May 16 2026 03:40:22 mail maldet(23434): {update} checking for available updates... May 16 2026 03:40:23 mail maldet(23434): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 16 2026 03:40:23 mail maldet(23434): {update} hashing install files and checking against server... May 16 2026 03:40:23 mail maldet(23434): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 16 2026 03:40:23 mail maldet(23434): {update} latest version already installed. May 16 2026 03:40:24 mail maldet(24370): {sigup} performing signature update check... May 16 2026 03:40:24 mail maldet(24370): {sigup} local signature set is version 2026051290484 May 16 2026 03:40:24 mail maldet(24370): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 16 2026 03:40:25 mail maldet(24370): {sigup} latest signature set already installed May 16 2026 03:40:25 mail maldet(25314): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 16 2026 03:40:29 mail maldet(25314): {scan} signatures loaded: 51468 (45387 MD5 | 2375 HEX | 3706 YARA | 0 USER) May 16 2026 03:40:29 mail maldet(25314): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 16 2026 03:40:29 mail maldet(25314): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 16 2026 03:40:29 mail maldet(25314): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 May 16 2026 03:52:16 mail maldet(25314): {scan} file list completed in 707s, found 10194 files... May 16 2026 03:52:16 mail maldet(25314): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 16 2026 03:52:16 mail maldet(25314): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (10194 files) in progress... May 16 2026 04:04:53 mail maldet(25314): {hit} malware hit {HEX}php.webshell.pngshell.phpcomment.962 found for /home/planet/public_html/larioscorte--it/wp-content/updraft/backup_2026-05-15-1257_Lario_Scorte_fc3ca62cc6f2-themes.zip May 16 2026 04:04:53 mail maldet(25314): {quar} malware quarantined from '/home/planet/public_html/larioscorte--it/wp-content/updraft/backup_2026-05-15-1257_Lario_Scorte_fc3ca62cc6f2-themes.zip' to '/usr/local/maldetect/quarantine/backup_2026-05-15-1257_Lario_Scorte_fc3ca62cc6f2-themes.zip.364322775' May 16 2026 04:04:53 mail maldet(25314): {clean} could not find clean rule for hit php.webshell.pngshell.phpcomment or file /usr/local/maldetect/quarantine/backup_2026-05-15-1257_Lario_Scorte_fc3ca62cc6f2-themes.zip.364322775 no longer exists. May 16 2026 04:04:53 mail maldet(25314): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 10194, malware hits 1, cleaned hits 0, time 1468s May 16 2026 04:04:53 mail maldet(25314): {scan} scan report saved, to view run: maldet --report 260516-0340.25314 May 17 2026 03:50:03 mail maldet(22381): {update} checking for available updates... May 17 2026 03:50:03 mail maldet(22381): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 17 2026 03:50:03 mail maldet(22381): {update} hashing install files and checking against server... May 17 2026 03:50:03 mail maldet(22381): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 17 2026 03:50:04 mail maldet(22381): {update} latest version already installed. May 17 2026 03:50:04 mail maldet(23297): {sigup} performing signature update check... May 17 2026 03:50:04 mail maldet(23297): {sigup} local signature set is version 2026051290484 May 17 2026 03:50:04 mail maldet(23297): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 17 2026 03:50:05 mail maldet(23297): {sigup} latest signature set already installed May 17 2026 03:50:05 mail maldet(24194): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 17 2026 03:50:06 mail maldet(24194): {scan} signatures loaded: 51468 (45387 MD5 | 2375 HEX | 3706 YARA | 0 USER) May 17 2026 03:50:06 mail maldet(24194): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 17 2026 03:50:06 mail maldet(24194): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 17 2026 03:50:06 mail maldet(24194): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 May 17 2026 03:56:36 mail maldet(24194): {scan} file list completed in 390s, found 1435 files... May 17 2026 03:56:36 mail maldet(24194): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 17 2026 03:56:36 mail maldet(24194): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1435 files) in progress... May 17 2026 04:03:19 mail maldet(24194): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1435, malware hits 0, cleaned hits 0, time 794s May 17 2026 04:03:19 mail maldet(24194): {scan} scan report saved, to view run: maldet --report 260517-0350.24194 May 18 2026 03:45:13 mail maldet(3553): {update} checking for available updates... May 18 2026 03:45:14 mail maldet(3553): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 18 2026 03:45:14 mail maldet(3553): {update} hashing install files and checking against server... May 18 2026 03:45:14 mail maldet(3553): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 18 2026 03:45:14 mail maldet(3553): {update} latest version already installed. May 18 2026 03:45:15 mail maldet(4524): {sigup} performing signature update check... May 18 2026 03:45:15 mail maldet(4524): {sigup} local signature set is version 2026051290484 May 18 2026 03:45:15 mail maldet(4524): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 18 2026 03:45:15 mail maldet(4524): {sigup} latest signature set already installed May 18 2026 03:45:16 mail maldet(5493): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 18 2026 03:45:18 mail maldet(5493): {scan} signatures loaded: 51468 (45387 MD5 | 2375 HEX | 3706 YARA | 0 USER) May 18 2026 03:45:18 mail maldet(5493): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 18 2026 03:45:18 mail maldet(5493): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 18 2026 03:45:18 mail maldet(5493): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 May 18 2026 04:27:07 mail maldet(5493): {scan} file list completed in 2508s, found 2097 files... May 18 2026 04:27:07 mail maldet(5493): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 18 2026 04:27:07 mail maldet(5493): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2097 files) in progress... May 18 2026 04:38:46 mail maldet(5493): {hit} malware hit {HEX}php.polyshell.jfif.phpcomment.704 found for /home/planet/public_html/legacantu--it/wp-content/updraft/backup_2026-05-17-0946_Lega_Salvini_Premier_Lega_Lomb_39908b2f4e44-themes.zip May 18 2026 04:38:46 mail maldet(5493): {quar} malware quarantined from '/home/planet/public_html/legacantu--it/wp-content/updraft/backup_2026-05-17-0946_Lega_Salvini_Premier_Lega_Lomb_39908b2f4e44-themes.zip' to '/usr/local/maldetect/quarantine/backup_2026-05-17-0946_Lega_Salvini_Premier_Lega_Lomb_39908b2f4e44-themes.zip.2823425751' May 18 2026 04:38:46 mail maldet(5493): {clean} could not find clean rule for hit php.polyshell.jfif.phpcomment or file /usr/local/maldetect/quarantine/backup_2026-05-17-0946_Lega_Salvini_Premier_Lega_Lomb_39908b2f4e44-themes.zip.2823425751 no longer exists. May 18 2026 04:38:46 mail maldet(5493): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2097, malware hits 1, cleaned hits 0, time 3210s May 18 2026 04:38:46 mail maldet(5493): {scan} scan report saved, to view run: maldet --report 260518-0345.5493 May 19 2026 03:48:52 mail maldet(11421): {update} checking for available updates... May 19 2026 03:48:53 mail maldet(11421): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 19 2026 03:48:53 mail maldet(11421): {update} hashing install files and checking against server... May 19 2026 03:48:53 mail maldet(11421): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 19 2026 03:48:53 mail maldet(11421): {update} latest version already installed. May 19 2026 03:48:54 mail maldet(12404): {sigup} performing signature update check... May 19 2026 03:48:54 mail maldet(12404): {sigup} local signature set is version 2026051290484 May 19 2026 03:48:54 mail maldet(12404): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 19 2026 03:48:54 mail maldet(12404): {sigup} latest signature set already installed May 19 2026 03:48:55 mail maldet(13352): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 19 2026 03:48:56 mail maldet(13352): {scan} signatures loaded: 51468 (45387 MD5 | 2375 HEX | 3706 YARA | 0 USER) May 19 2026 03:48:56 mail maldet(13352): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 19 2026 03:48:56 mail maldet(13352): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 19 2026 03:48:56 mail maldet(13352): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 May 19 2026 03:54:13 mail maldet(13352): {scan} file list completed in 317s, found 1808 files... May 19 2026 03:54:13 mail maldet(13352): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 19 2026 03:54:13 mail maldet(13352): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1808 files) in progress... May 19 2026 04:02:07 mail maldet(13352): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1808, malware hits 0, cleaned hits 0, time 792s May 19 2026 04:02:07 mail maldet(13352): {scan} scan report saved, to view run: maldet --report 260519-0348.13352 May 20 2026 03:32:15 mail maldet(5915): {update} checking for available updates... May 20 2026 03:32:16 mail maldet(5915): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 20 2026 03:32:16 mail maldet(5915): {update} hashing install files and checking against server... May 20 2026 03:32:16 mail maldet(5915): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 20 2026 03:32:16 mail maldet(5915): {update} latest version already installed. May 20 2026 03:32:17 mail maldet(6878): {sigup} performing signature update check... May 20 2026 03:32:17 mail maldet(6878): {sigup} local signature set is version 2026051290484 May 20 2026 03:32:17 mail maldet(6878): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 20 2026 03:32:18 mail maldet(6878): {sigup} latest signature set already installed May 20 2026 03:32:18 mail maldet(7825): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 20 2026 03:32:22 mail maldet(7825): {scan} signatures loaded: 51468 (45387 MD5 | 2375 HEX | 3706 YARA | 0 USER) May 20 2026 03:32:22 mail maldet(7825): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 20 2026 03:32:22 mail maldet(7825): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 20 2026 03:32:22 mail maldet(7825): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 May 20 2026 03:56:35 mail maldet(7825): {scan} file list completed in 1452s, found 1352 files... May 20 2026 03:56:35 mail maldet(7825): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 20 2026 03:56:35 mail maldet(7825): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1352 files) in progress... May 20 2026 04:04:05 mail maldet(7825): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1352, malware hits 0, cleaned hits 0, time 1907s May 20 2026 04:04:05 mail maldet(7825): {scan} scan report saved, to view run: maldet --report 260520-0332.7825 May 21 2026 03:24:17 mail maldet(497): {update} checking for available updates... May 21 2026 03:24:17 mail maldet(497): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 21 2026 03:24:17 mail maldet(497): {update} hashing install files and checking against server... May 21 2026 03:24:18 mail maldet(497): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 21 2026 03:24:18 mail maldet(497): {update} latest version already installed. May 21 2026 03:24:18 mail maldet(1543): {sigup} performing signature update check... May 21 2026 03:24:18 mail maldet(1543): {sigup} local signature set is version 2026051290484 May 21 2026 03:24:19 mail maldet(1543): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 21 2026 03:24:19 mail maldet(1543): {sigup} latest signature set already installed May 21 2026 03:24:20 mail maldet(2478): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 21 2026 03:24:21 mail maldet(2478): {scan} signatures loaded: 51468 (45387 MD5 | 2375 HEX | 3706 YARA | 0 USER) May 21 2026 03:24:21 mail maldet(2478): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 21 2026 03:24:21 mail maldet(2478): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 21 2026 03:24:21 mail maldet(2478): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 May 21 2026 03:39:03 mail maldet(2478): {scan} file list completed in 881s, found 20767 files... May 21 2026 03:39:03 mail maldet(2478): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 21 2026 03:39:03 mail maldet(2478): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (20767 files) in progress... May 21 2026 03:57:16 mail maldet(2478): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 20767, malware hits 0, cleaned hits 0, time 1976s May 21 2026 03:57:16 mail maldet(2478): {scan} scan report saved, to view run: maldet --report 260521-0324.2478 May 22 2026 03:55:10 mail maldet(22267): {update} checking for available updates... May 22 2026 03:55:11 mail maldet(22267): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 22 2026 03:55:11 mail maldet(22267): {update} hashing install files and checking against server... May 22 2026 03:55:11 mail maldet(22267): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 22 2026 03:55:11 mail maldet(22267): {update} latest version already installed. May 22 2026 03:55:12 mail maldet(23194): {sigup} performing signature update check... May 22 2026 03:55:12 mail maldet(23194): {sigup} local signature set is version 2026051290484 May 22 2026 03:55:12 mail maldet(23194): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 22 2026 03:55:12 mail maldet(23194): {sigup} latest signature set already installed May 22 2026 03:55:13 mail maldet(24107): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 22 2026 03:55:14 mail maldet(24107): {scan} signatures loaded: 51468 (45387 MD5 | 2375 HEX | 3706 YARA | 0 USER) May 22 2026 03:55:14 mail maldet(24107): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 22 2026 03:55:14 mail maldet(24107): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 22 2026 03:55:14 mail maldet(24107): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 May 22 2026 04:01:09 mail maldet(24107): {scan} file list completed in 355s, found 9494 files... May 22 2026 04:01:09 mail maldet(24107): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 22 2026 04:01:09 mail maldet(24107): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (9494 files) in progress... May 22 2026 04:10:20 mail maldet(24107): {hit} malware hit {HEX}php.polyshell.jfif.phpcomment.704 found for /home/planet/public_html/legacantu--it/wp-content/updraft/backup_2026-05-21-0904_Lega_Salvini_Premier_Lega_Lomb_154c9ce31108-themes.zip May 22 2026 04:10:20 mail maldet(24107): {quar} malware quarantined from '/home/planet/public_html/legacantu--it/wp-content/updraft/backup_2026-05-21-0904_Lega_Salvini_Premier_Lega_Lomb_154c9ce31108-themes.zip' to '/usr/local/maldetect/quarantine/backup_2026-05-21-0904_Lega_Salvini_Premier_Lega_Lomb_154c9ce31108-themes.zip.10782476' May 22 2026 04:10:20 mail maldet(24107): {clean} could not find clean rule for hit php.polyshell.jfif.phpcomment or file /usr/local/maldetect/quarantine/backup_2026-05-21-0904_Lega_Salvini_Premier_Lega_Lomb_154c9ce31108-themes.zip.10782476 no longer exists. May 22 2026 04:10:20 mail maldet(24107): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 9494, malware hits 1, cleaned hits 0, time 907s May 22 2026 04:10:20 mail maldet(24107): {scan} scan report saved, to view run: maldet --report 260522-0355.24107 May 23 2026 03:15:43 mail maldet(12901): {update} checking for available updates... May 23 2026 03:15:44 mail maldet(12901): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 23 2026 03:15:44 mail maldet(12901): {update} hashing install files and checking against server... May 23 2026 03:15:44 mail maldet(12901): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 23 2026 03:15:44 mail maldet(12901): {update} latest version already installed. May 23 2026 03:15:45 mail maldet(13831): {sigup} performing signature update check... May 23 2026 03:15:45 mail maldet(13831): {sigup} local signature set is version 2026051290484 May 23 2026 03:15:45 mail maldet(13831): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 23 2026 03:15:45 mail maldet(13831): {sigup} latest signature set already installed May 23 2026 03:15:46 mail maldet(14742): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 23 2026 03:15:47 mail maldet(14742): {scan} signatures loaded: 51468 (45387 MD5 | 2375 HEX | 3706 YARA | 0 USER) May 23 2026 03:15:47 mail maldet(14742): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 23 2026 03:15:47 mail maldet(14742): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 23 2026 03:15:48 mail maldet(14742): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 May 23 2026 03:31:14 mail maldet(14742): {scan} file list completed in 927s, found 1247 files... May 23 2026 03:31:14 mail maldet(14742): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 23 2026 03:31:14 mail maldet(14742): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1247 files) in progress... May 23 2026 03:36:50 mail maldet(14742): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details; quarantine_on_error=0 or unset, quarantine has been disabled! May 23 2026 03:36:50 mail maldet(14742): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1247, malware hits 0, cleaned hits 0, time 1264s May 23 2026 03:36:50 mail maldet(14742): {scan} scan report saved, to view run: maldet --report 260523-0315.14742 May 24 2026 03:21:03 mail maldet(14456): {update} checking for available updates... May 24 2026 03:21:03 mail maldet(14456): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 24 2026 03:21:03 mail maldet(14456): {update} hashing install files and checking against server... May 24 2026 03:21:03 mail maldet(14456): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 24 2026 03:21:03 mail maldet(14456): {update} latest version already installed. May 24 2026 03:21:04 mail maldet(15433): {sigup} performing signature update check... May 24 2026 03:21:04 mail maldet(15433): {sigup} local signature set is version 2026051290484 May 24 2026 03:21:04 mail maldet(15433): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 24 2026 03:21:05 mail maldet(15433): {sigup} new signature set 2026052390483 available May 24 2026 03:21:05 mail maldet(15433): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 24 2026 03:21:05 mail maldet(15433): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 24 2026 03:21:05 mail maldet(15433): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 24 2026 03:21:06 mail maldet(15433): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 24 2026 03:21:06 mail maldet(15433): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 24 2026 03:21:06 mail maldet(15433): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 24 2026 03:21:06 mail maldet(15433): {sigup} verified md5sum of maldet-sigpack.tgz May 24 2026 03:21:07 mail maldet(15433): {sigup} unpacked and installed maldet-sigpack.tgz May 24 2026 03:21:07 mail maldet(15433): {sigup} verified md5sum of maldet-clean.tgz May 24 2026 03:21:07 mail maldet(15433): {sigup} unpacked and installed maldet-clean.tgz May 24 2026 03:21:07 mail maldet(15433): {sigup} signature set update completed May 24 2026 03:21:08 mail maldet(15433): {sigup} 51467 signatures (45387 MD5 | 2374 HEX | 3706 YARA | 0 USER) May 24 2026 03:21:09 mail maldet(16655): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 24 2026 03:21:10 mail maldet(16655): {scan} signatures loaded: 51467 (45387 MD5 | 2374 HEX | 3706 YARA | 0 USER) May 24 2026 03:21:10 mail maldet(16655): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 24 2026 03:21:10 mail maldet(16655): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 24 2026 03:21:10 mail maldet(16655): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 May 24 2026 03:29:35 mail maldet(16655): {scan} file list completed in 505s, found 1099 files... May 24 2026 03:29:35 mail maldet(16655): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 24 2026 03:29:35 mail maldet(16655): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1099 files) in progress... May 24 2026 03:34:27 mail maldet(16655): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1099, malware hits 0, cleaned hits 0, time 798s May 24 2026 03:34:27 mail maldet(16655): {scan} scan report saved, to view run: maldet --report 260524-0321.16655 May 25 2026 03:48:50 mail maldet(4045): {update} checking for available updates... May 25 2026 03:48:50 mail maldet(4045): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 25 2026 03:48:50 mail maldet(4045): {update} hashing install files and checking against server... May 25 2026 03:48:51 mail maldet(4045): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 25 2026 03:48:51 mail maldet(4045): {update} latest version already installed. May 25 2026 03:48:51 mail maldet(5124): {sigup} performing signature update check... May 25 2026 03:48:51 mail maldet(5124): {sigup} local signature set is version 2026052390483 May 25 2026 03:48:52 mail maldet(5124): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 25 2026 03:48:52 mail maldet(5124): {sigup} new signature set 2026052490478 available May 25 2026 03:48:52 mail maldet(5124): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 25 2026 03:48:52 mail maldet(5124): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 25 2026 03:48:53 mail maldet(5124): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 25 2026 03:48:53 mail maldet(5124): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 25 2026 03:48:53 mail maldet(5124): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 25 2026 03:48:53 mail maldet(5124): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 25 2026 03:48:53 mail maldet(5124): {sigup} verified md5sum of maldet-sigpack.tgz May 25 2026 03:48:56 mail maldet(5124): {sigup} unpacked and installed maldet-sigpack.tgz May 25 2026 03:48:56 mail maldet(5124): {sigup} verified md5sum of maldet-clean.tgz May 25 2026 03:48:58 mail maldet(5124): {sigup} unpacked and installed maldet-clean.tgz May 25 2026 03:48:58 mail maldet(5124): {sigup} signature set update completed May 25 2026 03:48:58 mail maldet(5124): {sigup} 51464 signatures (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) May 25 2026 03:48:59 mail maldet(6319): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 25 2026 03:49:01 mail maldet(6319): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) May 25 2026 03:49:01 mail maldet(6319): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 25 2026 03:49:01 mail maldet(6319): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 25 2026 03:49:01 mail maldet(6319): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 May 25 2026 04:10:32 mail maldet(6319): {scan} file list completed in 1291s, found 856 files... May 25 2026 04:10:32 mail maldet(6319): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 25 2026 04:10:32 mail maldet(6319): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (856 files) in progress... May 25 2026 04:16:05 mail maldet(6319): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 856, malware hits 0, cleaned hits 0, time 1626s May 25 2026 04:16:05 mail maldet(6319): {scan} scan report saved, to view run: maldet --report 260525-0348.6319 May 26 2026 03:38:47 mail maldet(18899): {update} checking for available updates... May 26 2026 03:38:47 mail maldet(18899): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 26 2026 03:38:47 mail maldet(18899): {update} hashing install files and checking against server... May 26 2026 03:38:48 mail maldet(18899): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 26 2026 03:38:48 mail maldet(18899): {update} latest version already installed. May 26 2026 03:38:48 mail maldet(19803): {sigup} performing signature update check... May 26 2026 03:38:48 mail maldet(19803): {sigup} local signature set is version 2026052490478 May 26 2026 03:38:49 mail maldet(19803): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 26 2026 03:38:49 mail maldet(19803): {sigup} latest signature set already installed May 26 2026 03:38:50 mail maldet(20683): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 26 2026 03:38:51 mail maldet(20683): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) May 26 2026 03:38:51 mail maldet(20683): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 26 2026 03:38:51 mail maldet(20683): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 26 2026 03:38:51 mail maldet(20683): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 May 26 2026 03:45:35 mail maldet(20683): {scan} file list completed in 404s, found 3309 files... May 26 2026 03:45:35 mail maldet(20683): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 26 2026 03:45:35 mail maldet(20683): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (3309 files) in progress... May 26 2026 03:54:00 mail maldet(20683): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 3309, malware hits 0, cleaned hits 0, time 910s May 26 2026 03:54:00 mail maldet(20683): {scan} scan report saved, to view run: maldet --report 260526-0338.20683 May 27 2026 03:36:21 mail maldet(28243): {update} checking for available updates... May 27 2026 03:36:22 mail maldet(28243): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 27 2026 03:36:22 mail maldet(28243): {update} hashing install files and checking against server... May 27 2026 03:36:22 mail maldet(28243): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 27 2026 03:36:22 mail maldet(28243): {update} latest version already installed. May 27 2026 03:36:23 mail maldet(29215): {sigup} performing signature update check... May 27 2026 03:36:23 mail maldet(29215): {sigup} local signature set is version 2026052490478 May 27 2026 03:36:23 mail maldet(29215): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 27 2026 03:36:23 mail maldet(29215): {sigup} latest signature set already installed May 27 2026 03:36:24 mail maldet(30125): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 27 2026 03:36:27 mail maldet(30125): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) May 27 2026 03:36:27 mail maldet(30125): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 27 2026 03:36:27 mail maldet(30125): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 27 2026 03:36:27 mail maldet(30125): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 May 27 2026 03:57:07 mail maldet(30125): {scan} file list completed in 1239s, found 4169 files... May 27 2026 03:57:07 mail maldet(30125): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 27 2026 03:57:07 mail maldet(30125): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (4169 files) in progress... May 27 2026 04:07:41 mail maldet(30125): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 4169, malware hits 0, cleaned hits 0, time 1876s May 27 2026 04:07:41 mail maldet(30125): {scan} scan report saved, to view run: maldet --report 260527-0336.30125 May 28 2026 03:38:54 mail maldet(3018): {update} checking for available updates... May 28 2026 03:38:54 mail maldet(3018): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 28 2026 03:38:54 mail maldet(3018): {update} hashing install files and checking against server... May 28 2026 03:38:55 mail maldet(3018): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 28 2026 03:38:55 mail maldet(3018): {update} latest version already installed. May 28 2026 03:38:55 mail maldet(3973): {sigup} performing signature update check... May 28 2026 03:38:55 mail maldet(3973): {sigup} local signature set is version 2026052490478 May 28 2026 03:38:56 mail maldet(3973): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 28 2026 03:38:56 mail maldet(3973): {sigup} latest signature set already installed May 28 2026 03:38:56 mail maldet(4936): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 28 2026 03:38:59 mail maldet(4936): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) May 28 2026 03:38:59 mail maldet(4936): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 28 2026 03:38:59 mail maldet(4936): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 28 2026 03:38:59 mail maldet(4936): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 May 28 2026 03:49:56 mail maldet(4936): {scan} file list completed in 657s, found 7357 files... May 28 2026 03:49:56 mail maldet(4936): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 28 2026 03:49:56 mail maldet(4936): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (7357 files) in progress... May 28 2026 03:58:23 mail maldet(4936): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 7357, malware hits 0, cleaned hits 0, time 1167s May 28 2026 03:58:23 mail maldet(4936): {scan} scan report saved, to view run: maldet --report 260528-0338.4936 May 29 2026 03:33:21 mail maldet(3628): {update} checking for available updates... May 29 2026 03:33:21 mail maldet(3628): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 29 2026 03:33:21 mail maldet(3628): {update} hashing install files and checking against server... May 29 2026 03:33:21 mail maldet(3628): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 29 2026 03:33:21 mail maldet(3628): {update} latest version already installed. May 29 2026 03:33:22 mail maldet(4584): {sigup} performing signature update check... May 29 2026 03:33:22 mail maldet(4584): {sigup} local signature set is version 2026052490478 May 29 2026 03:33:22 mail maldet(4584): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 29 2026 03:33:22 mail maldet(4584): {sigup} latest signature set already installed May 29 2026 03:33:23 mail maldet(5526): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 29 2026 03:33:24 mail maldet(5526): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) May 29 2026 03:33:24 mail maldet(5526): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 29 2026 03:33:24 mail maldet(5526): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 29 2026 03:33:24 mail maldet(5526): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 May 29 2026 03:41:22 mail maldet(5526): {scan} file list completed in 478s, found 3744 files... May 29 2026 03:41:22 mail maldet(5526): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 29 2026 03:41:22 mail maldet(5526): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (3744 files) in progress... May 29 2026 03:46:50 mail maldet(5526): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 3744, malware hits 0, cleaned hits 0, time 807s May 29 2026 03:46:50 mail maldet(5526): {scan} scan report saved, to view run: maldet --report 260529-0333.5526 May 30 2026 03:47:52 mail maldet(11349): {update} checking for available updates... May 30 2026 03:47:52 mail maldet(11349): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 30 2026 03:47:53 mail maldet(11349): {update} hashing install files and checking against server... May 30 2026 03:47:53 mail maldet(11349): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 30 2026 03:47:53 mail maldet(11349): {update} latest version already installed. May 30 2026 03:47:53 mail maldet(12261): {sigup} performing signature update check... May 30 2026 03:47:53 mail maldet(12261): {sigup} local signature set is version 2026052490478 May 30 2026 03:47:54 mail maldet(12261): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 30 2026 03:47:54 mail maldet(12261): {sigup} latest signature set already installed May 30 2026 03:47:55 mail maldet(13152): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 30 2026 03:47:56 mail maldet(13152): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) May 30 2026 03:47:56 mail maldet(13152): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 30 2026 03:47:56 mail maldet(13152): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 30 2026 03:47:56 mail maldet(13152): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 May 30 2026 04:01:10 mail maldet(13152): {scan} file list completed in 794s, found 16417 files... May 30 2026 04:01:10 mail maldet(13152): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 30 2026 04:01:10 mail maldet(13152): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (16417 files) in progress... May 30 2026 04:17:19 mail maldet(13152): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 16417, malware hits 0, cleaned hits 0, time 1764s May 30 2026 04:17:19 mail maldet(13152): {scan} scan report saved, to view run: maldet --report 260530-0347.13152 May 31 2026 04:05:35 mail maldet(19318): {update} checking for available updates... May 31 2026 04:05:36 mail maldet(19318): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 31 2026 04:05:36 mail maldet(19318): {update} hashing install files and checking against server... May 31 2026 04:05:36 mail maldet(19318): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 31 2026 04:05:36 mail maldet(19318): {update} latest version already installed. May 31 2026 04:05:37 mail maldet(20285): {sigup} performing signature update check... May 31 2026 04:05:37 mail maldet(20285): {sigup} local signature set is version 2026052490478 May 31 2026 04:05:37 mail maldet(20285): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 31 2026 04:05:37 mail maldet(20285): {sigup} latest signature set already installed May 31 2026 04:05:38 mail maldet(21256): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 31 2026 04:05:39 mail maldet(21256): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) May 31 2026 04:05:39 mail maldet(21256): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 31 2026 04:05:39 mail maldet(21256): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 31 2026 04:05:39 mail maldet(21256): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 May 31 2026 04:23:50 mail maldet(21256): {scan} file list completed in 1091s, found 2706 files... May 31 2026 04:23:50 mail maldet(21256): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 31 2026 04:23:50 mail maldet(21256): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2706 files) in progress... May 31 2026 04:29:45 mail maldet(21256): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2706, malware hits 0, cleaned hits 0, time 1447s May 31 2026 04:29:45 mail maldet(21256): {scan} scan report saved, to view run: maldet --report 260531-0405.21256 Jun 01 2026 03:17:16 mail maldet(17446): {update} checking for available updates... Jun 01 2026 03:17:16 mail maldet(17446): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 01 2026 03:17:16 mail maldet(17446): {update} hashing install files and checking against server... Jun 01 2026 03:17:16 mail maldet(17446): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 01 2026 03:17:16 mail maldet(17446): {update} latest version already installed. Jun 01 2026 03:17:17 mail maldet(18377): {sigup} performing signature update check... Jun 01 2026 03:17:17 mail maldet(18377): {sigup} local signature set is version 2026052490478 Jun 01 2026 03:17:17 mail maldet(18377): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 01 2026 03:17:18 mail maldet(18377): {sigup} latest signature set already installed Jun 01 2026 03:17:18 mail maldet(19289): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 01 2026 03:17:20 mail maldet(19289): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 01 2026 03:17:20 mail maldet(19289): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 01 2026 03:17:20 mail maldet(19289): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 01 2026 03:17:20 mail maldet(19289): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 01 2026 03:34:33 mail maldet(19289): {scan} file list completed in 1033s, found 893 files... Jun 01 2026 03:34:33 mail maldet(19289): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 01 2026 03:34:33 mail maldet(19289): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (893 files) in progress... Jun 01 2026 03:41:03 mail maldet(19289): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 893, malware hits 0, cleaned hits 0, time 1425s Jun 01 2026 03:41:03 mail maldet(19289): {scan} scan report saved, to view run: maldet --report 260601-0317.19289 Jun 02 2026 03:35:00 mail maldet(25787): {update} checking for available updates... Jun 02 2026 03:35:00 mail maldet(25787): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 02 2026 03:35:00 mail maldet(25787): {update} hashing install files and checking against server... Jun 02 2026 03:35:00 mail maldet(25787): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 02 2026 03:35:00 mail maldet(25787): {update} latest version already installed. Jun 02 2026 03:35:01 mail maldet(26717): {sigup} performing signature update check... Jun 02 2026 03:35:01 mail maldet(26717): {sigup} local signature set is version 2026052490478 Jun 02 2026 03:35:01 mail maldet(26717): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 02 2026 03:35:01 mail maldet(26717): {sigup} latest signature set already installed Jun 02 2026 03:35:02 mail maldet(28474): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 02 2026 03:35:03 mail maldet(28474): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 02 2026 03:35:03 mail maldet(28474): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 02 2026 03:35:03 mail maldet(28474): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 02 2026 03:35:03 mail maldet(28474): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 02 2026 03:46:48 mail maldet(28474): {scan} file list completed in 705s, found 2596 files... Jun 02 2026 03:46:48 mail maldet(28474): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 02 2026 03:46:48 mail maldet(28474): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2596 files) in progress... Jun 02 2026 03:52:41 mail maldet(28474): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2596, malware hits 0, cleaned hits 0, time 1059s Jun 02 2026 03:52:41 mail maldet(28474): {scan} scan report saved, to view run: maldet --report 260602-0335.28474 Jun 03 2026 03:31:17 mail maldet(2334): {update} checking for available updates... Jun 03 2026 03:31:17 mail maldet(2334): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 03 2026 03:31:17 mail maldet(2334): {update} hashing install files and checking against server... Jun 03 2026 03:31:18 mail maldet(2334): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 03 2026 03:31:18 mail maldet(2334): {update} latest version already installed. Jun 03 2026 03:31:18 mail maldet(3307): {sigup} performing signature update check... Jun 03 2026 03:31:18 mail maldet(3307): {sigup} local signature set is version 2026052490478 Jun 03 2026 03:31:19 mail maldet(3307): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 03 2026 03:31:19 mail maldet(3307): {sigup} latest signature set already installed Jun 03 2026 03:31:20 mail maldet(4251): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 03 2026 03:31:21 mail maldet(4251): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 03 2026 03:31:21 mail maldet(4251): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 03 2026 03:31:21 mail maldet(4251): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 03 2026 03:31:21 mail maldet(4251): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 03 2026 03:44:13 mail maldet(4251): {scan} file list completed in 772s, found 1137 files... Jun 03 2026 03:44:13 mail maldet(4251): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 03 2026 03:44:13 mail maldet(4251): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1137 files) in progress... Jun 03 2026 03:50:04 mail maldet(4251): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1137, malware hits 0, cleaned hits 0, time 1124s Jun 03 2026 03:50:04 mail maldet(4251): {scan} scan report saved, to view run: maldet --report 260603-0331.4251 Jun 04 2026 03:24:46 mail maldet(26201): {update} checking for available updates... Jun 04 2026 03:24:46 mail maldet(26201): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 04 2026 03:24:47 mail maldet(26201): {update} hashing install files and checking against server... Jun 04 2026 03:24:47 mail maldet(26201): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 04 2026 03:24:47 mail maldet(26201): {update} latest version already installed. Jun 04 2026 03:24:48 mail maldet(27161): {sigup} performing signature update check... Jun 04 2026 03:24:48 mail maldet(27161): {sigup} local signature set is version 2026052490478 Jun 04 2026 03:24:48 mail maldet(27161): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 04 2026 03:24:48 mail maldet(27161): {sigup} latest signature set already installed Jun 04 2026 03:24:49 mail maldet(28114): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 04 2026 03:24:52 mail maldet(28114): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 04 2026 03:24:52 mail maldet(28114): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 04 2026 03:24:52 mail maldet(28114): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 04 2026 03:24:52 mail maldet(28114): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 04 2026 03:36:19 mail maldet(28114): {scan} file list completed in 687s, found 4661 files... Jun 04 2026 03:36:20 mail maldet(28114): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 04 2026 03:36:20 mail maldet(28114): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (4661 files) in progress... Jun 04 2026 03:44:56 mail maldet(28114): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 4661, malware hits 0, cleaned hits 0, time 1207s Jun 04 2026 03:44:56 mail maldet(28114): {scan} scan report saved, to view run: maldet --report 260604-0324.28114 Jun 05 2026 03:49:26 mail maldet(1380): {update} checking for available updates... Jun 05 2026 03:49:27 mail maldet(1380): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 05 2026 03:49:27 mail maldet(1380): {update} hashing install files and checking against server... Jun 05 2026 03:49:27 mail maldet(1380): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 05 2026 03:49:27 mail maldet(1380): {update} latest version already installed. Jun 05 2026 03:49:28 mail maldet(2305): {sigup} performing signature update check... Jun 05 2026 03:49:28 mail maldet(2305): {sigup} local signature set is version 2026052490478 Jun 05 2026 03:49:28 mail maldet(2305): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 05 2026 03:49:28 mail maldet(2305): {sigup} latest signature set already installed Jun 05 2026 03:49:29 mail maldet(3221): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 05 2026 03:49:30 mail maldet(3221): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 05 2026 03:49:30 mail maldet(3221): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 05 2026 03:49:30 mail maldet(3221): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 05 2026 03:49:30 mail maldet(3221): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 05 2026 03:55:27 mail maldet(3221): {scan} file list completed in 357s, found 3013 files... Jun 05 2026 03:55:27 mail maldet(3221): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 05 2026 03:55:27 mail maldet(3221): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (3013 files) in progress... Jun 05 2026 04:02:37 mail maldet(3221): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 3013, malware hits 0, cleaned hits 0, time 788s Jun 05 2026 04:02:37 mail maldet(3221): {scan} scan report saved, to view run: maldet --report 260605-0349.3221 Jun 06 2026 03:45:01 mail maldet(13639): {update} checking for available updates... Jun 06 2026 03:45:01 mail maldet(13639): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 06 2026 03:45:01 mail maldet(13639): {update} hashing install files and checking against server... Jun 06 2026 03:45:02 mail maldet(13639): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 06 2026 03:45:02 mail maldet(13639): {update} latest version already installed. Jun 06 2026 03:45:02 mail maldet(15388): {sigup} performing signature update check... Jun 06 2026 03:45:02 mail maldet(15388): {sigup} local signature set is version 2026052490478 Jun 06 2026 03:45:02 mail maldet(15388): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 06 2026 03:45:03 mail maldet(15388): {sigup} latest signature set already installed Jun 06 2026 03:45:03 mail maldet(16380): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 06 2026 03:45:05 mail maldet(16380): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 06 2026 03:45:05 mail maldet(16380): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 06 2026 03:45:05 mail maldet(16380): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 06 2026 03:45:05 mail maldet(16380): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 06 2026 03:55:40 mail maldet(16380): {scan} file list completed in 635s, found 7163 files... Jun 06 2026 03:55:40 mail maldet(16380): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 06 2026 03:55:40 mail maldet(16380): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (7163 files) in progress... Jun 06 2026 04:04:01 mail maldet(16380): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 7163, malware hits 0, cleaned hits 0, time 1138s Jun 06 2026 04:04:01 mail maldet(16380): {scan} scan report saved, to view run: maldet --report 260606-0345.16380 Jun 07 2026 03:31:55 mail maldet(6814): {update} checking for available updates... Jun 07 2026 03:31:55 mail maldet(6814): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 07 2026 03:31:55 mail maldet(6814): {update} hashing install files and checking against server... Jun 07 2026 03:31:56 mail maldet(6814): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 07 2026 03:31:56 mail maldet(6814): {update} latest version already installed. Jun 07 2026 03:31:56 mail maldet(7670): {sigup} performing signature update check... Jun 07 2026 03:31:56 mail maldet(7670): {sigup} local signature set is version 2026052490478 Jun 07 2026 03:31:57 mail maldet(7670): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 07 2026 03:31:57 mail maldet(7670): {sigup} latest signature set already installed Jun 07 2026 03:31:57 mail maldet(8497): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 07 2026 03:31:59 mail maldet(8497): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 07 2026 03:31:59 mail maldet(8497): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 07 2026 03:31:59 mail maldet(8497): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 07 2026 03:31:59 mail maldet(8497): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 07 2026 03:42:34 mail maldet(8497): {scan} file list completed in 635s, found 2740 files... Jun 07 2026 03:42:34 mail maldet(8497): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 07 2026 03:42:34 mail maldet(8497): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2740 files) in progress... Jun 07 2026 03:48:22 mail maldet(8497): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2740, malware hits 0, cleaned hits 0, time 985s Jun 07 2026 03:48:22 mail maldet(8497): {scan} scan report saved, to view run: maldet --report 260607-0331.8497 Jun 08 2026 03:56:00 mail maldet(31681): {update} checking for available updates... Jun 08 2026 03:56:01 mail maldet(31681): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 08 2026 03:56:01 mail maldet(31681): {update} hashing install files and checking against server... Jun 08 2026 03:56:01 mail maldet(31681): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 08 2026 03:56:01 mail maldet(31681): {update} latest version already installed. Jun 08 2026 03:56:02 mail maldet(32542): {sigup} performing signature update check... Jun 08 2026 03:56:02 mail maldet(32542): {sigup} local signature set is version 2026052490478 Jun 08 2026 03:56:02 mail maldet(32542): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 08 2026 03:56:02 mail maldet(32542): {sigup} latest signature set already installed Jun 08 2026 03:56:03 mail maldet(942): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 08 2026 03:56:05 mail maldet(942): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 08 2026 03:56:05 mail maldet(942): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 08 2026 03:56:05 mail maldet(942): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 08 2026 03:56:05 mail maldet(942): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 08 2026 04:06:40 mail maldet(942): {scan} file list completed in 634s, found 2705 files... Jun 08 2026 04:06:40 mail maldet(942): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 08 2026 04:06:40 mail maldet(942): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2705 files) in progress... Jun 08 2026 04:12:56 mail maldet(942): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2705, malware hits 0, cleaned hits 0, time 1013s Jun 08 2026 04:12:56 mail maldet(942): {scan} scan report saved, to view run: maldet --report 260608-0356.942 Jun 09 2026 03:33:20 mail maldet(30730): {update} checking for available updates... Jun 09 2026 03:33:21 mail maldet(30730): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 09 2026 03:33:21 mail maldet(30730): {update} hashing install files and checking against server... Jun 09 2026 03:33:21 mail maldet(30730): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 09 2026 03:33:21 mail maldet(30730): {update} latest version already installed. Jun 09 2026 03:33:21 mail maldet(31604): {sigup} performing signature update check... Jun 09 2026 03:33:22 mail maldet(31604): {sigup} local signature set is version 2026052490478 Jun 09 2026 03:33:22 mail maldet(31604): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 09 2026 03:33:22 mail maldet(31604): {sigup} latest signature set already installed Jun 09 2026 03:33:23 mail maldet(32449): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 09 2026 03:33:24 mail maldet(32449): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 09 2026 03:33:24 mail maldet(32449): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 09 2026 03:33:24 mail maldet(32449): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 09 2026 03:33:24 mail maldet(32449): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 09 2026 03:41:26 mail maldet(32449): {scan} file list completed in 482s, found 1174 files... Jun 09 2026 03:41:26 mail maldet(32449): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 09 2026 03:41:26 mail maldet(32449): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1174 files) in progress... Jun 09 2026 03:47:15 mail maldet(32449): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1174, malware hits 0, cleaned hits 0, time 832s Jun 09 2026 03:47:15 mail maldet(32449): {scan} scan report saved, to view run: maldet --report 260609-0333.32449 Jun 10 2026 04:02:50 mail maldet(3754): {update} checking for available updates... Jun 10 2026 04:02:50 mail maldet(3754): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 10 2026 04:02:50 mail maldet(3754): {update} hashing install files and checking against server... Jun 10 2026 04:02:51 mail maldet(3754): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 10 2026 04:02:51 mail maldet(3754): {update} latest version already installed. Jun 10 2026 04:02:51 mail maldet(4623): {sigup} performing signature update check... Jun 10 2026 04:02:51 mail maldet(4623): {sigup} local signature set is version 2026052490478 Jun 10 2026 04:02:52 mail maldet(4623): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 10 2026 04:02:52 mail maldet(4623): {sigup} latest signature set already installed Jun 10 2026 04:02:52 mail maldet(5466): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 10 2026 04:02:53 mail maldet(5466): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 10 2026 04:02:53 mail maldet(5466): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 10 2026 04:02:53 mail maldet(5466): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 10 2026 04:02:53 mail maldet(5466): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 10 2026 04:19:12 mail maldet(5466): {scan} file list completed in 979s, found 4211 files... Jun 10 2026 04:19:12 mail maldet(5466): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 10 2026 04:19:12 mail maldet(5466): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (4211 files) in progress... Jun 10 2026 04:25:59 mail maldet(5466): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details; quarantine_on_error=0 or unset, quarantine has been disabled! Jun 10 2026 04:25:59 mail maldet(5466): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 4211, malware hits 0, cleaned hits 0, time 1387s Jun 10 2026 04:25:59 mail maldet(5466): {scan} scan report saved, to view run: maldet --report 260610-0402.5466 Jun 11 2026 03:56:58 mail maldet(463): {update} checking for available updates... Jun 11 2026 03:56:59 mail maldet(463): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 11 2026 03:56:59 mail maldet(463): {update} hashing install files and checking against server... Jun 11 2026 03:56:59 mail maldet(463): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 11 2026 03:56:59 mail maldet(463): {update} latest version already installed. Jun 11 2026 03:57:00 mail maldet(1322): {sigup} performing signature update check... Jun 11 2026 03:57:00 mail maldet(1322): {sigup} local signature set is version 2026052490478 Jun 11 2026 03:57:00 mail maldet(1322): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 11 2026 03:57:00 mail maldet(1322): {sigup} latest signature set already installed Jun 11 2026 03:57:01 mail maldet(2161): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 11 2026 03:57:02 mail maldet(2161): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 11 2026 03:57:02 mail maldet(2161): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 11 2026 03:57:02 mail maldet(2161): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 11 2026 03:57:02 mail maldet(2161): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 11 2026 04:09:36 mail maldet(2161): {scan} file list completed in 754s, found 9973 files... Jun 11 2026 04:09:36 mail maldet(2161): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 11 2026 04:09:36 mail maldet(2161): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (9973 files) in progress... Jun 11 2026 04:18:25 mail maldet(2161): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 9973, malware hits 0, cleaned hits 0, time 1284s Jun 11 2026 04:18:25 mail maldet(2161): {scan} scan report saved, to view run: maldet --report 260611-0357.2161 Jun 12 2026 03:43:42 mail maldet(31639): {update} checking for available updates... Jun 12 2026 03:43:42 mail maldet(31639): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 12 2026 03:43:42 mail maldet(31639): {update} hashing install files and checking against server... Jun 12 2026 03:43:42 mail maldet(31639): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 12 2026 03:43:42 mail maldet(31639): {update} latest version already installed. Jun 12 2026 03:43:43 mail maldet(32511): {sigup} performing signature update check... Jun 12 2026 03:43:43 mail maldet(32511): {sigup} local signature set is version 2026052490478 Jun 12 2026 03:43:43 mail maldet(32511): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 12 2026 03:43:44 mail maldet(32511): {sigup} latest signature set already installed Jun 12 2026 03:43:44 mail maldet(917): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 12 2026 03:43:45 mail maldet(917): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 12 2026 03:43:45 mail maldet(917): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 12 2026 03:43:45 mail maldet(917): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 12 2026 03:43:45 mail maldet(917): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 12 2026 03:47:28 mail maldet(917): {scan} file list completed in 223s, found 3714 files... Jun 12 2026 03:47:28 mail maldet(917): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 12 2026 03:47:28 mail maldet(917): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (3714 files) in progress... Jun 12 2026 03:54:03 mail maldet(917): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 3714, malware hits 0, cleaned hits 0, time 619s Jun 12 2026 03:54:03 mail maldet(917): {scan} scan report saved, to view run: maldet --report 260612-0343.917 Jun 13 2026 03:44:12 mail maldet(13790): {update} checking for available updates... Jun 13 2026 03:44:13 mail maldet(13790): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 13 2026 03:44:13 mail maldet(13790): {update} hashing install files and checking against server... Jun 13 2026 03:44:13 mail maldet(13790): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 13 2026 03:44:13 mail maldet(13790): {update} latest version already installed. Jun 13 2026 03:44:14 mail maldet(14634): {sigup} performing signature update check... Jun 13 2026 03:44:14 mail maldet(14634): {sigup} local signature set is version 2026052490478 Jun 13 2026 03:44:14 mail maldet(14634): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 13 2026 03:44:14 mail maldet(14634): {sigup} latest signature set already installed Jun 13 2026 03:44:15 mail maldet(15478): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 13 2026 03:44:16 mail maldet(15478): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 13 2026 03:44:16 mail maldet(15478): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 13 2026 03:44:16 mail maldet(15478): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 13 2026 03:44:16 mail maldet(15478): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 13 2026 03:50:06 mail maldet(15478): {scan} file list completed in 350s, found 11475 files... Jun 13 2026 03:50:06 mail maldet(15478): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 13 2026 03:50:06 mail maldet(15478): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (11475 files) in progress... Jun 13 2026 04:03:05 mail maldet(15478): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details; quarantine_on_error=0 or unset, quarantine has been disabled! Jun 13 2026 04:03:05 mail maldet(15478): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 11475, malware hits 0, cleaned hits 0, time 1130s Jun 13 2026 04:03:05 mail maldet(15478): {scan} scan report saved, to view run: maldet --report 260613-0344.15478 Jun 14 2026 04:00:24 mail maldet(19107): {update} checking for available updates... Jun 14 2026 04:00:25 mail maldet(19107): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 14 2026 04:00:25 mail maldet(19107): {update} hashing install files and checking against server... Jun 14 2026 04:00:25 mail maldet(19107): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 14 2026 04:00:25 mail maldet(19107): {update} latest version already installed. Jun 14 2026 04:00:25 mail maldet(19988): {sigup} performing signature update check... Jun 14 2026 04:00:25 mail maldet(19988): {sigup} local signature set is version 2026052490478 Jun 14 2026 04:00:26 mail maldet(19988): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 14 2026 04:00:26 mail maldet(19988): {sigup} latest signature set already installed Jun 14 2026 04:00:26 mail maldet(20855): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 14 2026 04:00:27 mail maldet(20855): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 14 2026 04:00:27 mail maldet(20855): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 14 2026 04:00:27 mail maldet(20855): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 14 2026 04:00:27 mail maldet(20855): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 14 2026 04:04:52 mail maldet(20855): {scan} file list completed in 265s, found 3056 files... Jun 14 2026 04:04:52 mail maldet(20855): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 14 2026 04:04:52 mail maldet(20855): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (3056 files) in progress... Jun 14 2026 04:12:05 mail maldet(20855): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 3056, malware hits 0, cleaned hits 0, time 699s Jun 14 2026 04:12:05 mail maldet(20855): {scan} scan report saved, to view run: maldet --report 260614-0400.20855 Jun 15 2026 03:57:31 mail maldet(7214): {update} checking for available updates... Jun 15 2026 03:57:32 mail maldet(7214): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 15 2026 03:57:32 mail maldet(7214): {update} hashing install files and checking against server... Jun 15 2026 03:57:32 mail maldet(7214): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 15 2026 03:57:32 mail maldet(7214): {update} latest version already installed. Jun 15 2026 03:57:33 mail maldet(8076): {sigup} performing signature update check... Jun 15 2026 03:57:33 mail maldet(8076): {sigup} local signature set is version 2026052490478 Jun 15 2026 03:57:33 mail maldet(8076): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 15 2026 03:57:34 mail maldet(8076): {sigup} latest signature set already installed Jun 15 2026 03:57:34 mail maldet(8912): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 15 2026 03:57:35 mail maldet(8912): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 15 2026 03:57:35 mail maldet(8912): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 15 2026 03:57:35 mail maldet(8912): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 15 2026 03:57:35 mail maldet(8912): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 15 2026 04:01:39 mail maldet(8912): {scan} file list completed in 243s, found 674 files... Jun 15 2026 04:01:39 mail maldet(8912): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 15 2026 04:01:39 mail maldet(8912): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (674 files) in progress... Jun 15 2026 04:05:42 mail maldet(8912): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 674, malware hits 0, cleaned hits 0, time 488s Jun 15 2026 04:05:42 mail maldet(8912): {scan} scan report saved, to view run: maldet --report 260615-0357.8912 Jun 16 2026 03:53:34 mail maldet(24291): {update} checking for available updates... Jun 16 2026 03:53:34 mail maldet(24291): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 16 2026 03:53:34 mail maldet(24291): {update} hashing install files and checking against server... Jun 16 2026 03:53:35 mail maldet(24291): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 16 2026 03:53:35 mail maldet(24291): {update} latest version already installed. Jun 16 2026 03:53:35 mail maldet(25150): {sigup} performing signature update check... Jun 16 2026 03:53:35 mail maldet(25150): {sigup} local signature set is version 2026052490478 Jun 16 2026 03:53:35 mail maldet(25150): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 16 2026 03:53:36 mail maldet(25150): {sigup} latest signature set already installed Jun 16 2026 03:53:36 mail maldet(25991): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 16 2026 03:53:37 mail maldet(25991): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 16 2026 03:53:37 mail maldet(25991): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 16 2026 03:53:37 mail maldet(25991): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 16 2026 03:53:38 mail maldet(25991): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 16 2026 04:01:08 mail maldet(25991): {scan} file list completed in 450s, found 3977 files... Jun 16 2026 04:01:08 mail maldet(25991): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 16 2026 04:01:08 mail maldet(25991): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (3977 files) in progress... Jun 16 2026 04:07:46 mail maldet(25991): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 3977, malware hits 0, cleaned hits 0, time 850s Jun 16 2026 04:07:46 mail maldet(25991): {scan} scan report saved, to view run: maldet --report 260616-0353.25991 Jun 17 2026 03:20:46 mail maldet(22874): {update} checking for available updates... Jun 17 2026 03:20:46 mail maldet(22874): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 17 2026 03:20:46 mail maldet(22874): {update} hashing install files and checking against server... Jun 17 2026 03:20:47 mail maldet(22874): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 17 2026 03:20:47 mail maldet(22874): {update} latest version already installed. Jun 17 2026 03:20:47 mail maldet(23758): {sigup} performing signature update check... Jun 17 2026 03:20:47 mail maldet(23758): {sigup} local signature set is version 2026052490478 Jun 17 2026 03:20:48 mail maldet(23758): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 17 2026 03:20:48 mail maldet(23758): {sigup} latest signature set already installed Jun 17 2026 03:20:48 mail maldet(24608): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 17 2026 03:20:50 mail maldet(24608): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 17 2026 03:20:50 mail maldet(24608): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 17 2026 03:20:50 mail maldet(24608): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 17 2026 03:20:50 mail maldet(24608): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 17 2026 03:28:25 mail maldet(24608): {scan} file list completed in 455s, found 2737 files... Jun 17 2026 03:28:25 mail maldet(24608): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 17 2026 03:28:25 mail maldet(24608): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2737 files) in progress... Jun 17 2026 03:36:30 mail maldet(24608): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2737, malware hits 0, cleaned hits 0, time 941s Jun 17 2026 03:36:30 mail maldet(24608): {scan} scan report saved, to view run: maldet --report 260617-0320.24608 Jun 18 2026 04:18:02 mail maldet(13866): {update} checking for available updates... Jun 18 2026 04:18:03 mail maldet(13866): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 18 2026 04:18:03 mail maldet(13866): {update} hashing install files and checking against server... Jun 18 2026 04:18:03 mail maldet(13866): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 18 2026 04:18:03 mail maldet(13866): {update} latest version already installed. Jun 18 2026 04:18:04 mail maldet(14758): {sigup} performing signature update check... Jun 18 2026 04:18:04 mail maldet(14758): {sigup} local signature set is version 2026052490478 Jun 18 2026 04:18:04 mail maldet(14758): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 18 2026 04:18:04 mail maldet(14758): {sigup} latest signature set already installed Jun 18 2026 04:18:05 mail maldet(15693): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 18 2026 04:18:06 mail maldet(15693): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 18 2026 04:18:06 mail maldet(15693): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 18 2026 04:18:06 mail maldet(15693): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 18 2026 04:18:06 mail maldet(15693): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 18 2026 04:24:23 mail maldet(15693): {scan} file list completed in 377s, found 2204 files... Jun 18 2026 04:24:23 mail maldet(15693): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 18 2026 04:24:23 mail maldet(15693): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2204 files) in progress... Jun 18 2026 04:30:03 mail maldet(15693): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2204, malware hits 0, cleaned hits 0, time 718s Jun 18 2026 04:30:03 mail maldet(15693): {scan} scan report saved, to view run: maldet --report 260618-0418.15693 Jun 19 2026 04:10:27 mail maldet(609): {update} checking for available updates... Jun 19 2026 04:10:28 mail maldet(609): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 19 2026 04:10:28 mail maldet(609): {update} hashing install files and checking against server... Jun 19 2026 04:10:28 mail maldet(609): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 19 2026 04:10:28 mail maldet(609): {update} latest version already installed. Jun 19 2026 04:10:29 mail maldet(1546): {sigup} performing signature update check... Jun 19 2026 04:10:29 mail maldet(1546): {sigup} local signature set is version 2026052490478 Jun 19 2026 04:10:29 mail maldet(1546): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 19 2026 04:10:29 mail maldet(1546): {sigup} latest signature set already installed Jun 19 2026 04:10:30 mail maldet(2430): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 19 2026 04:10:31 mail maldet(2430): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 19 2026 04:10:31 mail maldet(2430): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 19 2026 04:10:31 mail maldet(2430): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 19 2026 04:10:31 mail maldet(2430): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 19 2026 04:15:39 mail maldet(2430): {scan} file list completed in 308s, found 11327 files... Jun 19 2026 04:15:39 mail maldet(2430): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 19 2026 04:15:39 mail maldet(2430): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (11327 files) in progress... Jun 19 2026 04:26:05 mail maldet(2430): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 11327, malware hits 0, cleaned hits 0, time 935s Jun 19 2026 04:26:05 mail maldet(2430): {scan} scan report saved, to view run: maldet --report 260619-0410.2430 Jun 20 2026 03:18:39 mail maldet(27079): {update} checking for available updates... Jun 20 2026 03:18:39 mail maldet(27079): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 20 2026 03:18:39 mail maldet(27079): {update} hashing install files and checking against server... Jun 20 2026 03:18:40 mail maldet(27079): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 20 2026 03:18:40 mail maldet(27079): {update} latest version already installed. Jun 20 2026 03:18:40 mail maldet(27951): {sigup} performing signature update check... Jun 20 2026 03:18:40 mail maldet(27951): {sigup} local signature set is version 2026052490478 Jun 20 2026 03:18:41 mail maldet(27951): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 20 2026 03:18:41 mail maldet(27951): {sigup} latest signature set already installed Jun 20 2026 03:18:42 mail maldet(28773): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 20 2026 03:18:43 mail maldet(28773): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 20 2026 03:18:43 mail maldet(28773): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 20 2026 03:18:43 mail maldet(28773): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 20 2026 03:18:43 mail maldet(28773): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 20 2026 03:27:31 mail maldet(28773): {scan} file list completed in 528s, found 4723 files... Jun 20 2026 03:27:31 mail maldet(28773): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 20 2026 03:27:31 mail maldet(28773): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (4723 files) in progress... Jun 20 2026 03:35:43 mail maldet(28773): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 4723, malware hits 0, cleaned hits 0, time 1021s Jun 20 2026 03:35:43 mail maldet(28773): {scan} scan report saved, to view run: maldet --report 260620-0318.28773 Jun 21 2026 03:56:44 mail maldet(17981): {update} checking for available updates... Jun 21 2026 03:56:44 mail maldet(17981): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 21 2026 03:56:44 mail maldet(17981): {update} hashing install files and checking against server... Jun 21 2026 03:56:45 mail maldet(17981): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 21 2026 03:56:45 mail maldet(17981): {update} latest version already installed. Jun 21 2026 03:56:45 mail maldet(18838): {sigup} performing signature update check... Jun 21 2026 03:56:45 mail maldet(18838): {sigup} local signature set is version 2026052490478 Jun 21 2026 03:56:46 mail maldet(18838): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 21 2026 03:56:46 mail maldet(18838): {sigup} latest signature set already installed Jun 21 2026 03:56:46 mail maldet(19686): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 21 2026 03:56:48 mail maldet(19686): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 21 2026 03:56:48 mail maldet(19686): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 21 2026 03:56:48 mail maldet(19686): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 21 2026 03:56:48 mail maldet(19686): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 21 2026 04:09:12 mail maldet(19686): {scan} file list completed in 744s, found 7449 files... Jun 21 2026 04:09:12 mail maldet(19686): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 21 2026 04:09:12 mail maldet(19686): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (7449 files) in progress... Jun 21 2026 04:19:49 mail maldet(19686): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 7449, malware hits 0, cleaned hits 0, time 1383s Jun 21 2026 04:19:49 mail maldet(19686): {scan} scan report saved, to view run: maldet --report 260621-0356.19686 Jun 22 2026 03:49:36 mail maldet(7890): {update} checking for available updates... Jun 22 2026 03:49:36 mail maldet(7890): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 22 2026 03:49:36 mail maldet(7890): {update} hashing install files and checking against server... Jun 22 2026 03:49:36 mail maldet(7890): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 22 2026 03:49:36 mail maldet(7890): {update} latest version already installed. Jun 22 2026 03:49:37 mail maldet(8767): {sigup} performing signature update check... Jun 22 2026 03:49:37 mail maldet(8767): {sigup} local signature set is version 2026052490478 Jun 22 2026 03:49:37 mail maldet(8767): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 22 2026 03:49:38 mail maldet(8767): {sigup} latest signature set already installed Jun 22 2026 03:49:38 mail maldet(9615): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 22 2026 03:49:40 mail maldet(9615): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 22 2026 03:49:40 mail maldet(9615): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 22 2026 03:49:40 mail maldet(9615): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 22 2026 03:49:40 mail maldet(9615): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 22 2026 04:07:18 mail maldet(9615): {scan} file list completed in 1058s, found 1384 files... Jun 22 2026 04:07:18 mail maldet(9615): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 22 2026 04:07:18 mail maldet(9615): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1384 files) in progress... Jun 22 2026 04:15:01 mail maldet(9615): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1384, malware hits 0, cleaned hits 0, time 1523s Jun 22 2026 04:15:01 mail maldet(9615): {scan} scan report saved, to view run: maldet --report 260622-0349.9615 Jun 23 2026 03:52:18 mail maldet(18637): {update} checking for available updates... Jun 23 2026 03:52:19 mail maldet(18637): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 23 2026 03:52:19 mail maldet(18637): {update} hashing install files and checking against server... Jun 23 2026 03:52:19 mail maldet(18637): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 23 2026 03:52:19 mail maldet(18637): {update} latest version already installed. Jun 23 2026 03:52:20 mail maldet(19492): {sigup} performing signature update check... Jun 23 2026 03:52:20 mail maldet(19492): {sigup} local signature set is version 2026052490478 Jun 23 2026 03:52:20 mail maldet(19492): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 23 2026 03:52:20 mail maldet(19492): {sigup} latest signature set already installed Jun 23 2026 03:52:21 mail maldet(20323): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 23 2026 03:52:22 mail maldet(20323): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 23 2026 03:52:22 mail maldet(20323): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 23 2026 03:52:22 mail maldet(20323): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 23 2026 03:52:22 mail maldet(20323): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 23 2026 03:57:48 mail maldet(20323): {scan} file list completed in 326s, found 2401 files... Jun 23 2026 03:57:48 mail maldet(20323): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 23 2026 03:57:48 mail maldet(20323): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2401 files) in progress... Jun 23 2026 04:03:20 mail maldet(20323): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2401, malware hits 0, cleaned hits 0, time 659s Jun 23 2026 04:03:20 mail maldet(20323): {scan} scan report saved, to view run: maldet --report 260623-0352.20323 Jun 24 2026 03:52:41 mail maldet(20903): {update} checking for available updates... Jun 24 2026 03:52:42 mail maldet(20903): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 24 2026 03:52:42 mail maldet(20903): {update} hashing install files and checking against server... Jun 24 2026 03:52:42 mail maldet(20903): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 24 2026 03:52:42 mail maldet(20903): {update} latest version already installed. Jun 24 2026 03:52:44 mail maldet(21748): {sigup} performing signature update check... Jun 24 2026 03:52:44 mail maldet(21748): {sigup} local signature set is version 2026052490478 Jun 24 2026 03:52:44 mail maldet(21748): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 24 2026 03:52:45 mail maldet(21748): {sigup} latest signature set already installed Jun 24 2026 03:52:45 mail maldet(22569): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 24 2026 03:52:47 mail maldet(22569): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 24 2026 03:52:47 mail maldet(22569): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 24 2026 03:52:47 mail maldet(22569): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 24 2026 03:52:47 mail maldet(22569): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 24 2026 04:07:25 mail maldet(22569): {scan} file list completed in 878s, found 6379 files... Jun 24 2026 04:07:25 mail maldet(22569): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 24 2026 04:07:25 mail maldet(22569): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (6379 files) in progress... Jun 24 2026 04:14:28 mail maldet(22569): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 6379, malware hits 0, cleaned hits 0, time 1303s Jun 24 2026 04:14:28 mail maldet(22569): {scan} scan report saved, to view run: maldet --report 260624-0352.22569 Jun 25 2026 03:27:49 mail maldet(29075): {update} checking for available updates... Jun 25 2026 03:27:49 mail maldet(29075): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 25 2026 03:27:49 mail maldet(29075): {update} hashing install files and checking against server... Jun 25 2026 03:27:50 mail maldet(29075): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 25 2026 03:27:50 mail maldet(29075): {update} latest version already installed. Jun 25 2026 03:27:50 mail maldet(29905): {sigup} performing signature update check... Jun 25 2026 03:27:50 mail maldet(29905): {sigup} local signature set is version 2026052490478 Jun 25 2026 03:27:51 mail maldet(29905): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 25 2026 03:27:51 mail maldet(29905): {sigup} latest signature set already installed Jun 25 2026 03:27:51 mail maldet(30710): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 25 2026 03:27:52 mail maldet(30710): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 25 2026 03:27:52 mail maldet(30710): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 25 2026 03:27:52 mail maldet(30710): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 25 2026 03:27:52 mail maldet(30710): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 25 2026 03:37:33 mail maldet(30710): {scan} file list completed in 581s, found 17869 files... Jun 25 2026 03:37:33 mail maldet(30710): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 25 2026 03:37:33 mail maldet(30710): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (17869 files) in progress... Jun 25 2026 03:52:04 mail maldet(30710): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 17869, malware hits 0, cleaned hits 0, time 1453s Jun 25 2026 03:52:04 mail maldet(30710): {scan} scan report saved, to view run: maldet --report 260625-0327.30710 Jun 26 2026 03:43:56 mail maldet(14930): {update} checking for available updates... Jun 26 2026 03:43:56 mail maldet(14930): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 26 2026 03:43:56 mail maldet(14930): {update} hashing install files and checking against server... Jun 26 2026 03:43:57 mail maldet(14930): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 26 2026 03:43:57 mail maldet(14930): {update} latest version already installed. Jun 26 2026 03:43:57 mail maldet(15847): {sigup} performing signature update check... Jun 26 2026 03:43:57 mail maldet(15847): {sigup} local signature set is version 2026052490478 Jun 26 2026 03:43:58 mail maldet(15847): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 26 2026 03:43:58 mail maldet(15847): {sigup} latest signature set already installed Jun 26 2026 03:43:58 mail maldet(16724): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 26 2026 03:43:59 mail maldet(16724): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 26 2026 03:43:59 mail maldet(16724): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 26 2026 03:43:59 mail maldet(16724): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 26 2026 03:43:59 mail maldet(16724): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 26 2026 03:49:06 mail maldet(16724): {scan} file list completed in 307s, found 3680 files... Jun 26 2026 03:49:06 mail maldet(16724): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 26 2026 03:49:06 mail maldet(16724): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (3680 files) in progress... Jun 26 2026 03:58:24 mail maldet(16724): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details; quarantine_on_error=0 or unset, quarantine has been disabled! Jun 26 2026 03:58:24 mail maldet(16724): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 3680, malware hits 0, cleaned hits 0, time 866s Jun 26 2026 03:58:24 mail maldet(16724): {scan} scan report saved, to view run: maldet --report 260626-0343.16724 Jun 27 2026 03:49:52 mail maldet(1787): {update} checking for available updates... Jun 27 2026 03:49:53 mail maldet(1787): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 27 2026 03:49:53 mail maldet(1787): {update} hashing install files and checking against server... Jun 27 2026 03:49:53 mail maldet(1787): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 27 2026 03:49:53 mail maldet(1787): {update} latest version already installed. Jun 27 2026 03:49:54 mail maldet(2655): {sigup} performing signature update check... Jun 27 2026 03:49:54 mail maldet(2655): {sigup} local signature set is version 2026052490478 Jun 27 2026 03:49:54 mail maldet(2655): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 27 2026 03:49:54 mail maldet(2655): {sigup} latest signature set already installed Jun 27 2026 03:49:55 mail maldet(3506): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 27 2026 03:49:56 mail maldet(3506): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 27 2026 03:49:56 mail maldet(3506): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 27 2026 03:49:56 mail maldet(3506): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 27 2026 03:49:56 mail maldet(3506): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 27 2026 04:02:55 mail maldet(3506): {scan} file list completed in 779s, found 4775 files... Jun 27 2026 04:02:55 mail maldet(3506): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 27 2026 04:02:55 mail maldet(3506): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (4775 files) in progress... Jun 27 2026 04:10:09 mail maldet(3506): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 4775, malware hits 0, cleaned hits 0, time 1214s Jun 27 2026 04:10:09 mail maldet(3506): {scan} scan report saved, to view run: maldet --report 260627-0349.3506 Jun 28 2026 03:54:28 mail maldet(11642): {update} checking for available updates... Jun 28 2026 03:54:29 mail maldet(11642): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 28 2026 03:54:29 mail maldet(11642): {update} hashing install files and checking against server... Jun 28 2026 03:54:29 mail maldet(11642): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 28 2026 03:54:29 mail maldet(11642): {update} latest version already installed. Jun 28 2026 03:54:30 mail maldet(12508): {sigup} performing signature update check... Jun 28 2026 03:54:30 mail maldet(12508): {sigup} local signature set is version 2026052490478 Jun 28 2026 03:54:30 mail maldet(12508): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 28 2026 03:54:30 mail maldet(12508): {sigup} latest signature set already installed Jun 28 2026 03:54:31 mail maldet(13353): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 28 2026 03:54:32 mail maldet(13353): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 28 2026 03:54:32 mail maldet(13353): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 28 2026 03:54:32 mail maldet(13353): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 28 2026 03:54:32 mail maldet(13353): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 28 2026 03:58:18 mail maldet(13353): {scan} file list completed in 226s, found 2891 files... Jun 28 2026 03:58:18 mail maldet(13353): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 28 2026 03:58:18 mail maldet(13353): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2891 files) in progress... Jun 28 2026 04:04:46 mail maldet(13353): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2891, malware hits 0, cleaned hits 0, time 615s Jun 28 2026 04:04:46 mail maldet(13353): {scan} scan report saved, to view run: maldet --report 260628-0354.13353 Jun 29 2026 03:25:58 mail maldet(25648): {update} checking for available updates... Jun 29 2026 03:25:59 mail maldet(25648): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 29 2026 03:25:59 mail maldet(25648): {update} hashing install files and checking against server... Jun 29 2026 03:25:59 mail maldet(25648): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 29 2026 03:25:59 mail maldet(25648): {update} latest version already installed. Jun 29 2026 03:26:00 mail maldet(26500): {sigup} performing signature update check... Jun 29 2026 03:26:00 mail maldet(26500): {sigup} local signature set is version 2026052490478 Jun 29 2026 03:26:00 mail maldet(26500): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 29 2026 03:26:00 mail maldet(26500): {sigup} latest signature set already installed Jun 29 2026 03:26:01 mail maldet(27335): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 29 2026 03:26:02 mail maldet(27335): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 29 2026 03:26:02 mail maldet(27335): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 29 2026 03:26:02 mail maldet(27335): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 29 2026 03:26:02 mail maldet(27335): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 29 2026 03:51:25 mail maldet(27335): {scan} file list completed in 1523s, found 2816 files... Jun 29 2026 03:51:25 mail maldet(27335): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 29 2026 03:51:25 mail maldet(27335): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2816 files) in progress... Jun 29 2026 04:00:08 mail maldet(27335): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2816, malware hits 0, cleaned hits 0, time 2047s Jun 29 2026 04:00:08 mail maldet(27335): {scan} scan report saved, to view run: maldet --report 260629-0326.27335 Jun 30 2026 03:57:15 mail maldet(15990): {update} checking for available updates... Jun 30 2026 03:57:15 mail maldet(15990): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 30 2026 03:57:15 mail maldet(15990): {update} hashing install files and checking against server... Jun 30 2026 03:57:15 mail maldet(15990): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 30 2026 03:57:16 mail maldet(15990): {update} latest version already installed. Jun 30 2026 03:57:16 mail maldet(16907): {sigup} performing signature update check... Jun 30 2026 03:57:16 mail maldet(16907): {sigup} local signature set is version 2026052490478 Jun 30 2026 03:57:16 mail maldet(16907): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 30 2026 03:57:17 mail maldet(16907): {sigup} latest signature set already installed Jun 30 2026 03:57:17 mail maldet(17766): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 30 2026 03:57:18 mail maldet(17766): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 30 2026 03:57:18 mail maldet(17766): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 30 2026 03:57:18 mail maldet(17766): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 30 2026 03:57:18 mail maldet(17766): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 30 2026 04:02:41 mail maldet(17766): {scan} file list completed in 323s, found 1222 files... Jun 30 2026 04:02:41 mail maldet(17766): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 30 2026 04:02:41 mail maldet(17766): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1222 files) in progress... Jun 30 2026 04:08:07 mail maldet(17766): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1222, malware hits 0, cleaned hits 0, time 650s Jun 30 2026 04:08:07 mail maldet(17766): {scan} scan report saved, to view run: maldet --report 260630-0357.17766 Jul 01 2026 03:57:51 mail maldet(1988): {update} checking for available updates... Jul 01 2026 03:57:52 mail maldet(1988): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 01 2026 03:57:52 mail maldet(1988): {update} hashing install files and checking against server... Jul 01 2026 03:57:52 mail maldet(1988): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 01 2026 03:57:52 mail maldet(1988): {update} latest version already installed. Jul 01 2026 03:57:52 mail maldet(2881): {sigup} performing signature update check... Jul 01 2026 03:57:52 mail maldet(2881): {sigup} local signature set is version 2026052490478 Jul 01 2026 03:57:53 mail maldet(2881): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 01 2026 03:57:53 mail maldet(2881): {sigup} latest signature set already installed Jul 01 2026 03:57:54 mail maldet(3793): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 01 2026 03:57:55 mail maldet(3793): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jul 01 2026 03:57:55 mail maldet(3793): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 01 2026 03:57:55 mail maldet(3793): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 01 2026 03:57:55 mail maldet(3793): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jul 01 2026 04:13:39 mail maldet(3793): {scan} file list completed in 944s, found 2617 files... Jul 01 2026 04:13:39 mail maldet(3793): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jul 01 2026 04:13:39 mail maldet(3793): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2617 files) in progress... Jul 01 2026 04:19:40 mail maldet(3793): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2617, malware hits 0, cleaned hits 0, time 1306s Jul 01 2026 04:19:40 mail maldet(3793): {scan} scan report saved, to view run: maldet --report 260701-0357.3793 Jul 02 2026 03:41:47 mail maldet(9584): {update} checking for available updates... Jul 02 2026 03:41:48 mail maldet(9584): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 02 2026 03:41:48 mail maldet(9584): {update} hashing install files and checking against server... Jul 02 2026 03:41:48 mail maldet(9584): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 02 2026 03:41:48 mail maldet(9584): {update} latest version already installed. Jul 02 2026 03:41:49 mail maldet(10471): {sigup} performing signature update check... Jul 02 2026 03:41:49 mail maldet(10471): {sigup} local signature set is version 2026052490478 Jul 02 2026 03:41:49 mail maldet(10471): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 02 2026 03:41:49 mail maldet(10471): {sigup} latest signature set already installed Jul 02 2026 03:41:50 mail maldet(11356): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 02 2026 03:41:51 mail maldet(11356): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jul 02 2026 03:41:51 mail maldet(11356): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 02 2026 03:41:51 mail maldet(11356): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 02 2026 03:41:51 mail maldet(11356): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jul 02 2026 03:49:27 mail maldet(11356): {scan} file list completed in 456s, found 3481 files... Jul 02 2026 03:49:27 mail maldet(11356): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jul 02 2026 03:49:27 mail maldet(11356): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (3481 files) in progress... Jul 02 2026 03:53:56 mail maldet(11356): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 3481, malware hits 0, cleaned hits 0, time 726s Jul 02 2026 03:53:56 mail maldet(11356): {scan} scan report saved, to view run: maldet --report 260702-0341.11356 Jul 03 2026 03:20:36 mail maldet(2311): {update} checking for available updates... Jul 03 2026 03:20:37 mail maldet(2311): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 03 2026 03:20:37 mail maldet(2311): {update} hashing install files and checking against server... Jul 03 2026 03:20:37 mail maldet(2311): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 03 2026 03:20:37 mail maldet(2311): {update} latest version already installed. Jul 03 2026 03:20:38 mail maldet(3253): {sigup} performing signature update check... Jul 03 2026 03:20:38 mail maldet(3253): {sigup} local signature set is version 2026052490478 Jul 03 2026 03:20:38 mail maldet(3253): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 03 2026 03:20:38 mail maldet(3253): {sigup} latest signature set already installed Jul 03 2026 03:20:39 mail maldet(4137): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 03 2026 03:20:40 mail maldet(4137): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jul 03 2026 03:20:40 mail maldet(4137): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 03 2026 03:20:40 mail maldet(4137): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 03 2026 03:20:40 mail maldet(4137): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jul 03 2026 03:24:50 mail maldet(4137): {scan} file list completed in 250s, found 7797 files... Jul 03 2026 03:24:50 mail maldet(4137): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jul 03 2026 03:24:50 mail maldet(4137): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (7797 files) in progress... Jul 03 2026 03:33:03 mail maldet(4137): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 7797, malware hits 0, cleaned hits 0, time 744s Jul 03 2026 03:33:03 mail maldet(4137): {scan} scan report saved, to view run: maldet --report 260703-0320.4137 Jul 04 2026 03:31:54 mail maldet(27004): {update} checking for available updates... Jul 04 2026 03:31:54 mail maldet(27004): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 04 2026 03:31:54 mail maldet(27004): {update} hashing install files and checking against server... Jul 04 2026 03:31:54 mail maldet(27004): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 04 2026 03:31:54 mail maldet(27004): {update} latest version already installed. Jul 04 2026 03:31:55 mail maldet(27853): {sigup} performing signature update check... Jul 04 2026 03:31:55 mail maldet(27853): {sigup} local signature set is version 2026052490478 Jul 04 2026 03:31:55 mail maldet(27853): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 04 2026 03:31:55 mail maldet(27853): {sigup} latest signature set already installed Jul 04 2026 03:31:56 mail maldet(28680): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 04 2026 03:31:57 mail maldet(28680): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jul 04 2026 03:31:57 mail maldet(28680): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 04 2026 03:31:57 mail maldet(28680): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 04 2026 03:31:57 mail maldet(28680): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jul 04 2026 03:39:58 mail maldet(28680): {scan} file list completed in 481s, found 3192 files... Jul 04 2026 03:39:58 mail maldet(28680): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jul 04 2026 03:39:58 mail maldet(28680): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (3192 files) in progress... Jul 04 2026 03:48:19 mail maldet(28680): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 3192, malware hits 0, cleaned hits 0, time 983s Jul 04 2026 03:48:19 mail maldet(28680): {scan} scan report saved, to view run: maldet --report 260704-0331.28680 Jul 05 2026 03:25:29 mail maldet(13962): {update} checking for available updates... Jul 05 2026 03:25:29 mail maldet(13962): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 05 2026 03:25:29 mail maldet(13962): {update} hashing install files and checking against server... Jul 05 2026 03:25:29 mail maldet(13962): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 05 2026 03:25:29 mail maldet(13962): {update} latest version already installed. Jul 05 2026 03:25:30 mail maldet(14837): {sigup} performing signature update check... Jul 05 2026 03:25:30 mail maldet(14837): {sigup} local signature set is version 2026052490478 Jul 05 2026 03:25:31 mail maldet(14837): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 05 2026 03:25:31 mail maldet(14837): {sigup} latest signature set already installed Jul 05 2026 03:25:31 mail maldet(15750): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 05 2026 03:25:33 mail maldet(15750): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jul 05 2026 03:25:33 mail maldet(15750): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 05 2026 03:25:33 mail maldet(15750): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 05 2026 03:25:33 mail maldet(15750): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jul 05 2026 03:32:50 mail maldet(15750): {scan} file list completed in 437s, found 1688 files... Jul 05 2026 03:32:50 mail maldet(15750): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jul 05 2026 03:32:50 mail maldet(15750): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1688 files) in progress... Jul 05 2026 03:39:35 mail maldet(15750): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1688, malware hits 0, cleaned hits 0, time 844s Jul 05 2026 03:39:35 mail maldet(15750): {scan} scan report saved, to view run: maldet --report 260705-0325.15750 Jul 06 2026 04:07:45 mail maldet(9805): {update} checking for available updates... Jul 06 2026 04:07:45 mail maldet(9805): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 06 2026 04:07:45 mail maldet(9805): {update} hashing install files and checking against server... Jul 06 2026 04:07:46 mail maldet(9805): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 06 2026 04:07:46 mail maldet(9805): {update} latest version already installed. Jul 06 2026 04:07:46 mail maldet(10672): {sigup} performing signature update check... Jul 06 2026 04:07:46 mail maldet(10672): {sigup} local signature set is version 2026052490478 Jul 06 2026 04:07:46 mail maldet(10672): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 06 2026 04:07:47 mail maldet(10672): {sigup} latest signature set already installed Jul 06 2026 04:07:47 mail maldet(11522): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 06 2026 04:07:48 mail maldet(11522): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jul 06 2026 04:07:48 mail maldet(11522): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 06 2026 04:07:48 mail maldet(11522): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 06 2026 04:07:48 mail maldet(11522): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jul 06 2026 04:16:06 mail maldet(11522): {scan} file list completed in 498s, found 2228 files... Jul 06 2026 04:16:06 mail maldet(11522): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jul 06 2026 04:16:06 mail maldet(11522): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2228 files) in progress... Jul 06 2026 04:22:53 mail maldet(11522): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2228, malware hits 0, cleaned hits 0, time 906s Jul 06 2026 04:22:53 mail maldet(11522): {scan} scan report saved, to view run: maldet --report 260706-0407.11522 Jul 07 2026 03:34:40 mail maldet(3500): {update} checking for available updates... Jul 07 2026 03:34:40 mail maldet(3500): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 07 2026 03:34:40 mail maldet(3500): {update} hashing install files and checking against server... Jul 07 2026 03:34:41 mail maldet(3500): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 07 2026 03:34:41 mail maldet(3500): {update} latest version already installed. Jul 07 2026 03:34:41 mail maldet(4372): {sigup} performing signature update check... Jul 07 2026 03:34:41 mail maldet(4372): {sigup} local signature set is version 2026052490478 Jul 07 2026 03:34:42 mail maldet(4372): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 07 2026 03:34:42 mail maldet(4372): {sigup} latest signature set already installed Jul 07 2026 03:34:42 mail maldet(5223): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 07 2026 03:34:44 mail maldet(5223): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jul 07 2026 03:34:44 mail maldet(5223): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 07 2026 03:34:44 mail maldet(5223): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 07 2026 03:34:44 mail maldet(5223): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jul 07 2026 03:41:25 mail maldet(5223): {scan} file list completed in 401s, found 3391 files... Jul 07 2026 03:41:25 mail maldet(5223): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jul 07 2026 03:41:25 mail maldet(5223): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (3391 files) in progress... Jul 07 2026 03:49:56 mail maldet(5223): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 3391, malware hits 0, cleaned hits 0, time 914s Jul 07 2026 03:49:56 mail maldet(5223): {scan} scan report saved, to view run: maldet --report 260707-0334.5223 Jul 08 2026 03:40:42 mail maldet(28535): {update} checking for available updates... Jul 08 2026 03:40:42 mail maldet(28535): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 08 2026 03:40:42 mail maldet(28535): {update} hashing install files and checking against server... Jul 08 2026 03:40:42 mail maldet(28535): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 08 2026 03:40:42 mail maldet(28535): {update} latest version already installed. Jul 08 2026 03:40:43 mail maldet(29429): {sigup} performing signature update check... Jul 08 2026 03:40:43 mail maldet(29429): {sigup} local signature set is version 2026052490478 Jul 08 2026 03:40:43 mail maldet(29429): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 08 2026 03:40:44 mail maldet(29429): {sigup} latest signature set already installed Jul 08 2026 03:40:44 mail maldet(30297): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 08 2026 03:40:46 mail maldet(30297): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jul 08 2026 03:40:46 mail maldet(30297): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 08 2026 03:40:46 mail maldet(30297): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 08 2026 03:40:46 mail maldet(30297): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jul 08 2026 03:57:05 mail maldet(30297): {scan} file list completed in 979s, found 4981 files... Jul 08 2026 03:57:05 mail maldet(30297): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jul 08 2026 03:57:05 mail maldet(30297): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (4981 files) in progress... Jul 08 2026 04:06:39 mail maldet(30297): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 4981, malware hits 0, cleaned hits 0, time 1555s Jul 08 2026 04:06:39 mail maldet(30297): {scan} scan report saved, to view run: maldet --report 260708-0340.30297 Jul 09 2026 03:40:03 mail maldet(14645): {update} checking for available updates... Jul 09 2026 03:40:03 mail maldet(14645): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 09 2026 03:40:03 mail maldet(14645): {update} hashing install files and checking against server... Jul 09 2026 03:40:03 mail maldet(14645): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 09 2026 03:40:03 mail maldet(14645): {update} latest version already installed. Jul 09 2026 03:40:04 mail maldet(15613): {sigup} performing signature update check... Jul 09 2026 03:40:04 mail maldet(15613): {sigup} local signature set is version 2026052490478 Jul 09 2026 03:40:04 mail maldet(15613): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 09 2026 03:40:05 mail maldet(15613): {sigup} latest signature set already installed Jul 09 2026 03:40:05 mail maldet(16595): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 09 2026 03:40:06 mail maldet(16595): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jul 09 2026 03:40:06 mail maldet(16595): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 09 2026 03:40:06 mail maldet(16595): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 09 2026 03:40:06 mail maldet(16595): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jul 09 2026 03:48:42 mail maldet(16595): {scan} file list completed in 516s, found 3705 files... Jul 09 2026 03:48:42 mail maldet(16595): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jul 09 2026 03:48:42 mail maldet(16595): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (3705 files) in progress... Jul 09 2026 03:54:47 mail maldet(16595): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 3705, malware hits 0, cleaned hits 0, time 882s Jul 09 2026 03:54:47 mail maldet(16595): {scan} scan report saved, to view run: maldet --report 260709-0340.16595 Jul 10 2026 03:47:45 mail maldet(22069): {update} checking for available updates... Jul 10 2026 03:47:45 mail maldet(22069): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 10 2026 03:47:45 mail maldet(22069): {update} hashing install files and checking against server... Jul 10 2026 03:47:45 mail maldet(22069): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 10 2026 03:47:45 mail maldet(22069): {update} latest version already installed. Jul 10 2026 03:47:46 mail maldet(22953): {sigup} performing signature update check... Jul 10 2026 03:47:46 mail maldet(22953): {sigup} local signature set is version 2026052490478 Jul 10 2026 03:47:46 mail maldet(22953): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 10 2026 03:47:47 mail maldet(22953): {sigup} latest signature set already installed Jul 10 2026 03:47:47 mail maldet(23825): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 10 2026 03:47:48 mail maldet(23825): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jul 10 2026 03:47:48 mail maldet(23825): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 10 2026 03:47:48 mail maldet(23825): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 10 2026 03:47:48 mail maldet(23825): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jul 10 2026 03:53:12 mail maldet(23825): {scan} file list completed in 324s, found 6489 files... Jul 10 2026 03:53:12 mail maldet(23825): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jul 10 2026 03:53:12 mail maldet(23825): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (6489 files) in progress... Jul 10 2026 04:03:43 mail maldet(23825): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 6489, malware hits 0, cleaned hits 0, time 956s Jul 10 2026 04:03:43 mail maldet(23825): {scan} scan report saved, to view run: maldet --report 260710-0347.23825 Jul 11 2026 03:16:39 mail maldet(6361): {update} checking for available updates... Jul 11 2026 03:16:40 mail maldet(6361): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 11 2026 03:16:40 mail maldet(6361): {update} hashing install files and checking against server... Jul 11 2026 03:16:40 mail maldet(6361): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 11 2026 03:16:40 mail maldet(6361): {update} latest version already installed. Jul 11 2026 03:16:41 mail maldet(7226): {sigup} performing signature update check... Jul 11 2026 03:16:41 mail maldet(7226): {sigup} local signature set is version 2026052490478 Jul 11 2026 03:16:41 mail maldet(7226): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 11 2026 03:16:41 mail maldet(7226): {sigup} latest signature set already installed Jul 11 2026 03:16:42 mail maldet(8100): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 11 2026 03:16:43 mail maldet(8100): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jul 11 2026 03:16:43 mail maldet(8100): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 11 2026 03:16:43 mail maldet(8100): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 11 2026 03:16:43 mail maldet(8100): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jul 11 2026 03:38:45 mail maldet(8100): {scan} file list completed in 1321s, found 2837 files... Jul 11 2026 03:38:45 mail maldet(8100): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jul 11 2026 03:38:45 mail maldet(8100): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2837 files) in progress... Jul 11 2026 03:43:58 mail maldet(8100): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2837, malware hits 0, cleaned hits 0, time 1636s Jul 11 2026 03:43:58 mail maldet(8100): {scan} scan report saved, to view run: maldet --report 260711-0316.8100 Jul 12 2026 03:35:50 mail maldet(997): {update} checking for available updates... Jul 12 2026 03:35:50 mail maldet(997): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 12 2026 03:35:50 mail maldet(997): {update} hashing install files and checking against server... Jul 12 2026 03:35:51 mail maldet(997): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 12 2026 03:35:51 mail maldet(997): {update} latest version already installed. Jul 12 2026 03:35:51 mail maldet(1929): {sigup} performing signature update check... Jul 12 2026 03:35:51 mail maldet(1929): {sigup} local signature set is version 2026052490478 Jul 12 2026 03:35:52 mail maldet(1929): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 12 2026 03:35:52 mail maldet(1929): {sigup} latest signature set already installed Jul 12 2026 03:35:52 mail maldet(2762): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 12 2026 03:35:53 mail maldet(2762): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jul 12 2026 03:35:53 mail maldet(2762): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 12 2026 03:35:53 mail maldet(2762): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 12 2026 03:35:53 mail maldet(2762): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jul 12 2026 03:47:10 mail maldet(2762): {scan} file list completed in 677s, found 51197 files... Jul 12 2026 03:47:10 mail maldet(2762): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jul 12 2026 03:47:10 mail maldet(2762): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (51197 files) in progress... Jul 12 2026 04:25:19 mail maldet(2762): {quar} fatal error handling '/home/ross/public_html/planetline--it/-scambio/databases/01_04_2026_00' Jul 12 2026 04:25:19 mail maldet(2762): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 51197, malware hits 0, cleaned hits 0, time 2967s Jul 12 2026 04:25:19 mail maldet(2762): {scan} scan report saved, to view run: maldet --report 260712-0335.2762 Jul 13 2026 03:31:53 mail maldet(29981): {update} checking for available updates... Jul 13 2026 03:31:53 mail maldet(29981): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 13 2026 03:31:53 mail maldet(29981): {update} hashing install files and checking against server... Jul 13 2026 03:31:53 mail maldet(29981): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 13 2026 03:31:53 mail maldet(29981): {update} latest version already installed. Jul 13 2026 03:31:54 mail maldet(30863): {sigup} performing signature update check... Jul 13 2026 03:31:54 mail maldet(30863): {sigup} local signature set is version 2026052490478 Jul 13 2026 03:31:54 mail maldet(30863): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 13 2026 03:31:55 mail maldet(30863): {sigup} latest signature set already installed Jul 13 2026 03:31:55 mail maldet(31763): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 13 2026 03:31:58 mail maldet(31763): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jul 13 2026 03:31:58 mail maldet(31763): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 13 2026 03:31:58 mail maldet(31763): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 13 2026 03:31:58 mail maldet(31763): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jul 13 2026 03:44:40 mail maldet(31763): {scan} file list completed in 762s, found 742 files... Jul 13 2026 03:44:40 mail maldet(31763): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jul 13 2026 03:44:40 mail maldet(31763): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (742 files) in progress... Jul 13 2026 03:50:32 mail maldet(31763): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 742, malware hits 0, cleaned hits 0, time 1117s Jul 13 2026 03:50:32 mail maldet(31763): {scan} scan report saved, to view run: maldet --report 260713-0331.31763 Jul 14 2026 03:52:15 mail maldet(20073): {update} checking for available updates... Jul 14 2026 03:52:15 mail maldet(20073): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 14 2026 03:52:15 mail maldet(20073): {update} hashing install files and checking against server... Jul 14 2026 03:52:16 mail maldet(20073): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 14 2026 03:52:16 mail maldet(20073): {update} latest version already installed. Jul 14 2026 03:52:16 mail maldet(20920): {sigup} performing signature update check... Jul 14 2026 03:52:16 mail maldet(20920): {sigup} local signature set is version 2026052490478 Jul 14 2026 03:52:16 mail maldet(20920): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 14 2026 03:52:17 mail maldet(20920): {sigup} latest signature set already installed Jul 14 2026 03:52:17 mail maldet(21759): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 14 2026 03:52:18 mail maldet(21759): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jul 14 2026 03:52:18 mail maldet(21759): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 14 2026 03:52:18 mail maldet(21759): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 14 2026 03:52:18 mail maldet(21759): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jul 14 2026 03:59:11 mail maldet(21759): {scan} file list completed in 413s, found 2105 files... Jul 14 2026 03:59:11 mail maldet(21759): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jul 14 2026 03:59:11 mail maldet(21759): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2105 files) in progress... Jul 14 2026 04:07:43 mail maldet(21759): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2105, malware hits 0, cleaned hits 0, time 926s Jul 14 2026 04:07:43 mail maldet(21759): {scan} scan report saved, to view run: maldet --report 260714-0352.21759 Jul 15 2026 03:30:02 mail maldet(22598): {update} checking for available updates... Jul 15 2026 03:30:03 mail maldet(22598): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 15 2026 03:30:03 mail maldet(22598): {update} hashing install files and checking against server... Jul 15 2026 03:30:03 mail maldet(22598): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 15 2026 03:30:03 mail maldet(22598): {update} latest version already installed. Jul 15 2026 03:30:03 mail maldet(23735): {sigup} performing signature update check... Jul 15 2026 03:30:04 mail maldet(23735): {sigup} local signature set is version 2026052490478 Jul 15 2026 03:30:04 mail maldet(23735): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 15 2026 03:30:05 mail maldet(23735): {sigup} latest signature set already installed Jul 15 2026 03:30:05 mail maldet(24592): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 15 2026 03:30:11 mail maldet(24592): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jul 15 2026 03:30:11 mail maldet(24592): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 15 2026 03:30:11 mail maldet(24592): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 15 2026 03:30:11 mail maldet(24592): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jul 15 2026 03:51:04 mail maldet(24592): {scan} file list completed in 1253s, found 1682 files... Jul 15 2026 03:51:04 mail maldet(24592): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jul 15 2026 03:51:04 mail maldet(24592): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1682 files) in progress... Jul 15 2026 03:58:16 mail maldet(24592): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1682, malware hits 0, cleaned hits 0, time 1690s Jul 15 2026 03:58:16 mail maldet(24592): {scan} scan report saved, to view run: maldet --report 260715-0330.24592 Jul 16 2026 03:50:30 mail maldet(30149): {update} checking for available updates... Jul 16 2026 03:50:30 mail maldet(30149): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 16 2026 03:50:30 mail maldet(30149): {update} hashing install files and checking against server... Jul 16 2026 03:50:31 mail maldet(30149): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 16 2026 03:50:31 mail maldet(30149): {update} latest version already installed. Jul 16 2026 03:50:31 mail maldet(31000): {sigup} performing signature update check... Jul 16 2026 03:50:31 mail maldet(31000): {sigup} local signature set is version 2026052490478 Jul 16 2026 03:50:31 mail maldet(31000): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 16 2026 03:50:32 mail maldet(31000): {sigup} latest signature set already installed Jul 16 2026 03:50:32 mail maldet(31796): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 16 2026 03:50:33 mail maldet(31796): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jul 16 2026 03:50:33 mail maldet(31796): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 16 2026 03:50:33 mail maldet(31796): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 16 2026 03:50:33 mail maldet(31796): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jul 16 2026 03:58:07 mail maldet(31796): {scan} file list completed in 454s, found 1453 files... Jul 16 2026 03:58:07 mail maldet(31796): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jul 16 2026 03:58:07 mail maldet(31796): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1453 files) in progress... Jul 16 2026 04:03:37 mail maldet(31796): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1453, malware hits 0, cleaned hits 0, time 785s Jul 16 2026 04:03:37 mail maldet(31796): {scan} scan report saved, to view run: maldet --report 260716-0350.31796 Jul 17 2026 03:33:13 mail maldet(17808): {update} checking for available updates... Jul 17 2026 03:33:14 mail maldet(17808): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 17 2026 03:33:14 mail maldet(17808): {update} hashing install files and checking against server... Jul 17 2026 03:33:14 mail maldet(17808): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 17 2026 03:33:14 mail maldet(17808): {update} latest version already installed. Jul 17 2026 03:33:15 mail maldet(18653): {sigup} performing signature update check... Jul 17 2026 03:33:15 mail maldet(18653): {sigup} local signature set is version 2026052490478 Jul 17 2026 03:33:15 mail maldet(18653): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 17 2026 03:33:15 mail maldet(18653): {sigup} latest signature set already installed Jul 17 2026 03:33:16 mail maldet(19480): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 17 2026 03:33:18 mail maldet(19480): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jul 17 2026 03:33:18 mail maldet(19480): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 17 2026 03:33:18 mail maldet(19480): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 17 2026 03:33:18 mail maldet(19480): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jul 17 2026 03:42:40 mail maldet(19480): {scan} file list completed in 562s, found 8620 files... Jul 17 2026 03:42:40 mail maldet(19480): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jul 17 2026 03:42:40 mail maldet(19480): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (8620 files) in progress... Jul 17 2026 03:53:04 mail maldet(19480): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 8620, malware hits 0, cleaned hits 0, time 1188s Jul 17 2026 03:53:04 mail maldet(19480): {scan} scan report saved, to view run: maldet --report 260717-0333.19480 Jul 18 2026 03:23:01 mail maldet(30829): {update} checking for available updates... Jul 18 2026 03:23:01 mail maldet(30829): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 18 2026 03:23:01 mail maldet(30829): {update} hashing install files and checking against server... Jul 18 2026 03:23:02 mail maldet(30829): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 18 2026 03:23:02 mail maldet(30829): {update} latest version already installed. Jul 18 2026 03:23:02 mail maldet(31741): {sigup} performing signature update check... Jul 18 2026 03:23:02 mail maldet(31741): {sigup} local signature set is version 2026052490478 Jul 18 2026 03:23:03 mail maldet(31741): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 18 2026 03:23:03 mail maldet(31741): {sigup} latest signature set already installed Jul 18 2026 03:23:03 mail maldet(32599): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 18 2026 03:23:05 mail maldet(32599): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jul 18 2026 03:23:05 mail maldet(32599): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 18 2026 03:23:05 mail maldet(32599): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 18 2026 03:23:05 mail maldet(32599): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jul 18 2026 03:32:37 mail maldet(32599): {scan} file list completed in 572s, found 3040 files... Jul 18 2026 03:32:37 mail maldet(32599): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jul 18 2026 03:32:37 mail maldet(32599): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (3040 files) in progress... Jul 18 2026 03:38:51 mail maldet(32599): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 3040, malware hits 0, cleaned hits 0, time 948s Jul 18 2026 03:38:51 mail maldet(32599): {scan} scan report saved, to view run: maldet --report 260718-0323.32599 Jul 19 2026 03:52:28 mail maldet(7332): {update} checking for available updates... Jul 19 2026 03:52:28 mail maldet(7332): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 19 2026 03:52:28 mail maldet(7332): {update} hashing install files and checking against server... Jul 19 2026 03:52:28 mail maldet(7332): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 19 2026 03:52:28 mail maldet(7332): {update} latest version already installed. Jul 19 2026 03:52:29 mail maldet(8176): {sigup} performing signature update check... Jul 19 2026 03:52:29 mail maldet(8176): {sigup} local signature set is version 2026052490478 Jul 19 2026 03:52:29 mail maldet(8176): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 19 2026 03:52:30 mail maldet(8176): {sigup} latest signature set already installed Jul 19 2026 03:52:30 mail maldet(8993): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 19 2026 03:52:32 mail maldet(8993): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jul 19 2026 03:52:32 mail maldet(8993): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 19 2026 03:52:32 mail maldet(8993): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 19 2026 03:52:32 mail maldet(8993): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jul 19 2026 04:01:32 mail maldet(8993): {scan} file list completed in 540s, found 3729 files... Jul 19 2026 04:01:32 mail maldet(8993): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jul 19 2026 04:01:32 mail maldet(8993): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (3729 files) in progress... Jul 19 2026 04:10:58 mail maldet(8993): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 3729, malware hits 0, cleaned hits 0, time 1108s Jul 19 2026 04:10:58 mail maldet(8993): {scan} scan report saved, to view run: maldet --report 260719-0352.8993 Jul 20 2026 03:38:23 mail maldet(23425): {update} checking for available updates... Jul 20 2026 03:38:23 mail maldet(23425): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 20 2026 03:38:23 mail maldet(23425): {update} hashing install files and checking against server... Jul 20 2026 03:38:23 mail maldet(23425): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 20 2026 03:38:23 mail maldet(23425): {update} latest version already installed. Jul 20 2026 03:38:24 mail maldet(24291): {sigup} performing signature update check... Jul 20 2026 03:38:24 mail maldet(24291): {sigup} local signature set is version 2026052490478 Jul 20 2026 03:38:24 mail maldet(24291): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 20 2026 03:38:24 mail maldet(24291): {sigup} latest signature set already installed Jul 20 2026 03:38:25 mail maldet(25120): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 20 2026 03:38:28 mail maldet(25120): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jul 20 2026 03:38:28 mail maldet(25120): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 20 2026 03:38:28 mail maldet(25120): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 20 2026 03:38:28 mail maldet(25120): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jul 20 2026 03:51:37 mail maldet(25120): {scan} file list completed in 789s, found 821 files... Jul 20 2026 03:51:37 mail maldet(25120): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jul 20 2026 03:51:37 mail maldet(25120): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (821 files) in progress... Jul 20 2026 03:57:11 mail maldet(25120): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 821, malware hits 0, cleaned hits 0, time 1126s Jul 20 2026 03:57:11 mail maldet(25120): {scan} scan report saved, to view run: maldet --report 260720-0338.25120 Jul 21 2026 03:33:43 mail maldet(5957): {update} checking for available updates... Jul 21 2026 03:33:43 mail maldet(5957): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 21 2026 03:33:43 mail maldet(5957): {update} hashing install files and checking against server... Jul 21 2026 03:33:44 mail maldet(5957): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 21 2026 03:33:44 mail maldet(5957): {update} latest version already installed. Jul 21 2026 03:33:44 mail maldet(6838): {sigup} performing signature update check... Jul 21 2026 03:33:44 mail maldet(6838): {sigup} local signature set is version 2026052490478 Jul 21 2026 03:33:44 mail maldet(6838): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 21 2026 03:33:45 mail maldet(6838): {sigup} latest signature set already installed Jul 21 2026 03:33:45 mail maldet(7676): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 21 2026 03:33:46 mail maldet(7676): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jul 21 2026 03:33:46 mail maldet(7676): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 21 2026 03:33:46 mail maldet(7676): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 21 2026 03:33:46 mail maldet(7676): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jul 21 2026 03:38:39 mail maldet(7676): {scan} file list completed in 293s, found 2047 files... Jul 21 2026 03:38:39 mail maldet(7676): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jul 21 2026 03:38:39 mail maldet(7676): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2047 files) in progress... Jul 21 2026 03:42:53 mail maldet(7676): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2047, malware hits 0, cleaned hits 0, time 547s Jul 21 2026 03:42:53 mail maldet(7676): {scan} scan report saved, to view run: maldet --report 260721-0333.7676 Jul 22 2026 03:43:27 mail maldet(14221): {update} checking for available updates... Jul 22 2026 03:43:28 mail maldet(14221): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 22 2026 03:43:28 mail maldet(14221): {update} hashing install files and checking against server... Jul 22 2026 03:43:28 mail maldet(14221): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 22 2026 03:43:28 mail maldet(14221): {update} latest version already installed. Jul 22 2026 03:43:29 mail maldet(15124): {sigup} performing signature update check... Jul 22 2026 03:43:29 mail maldet(15124): {sigup} local signature set is version 2026052490478 Jul 22 2026 03:43:29 mail maldet(15124): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 22 2026 03:43:29 mail maldet(15124): {sigup} latest signature set already installed Jul 22 2026 03:43:30 mail maldet(16070): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 22 2026 03:43:33 mail maldet(16070): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jul 22 2026 03:43:33 mail maldet(16070): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 22 2026 03:43:33 mail maldet(16070): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 22 2026 03:43:33 mail maldet(16070): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jul 22 2026 03:57:54 mail maldet(16070): {scan} file list completed in 861s, found 7115 files... Jul 22 2026 03:57:54 mail maldet(16070): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jul 22 2026 03:57:54 mail maldet(16070): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (7115 files) in progress... Jul 22 2026 04:15:51 mail maldet(16070): {hit} malware hit {HEX}php.defash.buno.458 found for /home/tecnoht/public_html/termozerba--com/wp-content/plugins/beawfmq/log.db Jul 22 2026 04:15:51 mail maldet(16070): {quar} malware quarantined from '/home/tecnoht/public_html/termozerba--com/wp-content/plugins/beawfmq/log.db' to '/usr/local/maldetect/quarantine/log.db.124832819' Jul 22 2026 04:15:51 mail maldet(16070): {clean} could not find clean rule for hit php.defash.buno or file /usr/local/maldetect/quarantine/log.db.124832819 no longer exists. Jul 22 2026 04:15:51 mail maldet(16070): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 7115, malware hits 1, cleaned hits 0, time 1941s Jul 22 2026 04:15:51 mail maldet(16070): {scan} scan report saved, to view run: maldet --report 260722-0343.16070 Jul 23 2026 04:00:17 mail maldet(2569): {update} checking for available updates... Jul 23 2026 04:00:17 mail maldet(2569): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 23 2026 04:00:17 mail maldet(2569): {update} hashing install files and checking against server... Jul 23 2026 04:00:18 mail maldet(2569): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 23 2026 04:00:18 mail maldet(2569): {update} latest version already installed. Jul 23 2026 04:00:18 mail maldet(3448): {sigup} performing signature update check... Jul 23 2026 04:00:18 mail maldet(3448): {sigup} local signature set is version 2026052490478 Jul 23 2026 04:00:18 mail maldet(3448): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 23 2026 04:00:19 mail maldet(3448): {sigup} latest signature set already installed Jul 23 2026 04:00:19 mail maldet(4305): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 23 2026 04:00:20 mail maldet(4305): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jul 23 2026 04:00:20 mail maldet(4305): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 23 2026 04:00:20 mail maldet(4305): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 23 2026 04:00:20 mail maldet(4305): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jul 23 2026 04:09:13 mail maldet(4305): {scan} file list completed in 533s, found 3486 files... Jul 23 2026 04:09:13 mail maldet(4305): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jul 23 2026 04:09:13 mail maldet(4305): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (3486 files) in progress... Jul 23 2026 04:14:40 mail maldet(4305): {hit} malware hit {HEX}php.inject.generic.565 found for /home/tecnoht/public_html/termozerba--com/detail.php Jul 23 2026 04:14:40 mail maldet(4305): {quar} malware quarantined from '/home/tecnoht/public_html/termozerba--com/detail.php' to '/usr/local/maldetect/quarantine/detail.php.1011624085' Jul 23 2026 04:14:40 mail maldet(4305): {clean} could not find clean rule for hit php.inject.generic or file /usr/local/maldetect/quarantine/detail.php.1011624085 no longer exists. Jul 23 2026 04:14:40 mail maldet(4305): {hit} malware hit {HEX}php.inject.generic.565 found for /home/tecnoht/public_html/termozerba--com/products.php Jul 23 2026 04:14:40 mail maldet(4305): {quar} malware quarantined from '/home/tecnoht/public_html/termozerba--com/products.php' to '/usr/local/maldetect/quarantine/products.php.14673288' Jul 23 2026 04:14:40 mail maldet(4305): {clean} could not find clean rule for hit php.inject.generic or file /usr/local/maldetect/quarantine/products.php.14673288 no longer exists. Jul 23 2026 04:14:40 mail maldet(4305): {hit} malware hit {HEX}php.inject.generic.565 found for /home/tecnoht/public_html/termozerba--com/index.php Jul 23 2026 04:14:40 mail maldet(4305): {quar} malware quarantined from '/home/tecnoht/public_html/termozerba--com/index.php' to '/usr/local/maldetect/quarantine/index.php.280983112' Jul 23 2026 04:14:40 mail maldet(4305): {clean} could not find clean rule for hit php.inject.generic or file /usr/local/maldetect/quarantine/index.php.280983112 no longer exists. Jul 23 2026 04:14:40 mail maldet(4305): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 3486, malware hits 3, cleaned hits 0, time 861s Jul 23 2026 04:14:40 mail maldet(4305): {scan} scan report saved, to view run: maldet --report 260723-0400.4305 Jul 24 2026 03:31:26 mail maldet(32517): {update} checking for available updates... Jul 24 2026 03:31:27 mail maldet(32517): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 24 2026 03:31:27 mail maldet(32517): {update} hashing install files and checking against server... Jul 24 2026 03:31:27 mail maldet(32517): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 24 2026 03:31:27 mail maldet(32517): {update} latest version already installed. Jul 24 2026 03:31:28 mail maldet(951): {sigup} performing signature update check... Jul 24 2026 03:31:28 mail maldet(951): {sigup} local signature set is version 2026052490478 Jul 24 2026 03:31:28 mail maldet(951): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 24 2026 03:31:29 mail maldet(951): {sigup} latest signature set already installed Jul 24 2026 03:31:29 mail maldet(1825): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 24 2026 03:31:30 mail maldet(1825): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jul 24 2026 03:31:30 mail maldet(1825): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 24 2026 03:31:30 mail maldet(1825): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 24 2026 03:31:30 mail maldet(1825): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jul 24 2026 03:35:44 mail maldet(1825): {scan} file list completed in 254s, found 8533 files... Jul 24 2026 03:35:44 mail maldet(1825): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jul 24 2026 03:35:44 mail maldet(1825): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (8533 files) in progress... Jul 24 2026 03:45:42 mail maldet(1825): {hit} malware hit {CAV}Win.Trojan.Hide-1 found for /home/lufficio/public_html/igcstrutture--it/wp-content/estensioni_mappate/wp2p_4fe66c65/2b0a0134289d.php Jul 24 2026 03:45:42 mail maldet(1825): {quar} malware quarantined from '/home/lufficio/public_html/igcstrutture--it/wp-content/estensioni_mappate/wp2p_4fe66c65/2b0a0134289d.php' to '/usr/local/maldetect/quarantine/2b0a0134289d.php.1638513657' Jul 24 2026 03:45:42 mail maldet(1825): {clean} could not find clean rule for hit Win.Trojan.Hide-1 or file /usr/local/maldetect/quarantine/2b0a0134289d.php.1638513657 no longer exists. Jul 24 2026 03:45:42 mail maldet(1825): {hit} malware hit {YARA}VOLEXITY_Susp_Php_Call_User_Func found for /home/lufficio/public_html/igcstrutture--it/wp-content/estensioni_mappate/advanced-code-manager/bxdidi.gz Jul 24 2026 03:45:42 mail maldet(1825): {quar} malware quarantined from '/home/lufficio/public_html/igcstrutture--it/wp-content/estensioni_mappate/advanced-code-manager/bxdidi.gz' to '/usr/local/maldetect/quarantine/bxdidi.gz.972824643' Jul 24 2026 03:45:42 mail maldet(1825): {clean} could not find clean rule for hit VOLEXITY_Susp_Php_Call_User_Func or file /usr/local/maldetect/quarantine/bxdidi.gz.972824643 no longer exists. Jul 24 2026 03:45:42 mail maldet(1825): {hit} malware hit {HEX}php.inject.generic.565 found for /home/tecnoht/public_html/termozerba--com/wp-content/admin.php Jul 24 2026 03:45:42 mail maldet(1825): {quar} malware quarantined from '/home/tecnoht/public_html/termozerba--com/wp-content/admin.php' to '/usr/local/maldetect/quarantine/admin.php.288927172' Jul 24 2026 03:45:42 mail maldet(1825): {clean} could not find clean rule for hit php.inject.generic or file /usr/local/maldetect/quarantine/admin.php.288927172 no longer exists. Jul 24 2026 03:45:42 mail maldet(1825): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 8533, malware hits 3, cleaned hits 0, time 853s Jul 24 2026 03:45:42 mail maldet(1825): {scan} scan report saved, to view run: maldet --report 260724-0331.1825 Jul 25 2026 03:16:08 mail maldet(2007): {update} checking for available updates... Jul 25 2026 03:16:08 mail maldet(2007): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 25 2026 03:16:08 mail maldet(2007): {update} hashing install files and checking against server... Jul 25 2026 03:16:08 mail maldet(2007): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 25 2026 03:16:08 mail maldet(2007): {update} latest version already installed. Jul 25 2026 03:16:09 mail maldet(2911): {sigup} performing signature update check... Jul 25 2026 03:16:09 mail maldet(2911): {sigup} local signature set is version 2026052490478 Jul 25 2026 03:16:09 mail maldet(2911): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 25 2026 03:16:10 mail maldet(2911): {sigup} latest signature set already installed Jul 25 2026 03:16:10 mail maldet(3783): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 25 2026 03:16:12 mail maldet(3783): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jul 25 2026 03:16:12 mail maldet(3783): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 25 2026 03:16:12 mail maldet(3783): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 25 2026 03:16:12 mail maldet(3783): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jul 25 2026 03:30:51 mail maldet(3783): {scan} file list completed in 879s, found 3904 files... Jul 25 2026 03:30:51 mail maldet(3783): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jul 25 2026 03:30:51 mail maldet(3783): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (3904 files) in progress... Jul 25 2026 03:36:45 mail maldet(3783): {hit} malware hit {CAV}Win.Trojan.Hide-1 found for /home/planet/public_html/larioscorte--it/wp-content/plugins/wp2p_ab2ac78d/78e3e1475b2c.php Jul 25 2026 03:36:45 mail maldet(3783): {quar} malware quarantined from '/home/planet/public_html/larioscorte--it/wp-content/plugins/wp2p_ab2ac78d/78e3e1475b2c.php' to '/usr/local/maldetect/quarantine/78e3e1475b2c.php.1895226895' Jul 25 2026 03:36:45 mail maldet(3783): {clean} could not find clean rule for hit Win.Trojan.Hide-1 or file /usr/local/maldetect/quarantine/78e3e1475b2c.php.1895226895 no longer exists. Jul 25 2026 03:36:45 mail maldet(3783): {hit} malware hit {HEX}php.inject.generic.565 found for /home/tecnoht/public_html/termozerba--com/detail.php Jul 25 2026 03:36:45 mail maldet(3783): {quar} malware quarantined from '/home/tecnoht/public_html/termozerba--com/detail.php' to '/usr/local/maldetect/quarantine/detail.php.452129870' Jul 25 2026 03:36:45 mail maldet(3783): {clean} could not find clean rule for hit php.inject.generic or file /usr/local/maldetect/quarantine/detail.php.452129870 no longer exists. Jul 25 2026 03:36:45 mail maldet(3783): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 3904, malware hits 2, cleaned hits 0, time 1235s Jul 25 2026 03:36:45 mail maldet(3783): {scan} scan report saved, to view run: maldet --report 260725-0316.3783 Jul 26 2026 03:54:10 mail maldet(7224): {update} checking for available updates... Jul 26 2026 03:54:10 mail maldet(7224): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 26 2026 03:54:10 mail maldet(7224): {update} hashing install files and checking against server... Jul 26 2026 03:54:11 mail maldet(7224): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 26 2026 03:54:11 mail maldet(7224): {update} latest version already installed. Jul 26 2026 03:54:11 mail maldet(8070): {sigup} performing signature update check... Jul 26 2026 03:54:11 mail maldet(8070): {sigup} local signature set is version 2026052490478 Jul 26 2026 03:54:12 mail maldet(8070): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 26 2026 03:54:12 mail maldet(8070): {sigup} latest signature set already installed Jul 26 2026 03:54:12 mail maldet(8896): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 26 2026 03:54:14 mail maldet(8896): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jul 26 2026 03:54:14 mail maldet(8896): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 26 2026 03:54:14 mail maldet(8896): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 26 2026 03:54:14 mail maldet(8896): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jul 26 2026 04:01:28 mail maldet(8896): {scan} file list completed in 434s, found 64949 files... Jul 26 2026 04:01:28 mail maldet(8896): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jul 26 2026 04:01:28 mail maldet(8896): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (64949 files) in progress... Jul 26 2026 04:46:24 mail maldet(8896): {quar} fatal error handling '/home/ross/public_html/planetline--it/-scambio/databases/01_04_2026_00' Jul 26 2026 04:46:24 mail maldet(8896): {hit} malware hit {HEX}php.inject.generic.565 found for /home/tecnoht/public_html/termozerba--com/detail.php Jul 26 2026 04:46:24 mail maldet(8896): {quar} malware quarantined from '/home/tecnoht/public_html/termozerba--com/detail.php' to '/usr/local/maldetect/quarantine/detail.php.135798797' Jul 26 2026 04:46:24 mail maldet(8896): {clean} could not find clean rule for hit php.inject.generic or file /usr/local/maldetect/quarantine/detail.php.135798797 no longer exists. Jul 26 2026 04:46:24 mail maldet(8896): {hit} malware hit {HEX}php.inject.generic.565 found for /home/tecnoht/public_html/termozerba--com/products.php Jul 26 2026 04:46:24 mail maldet(8896): {quar} malware quarantined from '/home/tecnoht/public_html/termozerba--com/products.php' to '/usr/local/maldetect/quarantine/products.php.345420848' Jul 26 2026 04:46:24 mail maldet(8896): {clean} could not find clean rule for hit php.inject.generic or file /usr/local/maldetect/quarantine/products.php.345420848 no longer exists. Jul 26 2026 04:46:24 mail maldet(8896): {hit} malware hit {HEX}php.inject.generic.565 found for /home/tecnoht/public_html/termozerba--com/wp-admin/maint/xmleihhf.php Jul 26 2026 04:46:24 mail maldet(8896): {quar} malware quarantined from '/home/tecnoht/public_html/termozerba--com/wp-admin/maint/xmleihhf.php' to '/usr/local/maldetect/quarantine/xmleihhf.php.1695523239' Jul 26 2026 04:46:24 mail maldet(8896): {clean} could not find clean rule for hit php.inject.generic or file /usr/local/maldetect/quarantine/xmleihhf.php.1695523239 no longer exists. Jul 26 2026 04:46:24 mail maldet(8896): {hit} malware hit {HEX}php.inject.generic.565 found for /home/tecnoht/public_html/termozerba--com/wp-content/themes/xmleihhfaagav.php Jul 26 2026 04:46:24 mail maldet(8896): {quar} malware quarantined from '/home/tecnoht/public_html/termozerba--com/wp-content/themes/xmleihhfaagav.php' to '/usr/local/maldetect/quarantine/xmleihhfaagav.php.168065594' Jul 26 2026 04:46:24 mail maldet(8896): {clean} could not find clean rule for hit php.inject.generic or file /usr/local/maldetect/quarantine/xmleihhfaagav.php.168065594 no longer exists. Jul 26 2026 04:46:24 mail maldet(8896): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 64949, malware hits 4, cleaned hits 0, time 3132s Jul 26 2026 04:46:24 mail maldet(8896): {scan} scan report saved, to view run: maldet --report 260726-0354.8896 Jul 27 2026 03:33:41 mail maldet(6854): {update} checking for available updates... Jul 27 2026 03:33:41 mail maldet(6854): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 27 2026 03:33:41 mail maldet(6854): {update} hashing install files and checking against server... Jul 27 2026 03:33:41 mail maldet(6854): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 27 2026 03:33:41 mail maldet(6854): {update} latest version already installed. Jul 27 2026 03:33:42 mail maldet(7718): {sigup} performing signature update check... Jul 27 2026 03:33:42 mail maldet(7718): {sigup} local signature set is version 2026052490478 Jul 27 2026 03:33:42 mail maldet(7718): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 27 2026 03:33:42 mail maldet(7718): {sigup} latest signature set already installed Jul 27 2026 03:33:43 mail maldet(8561): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 27 2026 03:33:44 mail maldet(8561): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jul 27 2026 03:33:44 mail maldet(8561): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 27 2026 03:33:44 mail maldet(8561): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 27 2026 03:33:44 mail maldet(8561): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jul 27 2026 03:55:54 mail maldet(8561): {scan} file list completed in 1330s, found 784 files... Jul 27 2026 03:55:54 mail maldet(8561): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jul 27 2026 03:55:54 mail maldet(8561): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (784 files) in progress... Jul 27 2026 04:00:16 mail maldet(8561): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 784, malware hits 0, cleaned hits 0, time 1593s Jul 27 2026 04:00:16 mail maldet(8561): {scan} scan report saved, to view run: maldet --report 260727-0333.8561 Jul 28 2026 03:14:24 mail maldet(16658): {update} checking for available updates... Jul 28 2026 03:14:25 mail maldet(16658): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 28 2026 03:14:25 mail maldet(16658): {update} hashing install files and checking against server... Jul 28 2026 03:14:25 mail maldet(16658): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 28 2026 03:14:25 mail maldet(16658): {update} latest version already installed. Jul 28 2026 03:14:26 mail maldet(17526): {sigup} performing signature update check... Jul 28 2026 03:14:26 mail maldet(17526): {sigup} local signature set is version 2026052490478 Jul 28 2026 03:14:26 mail maldet(17526): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 28 2026 03:14:26 mail maldet(17526): {sigup} latest signature set already installed Jul 28 2026 03:14:27 mail maldet(18371): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 28 2026 03:14:28 mail maldet(18371): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jul 28 2026 03:14:28 mail maldet(18371): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 28 2026 03:14:28 mail maldet(18371): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 28 2026 03:14:28 mail maldet(18371): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jul 28 2026 03:18:12 mail maldet(18371): {scan} file list completed in 224s, found 8078 files... Jul 28 2026 03:18:12 mail maldet(18371): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jul 28 2026 03:18:12 mail maldet(18371): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (8078 files) in progress... Jul 28 2026 03:27:13 mail maldet(18371): {hit} malware hit {HEX}php.inject.generic.565 found for /home/tecnoht/public_html/termozerba--com/detail.php Jul 28 2026 03:27:13 mail maldet(18371): {quar} malware quarantined from '/home/tecnoht/public_html/termozerba--com/detail.php' to '/usr/local/maldetect/quarantine/detail.php.1361229432' Jul 28 2026 03:27:13 mail maldet(18371): {clean} could not find clean rule for hit php.inject.generic or file /usr/local/maldetect/quarantine/detail.php.1361229432 no longer exists. Jul 28 2026 03:27:13 mail maldet(18371): {hit} malware hit {HEX}php.inject.generic.565 found for /home/tecnoht/public_html/termozerba--com/products.php Jul 28 2026 03:27:13 mail maldet(18371): {quar} malware quarantined from '/home/tecnoht/public_html/termozerba--com/products.php' to '/usr/local/maldetect/quarantine/products.php.66028881' Jul 28 2026 03:27:13 mail maldet(18371): {clean} could not find clean rule for hit php.inject.generic or file /usr/local/maldetect/quarantine/products.php.66028881 no longer exists. Jul 28 2026 03:27:13 mail maldet(18371): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 8078, malware hits 2, cleaned hits 0, time 766s Jul 28 2026 03:27:13 mail maldet(18371): {scan} scan report saved, to view run: maldet --report 260728-0314.18371 Jul 29 2026 03:33:20 mail maldet(2797): {update} checking for available updates... Jul 29 2026 03:33:20 mail maldet(2797): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 29 2026 03:33:20 mail maldet(2797): {update} hashing install files and checking against server... Jul 29 2026 03:33:21 mail maldet(2797): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 29 2026 03:33:21 mail maldet(2797): {update} latest version already installed. Jul 29 2026 03:33:21 mail maldet(3670): {sigup} performing signature update check... Jul 29 2026 03:33:21 mail maldet(3670): {sigup} local signature set is version 2026052490478 Jul 29 2026 03:33:22 mail maldet(3670): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 29 2026 03:33:22 mail maldet(3670): {sigup} latest signature set already installed Jul 29 2026 03:33:23 mail maldet(4509): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 29 2026 03:33:25 mail maldet(4509): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jul 29 2026 03:33:25 mail maldet(4509): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 29 2026 03:33:25 mail maldet(4509): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 29 2026 03:33:25 mail maldet(4509): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jul 29 2026 03:55:34 mail maldet(4509): {scan} file list completed in 1329s, found 3425 files... Jul 29 2026 03:55:34 mail maldet(4509): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jul 29 2026 03:55:34 mail maldet(4509): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (3425 files) in progress... Jul 29 2026 04:01:53 mail maldet(4509): {hit} malware hit {HEX}php.inject.generic.565 found for /home/tecnoht/public_html/termozerba--com/detail.php Jul 29 2026 04:01:53 mail maldet(4509): {quar} malware quarantined from '/home/tecnoht/public_html/termozerba--com/detail.php' to '/usr/local/maldetect/quarantine/detail.php.2865322363' Jul 29 2026 04:01:53 mail maldet(4509): {clean} could not find clean rule for hit php.inject.generic or file /usr/local/maldetect/quarantine/detail.php.2865322363 no longer exists. Jul 29 2026 04:01:53 mail maldet(4509): {hit} malware hit {HEX}php.inject.generic.565 found for /home/tecnoht/public_html/termozerba--com/wp-content/plugins/xmleihhf.php Jul 29 2026 04:01:53 mail maldet(4509): {quar} malware quarantined from '/home/tecnoht/public_html/termozerba--com/wp-content/plugins/xmleihhf.php' to '/usr/local/maldetect/quarantine/xmleihhf.php.126366675' Jul 29 2026 04:01:53 mail maldet(4509): {clean} could not find clean rule for hit php.inject.generic or file /usr/local/maldetect/quarantine/xmleihhf.php.126366675 no longer exists. Jul 29 2026 04:01:53 mail maldet(4509): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 3425, malware hits 2, cleaned hits 0, time 1710s Jul 29 2026 04:01:53 mail maldet(4509): {scan} scan report saved, to view run: maldet --report 260729-0333.4509 Jul 30 2026 03:16:41 mail maldet(2319): {update} checking for available updates... Jul 30 2026 03:16:42 mail maldet(2319): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 30 2026 03:16:42 mail maldet(2319): {update} hashing install files and checking against server... Jul 30 2026 03:16:42 mail maldet(2319): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 30 2026 03:16:42 mail maldet(2319): {update} latest version already installed. Jul 30 2026 03:16:43 mail maldet(3239): {sigup} performing signature update check... Jul 30 2026 03:16:43 mail maldet(3239): {sigup} local signature set is version 2026052490478 Jul 30 2026 03:16:43 mail maldet(3239): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 30 2026 03:16:43 mail maldet(3239): {sigup} latest signature set already installed Jul 30 2026 03:16:44 mail maldet(4117): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 30 2026 03:16:45 mail maldet(4117): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jul 30 2026 03:16:45 mail maldet(4117): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 30 2026 03:16:45 mail maldet(4117): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 30 2026 03:16:45 mail maldet(4117): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jul 30 2026 03:23:58 mail maldet(4117): {scan} file list completed in 433s, found 10846 files... Jul 30 2026 03:23:58 mail maldet(4117): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jul 30 2026 03:23:58 mail maldet(4117): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (10846 files) in progress... Jul 30 2026 03:33:18 mail maldet(4117): {hit} malware hit {CAV}Win.Trojan.Hide-1 found for /home/lufficio/public_html/igcstrutture--it/wp-content/estensioni_mappate/wp2p_8eaf33c1/241cd3544cba.php Jul 30 2026 03:33:18 mail maldet(4117): {quar} malware quarantined from '/home/lufficio/public_html/igcstrutture--it/wp-content/estensioni_mappate/wp2p_8eaf33c1/241cd3544cba.php' to '/usr/local/maldetect/quarantine/241cd3544cba.php.20336687' Jul 30 2026 03:33:18 mail maldet(4117): {clean} could not find clean rule for hit Win.Trojan.Hide-1 or file /usr/local/maldetect/quarantine/241cd3544cba.php.20336687 no longer exists. Jul 30 2026 03:33:18 mail maldet(4117): {hit} malware hit {HEX}php.generic.malware.508 found for /home/tecnoht/public_html/rivaemolteni--it/index.php Jul 30 2026 03:33:18 mail maldet(4117): {quar} malware quarantined from '/home/tecnoht/public_html/rivaemolteni--it/index.php' to '/usr/local/maldetect/quarantine/index.php.796523749' Jul 30 2026 03:33:18 mail maldet(4117): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.796523749 no longer exists. Jul 30 2026 03:33:18 mail maldet(4117): {hit} malware hit {HEX}php.generic.malware.508 found for /home/tecnoht/public_html/davinci53--it/index.php Jul 30 2026 03:33:18 mail maldet(4117): {quar} malware quarantined from '/home/tecnoht/public_html/davinci53--it/index.php' to '/usr/local/maldetect/quarantine/index.php.48821003' Jul 30 2026 03:33:18 mail maldet(4117): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.48821003 no longer exists. Jul 30 2026 03:33:18 mail maldet(4117): {hit} malware hit {HEX}php.generic.malware.508 found for /home/tecnoht/public_html/airexpo--it--SUSPENDED/index.php Jul 30 2026 03:33:18 mail maldet(4117): {quar} malware quarantined from '/home/tecnoht/public_html/airexpo--it--SUSPENDED/index.php' to '/usr/local/maldetect/quarantine/index.php.252347276' Jul 30 2026 03:33:18 mail maldet(4117): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.252347276 no longer exists. Jul 30 2026 03:33:18 mail maldet(4117): {hit} malware hit {HEX}php.generic.malware.508 found for /home/tecnoht/public_html/lessi--it/wp-includes/blocks/index.php Jul 30 2026 03:33:18 mail maldet(4117): {quar} malware quarantined from '/home/tecnoht/public_html/lessi--it/wp-includes/blocks/index.php' to '/usr/local/maldetect/quarantine/index.php.1264323471' Jul 30 2026 03:33:18 mail maldet(4117): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.1264323471 no longer exists. Jul 30 2026 03:33:18 mail maldet(4117): {hit} malware hit {HEX}php.generic.malware.508 found for /home/tecnoht/public_html/lessi--it/--OLD/www.lessi.it/index.php Jul 30 2026 03:33:18 mail maldet(4117): {quar} malware quarantined from '/home/tecnoht/public_html/lessi--it/--OLD/www.lessi.it/index.php' to '/usr/local/maldetect/quarantine/index.php.3218632101' Jul 30 2026 03:33:18 mail maldet(4117): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.3218632101 no longer exists. Jul 30 2026 03:33:18 mail maldet(4117): {hit} malware hit {HEX}php.generic.malware.508 found for /home/tecnoht/public_html/lessi--it/--OLD/index.php Jul 30 2026 03:33:18 mail maldet(4117): {quar} malware quarantined from '/home/tecnoht/public_html/lessi--it/--OLD/index.php' to '/usr/local/maldetect/quarantine/index.php.24594311' Jul 30 2026 03:33:18 mail maldet(4117): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.24594311 no longer exists. Jul 30 2026 03:33:19 mail maldet(4117): {hit} malware hit {HEX}php.generic.malware.508 found for /home/tecnoht/public_html/gigisantamaria--com/wp-includes/blocks/index.php Jul 30 2026 03:33:19 mail maldet(4117): {quar} malware quarantined from '/home/tecnoht/public_html/gigisantamaria--com/wp-includes/blocks/index.php' to '/usr/local/maldetect/quarantine/index.php.502619447' Jul 30 2026 03:33:19 mail maldet(4117): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.502619447 no longer exists. Jul 30 2026 03:33:19 mail maldet(4117): {hit} malware hit {HEX}php.generic.malware.508 found for /home/tecnoht/public_html/gigisantamaria--com/--old19965547/index.php Jul 30 2026 03:33:19 mail maldet(4117): {quar} malware quarantined from '/home/tecnoht/public_html/gigisantamaria--com/--old19965547/index.php' to '/usr/local/maldetect/quarantine/index.php.1200017896' Jul 30 2026 03:33:19 mail maldet(4117): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.1200017896 no longer exists. Jul 30 2026 03:33:19 mail maldet(4117): {hit} malware hit {HEX}php.generic.malware.508 found for /home/tecnoht/public_html/falegnameriabartesaghi--it/wp-includes/blocks/index.php Jul 30 2026 03:33:19 mail maldet(4117): {quar} malware quarantined from '/home/tecnoht/public_html/falegnameriabartesaghi--it/wp-includes/blocks/index.php' to '/usr/local/maldetect/quarantine/index.php.851531687' Jul 30 2026 03:33:19 mail maldet(4117): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.851531687 no longer exists. Jul 30 2026 03:33:19 mail maldet(4117): {hit} malware hit {HEX}php.generic.malware.508 found for /home/tecnoht/public_html/falegnameriabartesaghi--it/index.php Jul 30 2026 03:33:19 mail maldet(4117): {quar} malware quarantined from '/home/tecnoht/public_html/falegnameriabartesaghi--it/index.php' to '/usr/local/maldetect/quarantine/index.php.197710621' Jul 30 2026 03:33:19 mail maldet(4117): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.197710621 no longer exists. Jul 30 2026 03:33:19 mail maldet(4117): {hit} malware hit {HEX}php.generic.malware.508 found for /home/tecnoht/public_html/sbs-italy--it/admin/index.php Jul 30 2026 03:33:19 mail maldet(4117): {quar} malware quarantined from '/home/tecnoht/public_html/sbs-italy--it/admin/index.php' to '/usr/local/maldetect/quarantine/index.php.403732672' Jul 30 2026 03:33:19 mail maldet(4117): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.403732672 no longer exists. Jul 30 2026 03:33:19 mail maldet(4117): {hit} malware hit {HEX}php.generic.malware.508 found for /home/tecnoht/public_html/sbs-italy--it/--OLD/httrack/index.php Jul 30 2026 03:33:19 mail maldet(4117): {quar} malware quarantined from '/home/tecnoht/public_html/sbs-italy--it/--OLD/httrack/index.php' to '/usr/local/maldetect/quarantine/index.php.798132450' Jul 30 2026 03:33:19 mail maldet(4117): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.798132450 no longer exists. Jul 30 2026 03:33:19 mail maldet(4117): {hit} malware hit {HEX}php.generic.malware.508 found for /home/tecnoht/public_html/sbs-italy--it/--OLD/en/index.php Jul 30 2026 03:33:19 mail maldet(4117): {quar} malware quarantined from '/home/tecnoht/public_html/sbs-italy--it/--OLD/en/index.php' to '/usr/local/maldetect/quarantine/index.php.1794517286' Jul 30 2026 03:33:19 mail maldet(4117): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.1794517286 no longer exists. Jul 30 2026 03:33:19 mail maldet(4117): {hit} malware hit {HEX}php.generic.malware.508 found for /home/tecnoht/public_html/sbs-italy--it/--OLD/index.php Jul 30 2026 03:33:19 mail maldet(4117): {quar} malware quarantined from '/home/tecnoht/public_html/sbs-italy--it/--OLD/index.php' to '/usr/local/maldetect/quarantine/index.php.2169816751' Jul 30 2026 03:33:19 mail maldet(4117): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.2169816751 no longer exists. Jul 30 2026 03:33:19 mail maldet(4117): {hit} malware hit {HEX}php.generic.malware.508 found for /home/tecnoht/public_html/sistema-arredo--it/httrack/index.php Jul 30 2026 03:33:19 mail maldet(4117): {quar} malware quarantined from '/home/tecnoht/public_html/sistema-arredo--it/httrack/index.php' to '/usr/local/maldetect/quarantine/index.php.11324332' Jul 30 2026 03:33:19 mail maldet(4117): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.11324332 no longer exists. Jul 30 2026 03:33:19 mail maldet(4117): {hit} malware hit {HEX}php.generic.malware.508 found for /home/tecnoht/public_html/sistema-arredo--it/index.php Jul 30 2026 03:33:19 mail maldet(4117): {quar} malware quarantined from '/home/tecnoht/public_html/sistema-arredo--it/index.php' to '/usr/local/maldetect/quarantine/index.php.97956499' Jul 30 2026 03:33:19 mail maldet(4117): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.97956499 no longer exists. Jul 30 2026 03:33:19 mail maldet(4117): {hit} malware hit {HEX}php.generic.malware.508 found for /home/tecnoht/public_html/studiostampi--com/include/index.php Jul 30 2026 03:33:19 mail maldet(4117): {quar} malware quarantined from '/home/tecnoht/public_html/studiostampi--com/include/index.php' to '/usr/local/maldetect/quarantine/index.php.310212215' Jul 30 2026 03:33:19 mail maldet(4117): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.310212215 no longer exists. Jul 30 2026 03:33:19 mail maldet(4117): {hit} malware hit {HEX}php.generic.malware.508 found for /home/tecnoht/public_html/studiostampi--com/images/layout/index.php Jul 30 2026 03:33:19 mail maldet(4117): {quar} malware quarantined from '/home/tecnoht/public_html/studiostampi--com/images/layout/index.php' to '/usr/local/maldetect/quarantine/index.php.1909920460' Jul 30 2026 03:33:19 mail maldet(4117): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.1909920460 no longer exists. Jul 30 2026 03:33:19 mail maldet(4117): {hit} malware hit {HEX}php.generic.malware.508 found for /home/tecnoht/public_html/studiostampi--com/images/index.php Jul 30 2026 03:33:19 mail maldet(4117): {quar} malware quarantined from '/home/tecnoht/public_html/studiostampi--com/images/index.php' to '/usr/local/maldetect/quarantine/index.php.2788219118' Jul 30 2026 03:33:19 mail maldet(4117): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.2788219118 no longer exists. Jul 30 2026 03:33:19 mail maldet(4117): {hit} malware hit {HEX}php.generic.malware.508 found for /home/tecnoht/public_html/studiostampi--com/pers/index.php Jul 30 2026 03:33:19 mail maldet(4117): {quar} malware quarantined from '/home/tecnoht/public_html/studiostampi--com/pers/index.php' to '/usr/local/maldetect/quarantine/index.php.747825936' Jul 30 2026 03:33:19 mail maldet(4117): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.747825936 no longer exists. Jul 30 2026 03:33:19 mail maldet(4117): {hit} malware hit {HEX}php.generic.malware.508 found for /home/tecnoht/public_html/ilfas--com/index.php Jul 30 2026 03:33:19 mail maldet(4117): {quar} malware quarantined from '/home/tecnoht/public_html/ilfas--com/index.php' to '/usr/local/maldetect/quarantine/index.php.5359512' Jul 30 2026 03:33:19 mail maldet(4117): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.5359512 no longer exists. Jul 30 2026 03:33:19 mail maldet(4117): {hit} malware hit {HEX}php.generic.malware.508 found for /home/tecnoht/public_html/carrozzeriavilla--com/ajax.googleapis.com/index.php Jul 30 2026 03:33:19 mail maldet(4117): {quar} malware quarantined from '/home/tecnoht/public_html/carrozzeriavilla--com/ajax.googleapis.com/index.php' to '/usr/local/maldetect/quarantine/index.php.648516836' Jul 30 2026 03:33:19 mail maldet(4117): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.648516836 no longer exists. Jul 30 2026 03:33:19 mail maldet(4117): {hit} malware hit {HEX}php.generic.malware.508 found for /home/tecnoht/public_html/autotrasportimolteni--eu/wp-includes/blocks/index.php Jul 30 2026 03:33:19 mail maldet(4117): {quar} malware quarantined from '/home/tecnoht/public_html/autotrasportimolteni--eu/wp-includes/blocks/index.php' to '/usr/local/maldetect/quarantine/index.php.2600127657' Jul 30 2026 03:33:19 mail maldet(4117): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.2600127657 no longer exists. Jul 30 2026 03:33:19 mail maldet(4117): {hit} malware hit {HEX}php.generic.malware.508 found for /home/tecnoht/public_html/autotrasportimolteni--eu/--old/m/index.php Jul 30 2026 03:33:19 mail maldet(4117): {quar} malware quarantined from '/home/tecnoht/public_html/autotrasportimolteni--eu/--old/m/index.php' to '/usr/local/maldetect/quarantine/index.php.2911332406' Jul 30 2026 03:33:19 mail maldet(4117): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.2911332406 no longer exists. Jul 30 2026 03:33:19 mail maldet(4117): {hit} malware hit {HEX}php.generic.malware.508 found for /home/tecnoht/public_html/autotrasportimolteni--eu/--old/index.php Jul 30 2026 03:33:19 mail maldet(4117): {quar} malware quarantined from '/home/tecnoht/public_html/autotrasportimolteni--eu/--old/index.php' to '/usr/local/maldetect/quarantine/index.php.3040311618' Jul 30 2026 03:33:19 mail maldet(4117): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.3040311618 no longer exists. Jul 30 2026 03:33:19 mail maldet(4117): {hit} malware hit {HEX}php.generic.malware.508 found for /home/tecnoht/public_html/autotrasportimolteni--eu/index.php Jul 30 2026 03:33:19 mail maldet(4117): {quar} malware quarantined from '/home/tecnoht/public_html/autotrasportimolteni--eu/index.php' to '/usr/local/maldetect/quarantine/index.php.1251519879' Jul 30 2026 03:33:19 mail maldet(4117): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.1251519879 no longer exists. Jul 30 2026 03:33:19 mail maldet(4117): {hit} malware hit {HEX}php.generic.malware.508 found for /home/tecnoht/public_html/dplegale--it/index.php Jul 30 2026 03:33:19 mail maldet(4117): {quar} malware quarantined from '/home/tecnoht/public_html/dplegale--it/index.php' to '/usr/local/maldetect/quarantine/index.php.164216458' Jul 30 2026 03:33:19 mail maldet(4117): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.164216458 no longer exists. Jul 30 2026 03:33:19 mail maldet(4117): {hit} malware hit {HEX}php.generic.malware.508 found for /home/tecnoht/public_html/tudortechitaly--com/wp-includes/blocks/index.php Jul 30 2026 03:33:19 mail maldet(4117): {quar} malware quarantined from '/home/tecnoht/public_html/tudortechitaly--com/wp-includes/blocks/index.php' to '/usr/local/maldetect/quarantine/index.php.2339332746' Jul 30 2026 03:33:19 mail maldet(4117): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.2339332746 no longer exists. Jul 30 2026 03:33:19 mail maldet(4117): {hit} malware hit {HEX}php.generic.malware.508 found for /home/tecnoht/public_html/webmail--sistema-arredo--it/index.php Jul 30 2026 03:33:19 mail maldet(4117): {quar} malware quarantined from '/home/tecnoht/public_html/webmail--sistema-arredo--it/index.php' to '/usr/local/maldetect/quarantine/index.php.74069550' Jul 30 2026 03:33:19 mail maldet(4117): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.74069550 no longer exists. Jul 30 2026 03:33:19 mail maldet(4117): {hit} malware hit {HEX}php.generic.malware.508 found for /home/tecnoht/public_html/index.php Jul 30 2026 03:33:19 mail maldet(4117): {quar} malware quarantined from '/home/tecnoht/public_html/index.php' to '/usr/local/maldetect/quarantine/index.php.3149027157' Jul 30 2026 03:33:19 mail maldet(4117): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.3149027157 no longer exists. Jul 30 2026 03:33:19 mail maldet(4117): {hit} malware hit {HEX}php.generic.malware.508 found for /home/tecnoht/public_html/rivatrasporti--com/images/servizi/index.php Jul 30 2026 03:33:19 mail maldet(4117): {quar} malware quarantined from '/home/tecnoht/public_html/rivatrasporti--com/images/servizi/index.php' to '/usr/local/maldetect/quarantine/index.php.213893169' Jul 30 2026 03:33:19 mail maldet(4117): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.213893169 no longer exists. Jul 30 2026 03:33:19 mail maldet(4117): {hit} malware hit {HEX}php.generic.malware.508 found for /home/tecnoht/public_html/rivatrasporti--com/images/template/index.php Jul 30 2026 03:33:19 mail maldet(4117): {quar} malware quarantined from '/home/tecnoht/public_html/rivatrasporti--com/images/template/index.php' to '/usr/local/maldetect/quarantine/index.php.469521110' Jul 30 2026 03:33:19 mail maldet(4117): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.469521110 no longer exists. Jul 30 2026 03:33:20 mail maldet(4117): {hit} malware hit {HEX}php.generic.malware.508 found for /home/tecnoht/public_html/rivatrasporti--com/images/azienda/index.php Jul 30 2026 03:33:20 mail maldet(4117): {quar} malware quarantined from '/home/tecnoht/public_html/rivatrasporti--com/images/azienda/index.php' to '/usr/local/maldetect/quarantine/index.php.2811322261' Jul 30 2026 03:33:20 mail maldet(4117): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.2811322261 no longer exists. Jul 30 2026 03:33:20 mail maldet(4117): {hit} malware hit {HEX}php.generic.malware.508 found for /home/tecnoht/public_html/rivatrasporti--com/images/default/index.php Jul 30 2026 03:33:20 mail maldet(4117): {quar} malware quarantined from '/home/tecnoht/public_html/rivatrasporti--com/images/default/index.php' to '/usr/local/maldetect/quarantine/index.php.1202624403' Jul 30 2026 03:33:20 mail maldet(4117): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.1202624403 no longer exists. Jul 30 2026 03:33:20 mail maldet(4117): {hit} malware hit {HEX}php.generic.malware.508 found for /home/tecnoht/public_html/rivatrasporti--com/images/index.php Jul 30 2026 03:33:20 mail maldet(4117): {quar} malware quarantined from '/home/tecnoht/public_html/rivatrasporti--com/images/index.php' to '/usr/local/maldetect/quarantine/index.php.2433730045' Jul 30 2026 03:33:20 mail maldet(4117): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.2433730045 no longer exists. Jul 30 2026 03:33:20 mail maldet(4117): {hit} malware hit {HEX}php.generic.malware.508 found for /home/tecnoht/public_html/rivatrasporti--com/images/cornice/index.php Jul 30 2026 03:33:20 mail maldet(4117): {quar} malware quarantined from '/home/tecnoht/public_html/rivatrasporti--com/images/cornice/index.php' to '/usr/local/maldetect/quarantine/index.php.2131225550' Jul 30 2026 03:33:20 mail maldet(4117): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.2131225550 no longer exists. Jul 30 2026 03:33:20 mail maldet(4117): {hit} malware hit {HEX}php.generic.malware.508 found for /home/tecnoht/public_html/poliedrosrl--it/www.poliedrosrl.it/m/index.php Jul 30 2026 03:33:20 mail maldet(4117): {quar} malware quarantined from '/home/tecnoht/public_html/poliedrosrl--it/www.poliedrosrl.it/m/index.php' to '/usr/local/maldetect/quarantine/index.php.49165470' Jul 30 2026 03:33:20 mail maldet(4117): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.49165470 no longer exists. Jul 30 2026 03:33:20 mail maldet(4117): {hit} malware hit {HEX}php.generic.malware.508 found for /home/tecnoht/public_html/poliedrosrl--it/www.poliedrosrl.it/index.php Jul 30 2026 03:33:20 mail maldet(4117): {quar} malware quarantined from '/home/tecnoht/public_html/poliedrosrl--it/www.poliedrosrl.it/index.php' to '/usr/local/maldetect/quarantine/index.php.3259924649' Jul 30 2026 03:33:20 mail maldet(4117): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.3259924649 no longer exists. Jul 30 2026 03:33:20 mail maldet(4117): {hit} malware hit {HEX}php.generic.malware.508 found for /home/tecnoht/public_html/poliedrosrl--it/index.php Jul 30 2026 03:33:20 mail maldet(4117): {quar} malware quarantined from '/home/tecnoht/public_html/poliedrosrl--it/index.php' to '/usr/local/maldetect/quarantine/index.php.262120810' Jul 30 2026 03:33:20 mail maldet(4117): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.262120810 no longer exists. Jul 30 2026 03:33:20 mail maldet(4117): {hit} malware hit {HEX}php.generic.malware.508 found for /home/tecnoht/public_html/studiolegalebelloni--it/--logo/index.php Jul 30 2026 03:33:20 mail maldet(4117): {quar} malware quarantined from '/home/tecnoht/public_html/studiolegalebelloni--it/--logo/index.php' to '/usr/local/maldetect/quarantine/index.php.2942613567' Jul 30 2026 03:33:20 mail maldet(4117): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.2942613567 no longer exists. Jul 30 2026 03:33:20 mail maldet(4117): {hit} malware hit {HEX}php.generic.malware.508 found for /home/tecnoht/public_html/studiolegalebelloni--it/wp-includes/blocks/index.php Jul 30 2026 03:33:20 mail maldet(4117): {quar} malware quarantined from '/home/tecnoht/public_html/studiolegalebelloni--it/wp-includes/blocks/index.php' to '/usr/local/maldetect/quarantine/index.php.88963821' Jul 30 2026 03:33:20 mail maldet(4117): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.88963821 no longer exists. Jul 30 2026 03:33:20 mail maldet(4117): {hit} malware hit {HEX}php.generic.malware.508 found for /home/tecnoht/public_html/fratellibartesaghi--it/wp-includes/blocks/index.php Jul 30 2026 03:33:20 mail maldet(4117): {quar} malware quarantined from '/home/tecnoht/public_html/fratellibartesaghi--it/wp-includes/blocks/index.php' to '/usr/local/maldetect/quarantine/index.php.1368920553' Jul 30 2026 03:33:20 mail maldet(4117): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.1368920553 no longer exists. Jul 30 2026 03:33:20 mail maldet(4117): {hit} malware hit {HEX}php.generic.malware.508 found for /home/tecnoht/public_html/fratellibartesaghi--it/index.php Jul 30 2026 03:33:20 mail maldet(4117): {quar} malware quarantined from '/home/tecnoht/public_html/fratellibartesaghi--it/index.php' to '/usr/local/maldetect/quarantine/index.php.1640523861' Jul 30 2026 03:33:20 mail maldet(4117): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.1640523861 no longer exists. Jul 30 2026 03:33:20 mail maldet(4117): {hit} malware hit {HEX}php.generic.malware.508 found for /home/tecnoht/public_html/cavallisportivi--com/--SAVE-OLD/index.php Jul 30 2026 03:33:20 mail maldet(4117): {quar} malware quarantined from '/home/tecnoht/public_html/cavallisportivi--com/--SAVE-OLD/index.php' to '/usr/local/maldetect/quarantine/index.php.3068532486' Jul 30 2026 03:33:20 mail maldet(4117): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.3068532486 no longer exists. Jul 30 2026 03:33:20 mail maldet(4117): {hit} malware hit {HEX}php.generic.malware.508 found for /home/tecnoht/public_html/arrediguidi--com/html-site/www.arrediguidi.com/index.php Jul 30 2026 03:33:20 mail maldet(4117): {quar} malware quarantined from '/home/tecnoht/public_html/arrediguidi--com/html-site/www.arrediguidi.com/index.php' to '/usr/local/maldetect/quarantine/index.php.2738030454' Jul 30 2026 03:33:20 mail maldet(4117): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.2738030454 no longer exists. Jul 30 2026 03:33:20 mail maldet(4117): {hit} malware hit {HEX}php.generic.malware.508 found for /home/tecnoht/public_html/arrediguidi--com/html-site/index.php Jul 30 2026 03:33:20 mail maldet(4117): {quar} malware quarantined from '/home/tecnoht/public_html/arrediguidi--com/html-site/index.php' to '/usr/local/maldetect/quarantine/index.php.2173830922' Jul 30 2026 03:33:20 mail maldet(4117): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.2173830922 no longer exists. Jul 30 2026 03:33:20 mail maldet(4117): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 10846, malware hits 47, cleaned hits 0, time 996s Jul 30 2026 03:33:20 mail maldet(4117): {scan} scan report saved, to view run: maldet --report 260730-0316.4117 Jul 31 2026 04:17:52 mail maldet(31041): {update} checking for available updates... Jul 31 2026 04:17:52 mail maldet(31041): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 31 2026 04:17:52 mail maldet(31041): {update} hashing install files and checking against server... Jul 31 2026 04:17:52 mail maldet(31041): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 31 2026 04:17:52 mail maldet(31041): {update} latest version already installed. Jul 31 2026 04:17:53 mail maldet(31925): {sigup} performing signature update check... Jul 31 2026 04:17:53 mail maldet(31925): {sigup} local signature set is version 2026052490478 Jul 31 2026 04:17:53 mail maldet(31925): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 31 2026 04:17:54 mail maldet(31925): {sigup} latest signature set already installed Jul 31 2026 04:17:54 mail maldet(315): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 31 2026 04:17:55 mail maldet(315): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jul 31 2026 04:17:55 mail maldet(315): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 31 2026 04:17:55 mail maldet(315): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 31 2026 04:17:55 mail maldet(315): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jul 31 2026 04:21:05 mail maldet(315): {scan} file list completed in 190s, found 8504 files... Jul 31 2026 04:21:05 mail maldet(315): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jul 31 2026 04:21:05 mail maldet(315): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (8504 files) in progress... Jul 31 2026 04:28:54 mail maldet(315): {hit} malware hit {HEX}php.inject.generic.563 found for /home/tecnoht/public_html/termozerba--com/detail.php Jul 31 2026 04:28:54 mail maldet(315): {quar} malware quarantined from '/home/tecnoht/public_html/termozerba--com/detail.php' to '/usr/local/maldetect/quarantine/detail.php.901415945' Jul 31 2026 04:28:54 mail maldet(315): {clean} could not find clean rule for hit php.inject.generic or file /usr/local/maldetect/quarantine/detail.php.901415945 no longer exists. Jul 31 2026 04:28:54 mail maldet(315): {hit} malware hit {HEX}php.inject.generic.565 found for /home/tecnoht/public_html/termozerba--com/products.php Jul 31 2026 04:28:54 mail maldet(315): {quar} malware quarantined from '/home/tecnoht/public_html/termozerba--com/products.php' to '/usr/local/maldetect/quarantine/products.php.1582018770' Jul 31 2026 04:28:54 mail maldet(315): {clean} could not find clean rule for hit php.inject.generic or file /usr/local/maldetect/quarantine/products.php.1582018770 no longer exists. Jul 31 2026 04:28:54 mail maldet(315): {hit} malware hit {HEX}php.inject.generic.563 found for /home/tecnoht/public_html/termozerba--com/index.php Jul 31 2026 04:28:54 mail maldet(315): {quar} malware quarantined from '/home/tecnoht/public_html/termozerba--com/index.php' to '/usr/local/maldetect/quarantine/index.php.1187929568' Jul 31 2026 04:28:54 mail maldet(315): {clean} could not find clean rule for hit php.inject.generic or file /usr/local/maldetect/quarantine/index.php.1187929568 no longer exists. Jul 31 2026 04:28:54 mail maldet(315): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 8504, malware hits 3, cleaned hits 0, time 660s Jul 31 2026 04:28:54 mail maldet(315): {scan} scan report saved, to view run: maldet --report 260731-0417.315 Aug 01 2026 03:47:17 mail maldet(8869): {update} checking for available updates... Aug 01 2026 03:47:17 mail maldet(8869): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 01 2026 03:47:17 mail maldet(8869): {update} hashing install files and checking against server... Aug 01 2026 03:47:18 mail maldet(8869): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 01 2026 03:47:18 mail maldet(8869): {update} latest version already installed. Aug 01 2026 03:47:19 mail maldet(9727): {sigup} performing signature update check... Aug 01 2026 03:47:19 mail maldet(9727): {sigup} local signature set is version 2026052490478 Aug 01 2026 03:47:19 mail maldet(9727): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 01 2026 03:47:19 mail maldet(9727): {sigup} latest signature set already installed Aug 01 2026 03:47:20 mail maldet(10560): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 01 2026 03:47:22 mail maldet(10560): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Aug 01 2026 03:47:22 mail maldet(10560): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Aug 01 2026 03:47:22 mail maldet(10560): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 01 2026 03:47:22 mail maldet(10560): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Aug 01 2026 04:01:26 mail maldet(10560): {scan} file list completed in 844s, found 483982 files... Aug 01 2026 04:01:26 mail maldet(10560): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Aug 01 2026 04:01:26 mail maldet(10560): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (483982 files) in progress... Aug 01 2026 08:57:23 mail maldet(10560): {hit} malware hit {HEX}php.inject.generic.565 found for /home/lufficio/public_html/igcstrutture--it/detail.php Aug 01 2026 08:57:23 mail maldet(10560): {quar} malware quarantined from '/home/lufficio/public_html/igcstrutture--it/detail.php' to '/usr/local/maldetect/quarantine/detail.php.69031109' Aug 01 2026 08:57:23 mail maldet(10560): {clean} could not find clean rule for hit php.inject.generic or file /usr/local/maldetect/quarantine/detail.php.69031109 no longer exists. Aug 01 2026 08:57:23 mail maldet(10560): {hit} malware hit {HEX}php.inject.generic.565 found for /home/lufficio/public_html/igcstrutture--it/products.php Aug 01 2026 08:57:23 mail maldet(10560): {quar} malware quarantined from '/home/lufficio/public_html/igcstrutture--it/products.php' to '/usr/local/maldetect/quarantine/products.php.2734210368' Aug 01 2026 08:57:23 mail maldet(10560): {clean} could not find clean rule for hit php.inject.generic or file /usr/local/maldetect/quarantine/products.php.2734210368 no longer exists. Aug 01 2026 08:57:23 mail maldet(10560): {hit} malware hit {HEX}php.inject.generic.565 found for /home/lufficio/public_html/igcstrutture--it/index.php Aug 01 2026 08:57:23 mail maldet(10560): {quar} malware quarantined from '/home/lufficio/public_html/igcstrutture--it/index.php' to '/usr/local/maldetect/quarantine/index.php.92862232' Aug 01 2026 08:57:23 mail maldet(10560): {clean} could not find clean rule for hit php.inject.generic or file /usr/local/maldetect/quarantine/index.php.92862232 no longer exists. Aug 01 2026 08:57:23 mail maldet(10560): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 483982, malware hits 3, cleaned hits 0, time 18603s Aug 01 2026 08:57:23 mail maldet(10560): {scan} scan report saved, to view run: maldet --report 260801-0347.10560 Aug 02 2026 03:46:34 mail maldet(19623): {update} checking for available updates... Aug 02 2026 03:46:34 mail maldet(19623): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 02 2026 03:46:34 mail maldet(19623): {update} hashing install files and checking against server... Aug 02 2026 03:46:35 mail maldet(19623): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 02 2026 03:46:35 mail maldet(19623): {update} latest version already installed. Aug 02 2026 03:46:35 mail maldet(20476): {sigup} performing signature update check... Aug 02 2026 03:46:35 mail maldet(20476): {sigup} local signature set is version 2026052490478 Aug 02 2026 03:46:36 mail maldet(20476): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 02 2026 03:46:36 mail maldet(20476): {sigup} latest signature set already installed Aug 02 2026 03:46:37 mail maldet(21306): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 02 2026 03:46:38 mail maldet(21306): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Aug 02 2026 03:46:38 mail maldet(21306): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Aug 02 2026 03:46:38 mail maldet(21306): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 02 2026 03:46:38 mail maldet(21306): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Aug 02 2026 03:53:57 mail maldet(21306): {scan} file list completed in 439s, found 546833 files... Aug 02 2026 03:53:57 mail maldet(21306): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Aug 02 2026 03:53:57 mail maldet(21306): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (546833 files) in progress... Aug 02 2026 09:28:05 mail maldet(21306): {hit} malware hit {HEX}php.inject.base64.547 found for /home/ross/public_html/--conf_server_ssd_apache/usr/apache/modsecurity-owasp-latest/tests/regression/tests/REQUEST-933-APPLICATION-ATTACK-PHP/933160.yaml Aug 02 2026 09:28:05 mail maldet(21306): {quar} malware quarantined from '/home/ross/public_html/--conf_server_ssd_apache/usr/apache/modsecurity-owasp-latest/tests/regression/tests/REQUEST-933-APPLICATION-ATTACK-PHP/933160.yaml' to '/usr/local/maldetect/quarantine/933160.yaml.1788430428' Aug 02 2026 09:28:05 mail maldet(21306): {clean} could not find clean rule for hit php.inject.base64 or file /usr/local/maldetect/quarantine/933160.yaml.1788430428 no longer exists. Aug 02 2026 09:28:05 mail maldet(21306): {quar} fatal error handling '/home/ross/public_html/planetline--it/-scambio/databases/01_04_2026_00' Aug 02 2026 09:28:05 mail maldet(21306): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 546833, malware hits 1, cleaned hits 0, time 20488s Aug 02 2026 09:28:05 mail maldet(21306): {scan} scan report saved, to view run: maldet --report 260802-0346.21306 Aug 03 2026 03:55:34 mail maldet(15420): {update} checking for available updates... Aug 03 2026 03:55:35 mail maldet(15420): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 03 2026 03:55:35 mail maldet(15420): {update} hashing install files and checking against server... Aug 03 2026 03:55:35 mail maldet(15420): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 03 2026 03:55:35 mail maldet(15420): {update} latest version already installed. Aug 03 2026 03:55:35 mail maldet(16402): {sigup} performing signature update check... Aug 03 2026 03:55:35 mail maldet(16402): {sigup} local signature set is version 2026052490478 Aug 03 2026 03:55:36 mail maldet(16402): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 03 2026 03:55:36 mail maldet(16402): {sigup} latest signature set already installed Aug 03 2026 03:55:37 mail maldet(17284): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 03 2026 03:55:43 mail maldet(17284): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Aug 03 2026 03:55:43 mail maldet(17284): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Aug 03 2026 03:55:43 mail maldet(17284): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 03 2026 03:55:43 mail maldet(17284): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Aug 03 2026 04:22:56 mail maldet(17284): {scan} file list completed in 1633s, found 7636 files... Aug 03 2026 04:22:56 mail maldet(17284): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Aug 03 2026 04:22:56 mail maldet(17284): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (7636 files) in progress... Aug 03 2026 04:37:18 mail maldet(17284): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 7636, malware hits 0, cleaned hits 0, time 2501s Aug 03 2026 04:37:18 mail maldet(17284): {scan} scan report saved, to view run: maldet --report 260803-0355.17284 Aug 04 2026 04:03:17 mail maldet(2457): {update} checking for available updates... Aug 04 2026 04:03:18 mail maldet(2457): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 04 2026 04:03:18 mail maldet(2457): {update} hashing install files and checking against server... Aug 04 2026 04:03:18 mail maldet(2457): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 04 2026 04:03:18 mail maldet(2457): {update} latest version already installed. Aug 04 2026 04:03:18 mail maldet(3357): {sigup} performing signature update check... Aug 04 2026 04:03:18 mail maldet(3357): {sigup} local signature set is version 2026052490478 Aug 04 2026 04:03:19 mail maldet(3357): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 04 2026 04:03:19 mail maldet(3357): {sigup} latest signature set already installed Aug 04 2026 04:03:20 mail maldet(4225): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 04 2026 04:03:21 mail maldet(4225): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Aug 04 2026 04:03:21 mail maldet(4225): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Aug 04 2026 04:03:21 mail maldet(4225): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 04 2026 04:03:21 mail maldet(4225): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Aug 04 2026 04:10:14 mail maldet(4225): {scan} file list completed in 413s, found 1895 files... Aug 04 2026 04:10:14 mail maldet(4225): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Aug 04 2026 04:10:14 mail maldet(4225): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1895 files) in progress... Aug 04 2026 04:17:15 mail maldet(4225): {hit} malware hit {HEX}php.inject.generic.565 found for /home/tecnoht/public_html/termozerba--com/products.php Aug 04 2026 04:17:15 mail maldet(4225): {quar} malware quarantined from '/home/tecnoht/public_html/termozerba--com/products.php' to '/usr/local/maldetect/quarantine/products.php.868927716' Aug 04 2026 04:17:15 mail maldet(4225): {clean} could not find clean rule for hit php.inject.generic or file /usr/local/maldetect/quarantine/products.php.868927716 no longer exists. Aug 04 2026 04:17:15 mail maldet(4225): {hit} malware hit {HEX}php.inject.generic.565 found for /home/tecnoht/public_html/termozerba--com/wp-content/mu-plugins/index.php Aug 04 2026 04:17:15 mail maldet(4225): {quar} malware quarantined from '/home/tecnoht/public_html/termozerba--com/wp-content/mu-plugins/index.php' to '/usr/local/maldetect/quarantine/index.php.728810835' Aug 04 2026 04:17:15 mail maldet(4225): {clean} could not find clean rule for hit php.inject.generic or file /usr/local/maldetect/quarantine/index.php.728810835 no longer exists. Aug 04 2026 04:17:15 mail maldet(4225): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1895, malware hits 2, cleaned hits 0, time 835s Aug 04 2026 04:17:15 mail maldet(4225): {scan} scan report saved, to view run: maldet --report 260804-0403.4225 Aug 05 2026 04:05:11 mail maldet(2657): {update} checking for available updates... Aug 05 2026 04:05:12 mail maldet(2657): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 05 2026 04:05:12 mail maldet(2657): {update} hashing install files and checking against server... Aug 05 2026 04:05:12 mail maldet(2657): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 05 2026 04:05:12 mail maldet(2657): {update} latest version already installed. Aug 05 2026 04:05:13 mail maldet(3630): {sigup} performing signature update check... Aug 05 2026 04:05:13 mail maldet(3630): {sigup} local signature set is version 2026052490478 Aug 05 2026 04:05:13 mail maldet(3630): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 05 2026 04:05:13 mail maldet(3630): {sigup} latest signature set already installed Aug 05 2026 04:05:14 mail maldet(4549): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 05 2026 04:05:16 mail maldet(4549): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Aug 05 2026 04:05:16 mail maldet(4549): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Aug 05 2026 04:05:16 mail maldet(4549): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 05 2026 04:05:16 mail maldet(4549): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Aug 05 2026 04:23:05 mail maldet(4549): {scan} file list completed in 1068s, found 47748 files... Aug 05 2026 04:23:05 mail maldet(4549): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Aug 05 2026 04:23:05 mail maldet(4549): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (47748 files) in progress... Aug 05 2026 05:18:39 mail maldet(4549): {hit} malware hit {HEX}php.inject.generic.565 found for /home/tecnoht/public_html/termozerba--com/products.php Aug 05 2026 05:18:40 mail maldet(4549): {quar} malware quarantined from '/home/tecnoht/public_html/termozerba--com/products.php' to '/usr/local/maldetect/quarantine/products.php.100033988' Aug 05 2026 05:18:40 mail maldet(4549): {clean} could not find clean rule for hit php.inject.generic or file /usr/local/maldetect/quarantine/products.php.100033988 no longer exists. Aug 05 2026 05:18:40 mail maldet(4549): {hit} malware hit {HEX}php.inject.generic.565 found for /home/tecnoht/public_html/termozerba--com/wp-content/themes/xmleihhf.php Aug 05 2026 05:18:40 mail maldet(4549): {quar} malware quarantined from '/home/tecnoht/public_html/termozerba--com/wp-content/themes/xmleihhf.php' to '/usr/local/maldetect/quarantine/xmleihhf.php.273091802' Aug 05 2026 05:18:40 mail maldet(4549): {clean} could not find clean rule for hit php.inject.generic or file /usr/local/maldetect/quarantine/xmleihhf.php.273091802 no longer exists. Aug 05 2026 05:18:40 mail maldet(4549): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 47748, malware hits 2, cleaned hits 0, time 4406s Aug 05 2026 05:18:40 mail maldet(4549): {scan} scan report saved, to view run: maldet --report 260805-0405.4549 Aug 06 2026 03:30:28 mail maldet(16530): {update} checking for available updates... Aug 06 2026 03:30:28 mail maldet(16530): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 06 2026 03:30:28 mail maldet(16530): {update} hashing install files and checking against server... Aug 06 2026 03:30:29 mail maldet(16530): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 06 2026 03:30:29 mail maldet(16530): {update} latest version already installed. Aug 06 2026 03:30:29 mail maldet(17367): {sigup} performing signature update check... Aug 06 2026 03:30:29 mail maldet(17367): {sigup} local signature set is version 2026052490478 Aug 06 2026 03:30:30 mail maldet(17367): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 06 2026 03:30:30 mail maldet(17367): {sigup} latest signature set already installed Aug 06 2026 03:30:30 mail maldet(18179): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 06 2026 03:30:32 mail maldet(18179): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Aug 06 2026 03:30:32 mail maldet(18179): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Aug 06 2026 03:30:32 mail maldet(18179): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 06 2026 03:30:32 mail maldet(18179): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Aug 06 2026 03:38:04 mail maldet(18179): {scan} file list completed in 452s, found 1407 files... Aug 06 2026 03:38:04 mail maldet(18179): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Aug 06 2026 03:38:04 mail maldet(18179): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1407 files) in progress... Aug 06 2026 03:43:48 mail maldet(18179): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1407, malware hits 0, cleaned hits 0, time 798s Aug 06 2026 03:43:48 mail maldet(18179): {scan} scan report saved, to view run: maldet --report 260806-0330.18179 Aug 07 2026 03:43:07 mail maldet(30455): {update} checking for available updates... Aug 07 2026 03:43:08 mail maldet(30455): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 07 2026 03:43:08 mail maldet(30455): {update} hashing install files and checking against server... Aug 07 2026 03:43:08 mail maldet(30455): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 07 2026 03:43:08 mail maldet(30455): {update} latest version already installed. Aug 07 2026 03:43:09 mail maldet(31385): {sigup} performing signature update check... Aug 07 2026 03:43:09 mail maldet(31385): {sigup} local signature set is version 2026052490478 Aug 07 2026 03:43:09 mail maldet(31385): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 07 2026 03:43:09 mail maldet(31385): {sigup} latest signature set already installed Aug 07 2026 03:43:10 mail maldet(32259): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 07 2026 03:43:11 mail maldet(32259): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Aug 07 2026 03:43:11 mail maldet(32259): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Aug 07 2026 03:43:11 mail maldet(32259): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 07 2026 03:43:11 mail maldet(32259): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Aug 07 2026 03:56:01 mail maldet(32259): {scan} file list completed in 770s, found 96977 files... Aug 07 2026 03:56:01 mail maldet(32259): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Aug 07 2026 03:56:01 mail maldet(32259): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (96977 files) in progress... Aug 07 2026 05:03:20 mail maldet(32259): {quar} fatal error handling '/home/ross/public_html/planetline--it/---originale_in_html/-scambio/databases/01_04_2026_00' Aug 07 2026 05:03:21 mail maldet(32259): {hit} malware hit {HEX}php.inject.generic.565 found for /home/tecnoht/public_html/termozerba--com/detail.php Aug 07 2026 05:03:21 mail maldet(32259): {quar} malware quarantined from '/home/tecnoht/public_html/termozerba--com/detail.php' to '/usr/local/maldetect/quarantine/detail.php.301145471' Aug 07 2026 05:03:21 mail maldet(32259): {clean} could not find clean rule for hit php.inject.generic or file /usr/local/maldetect/quarantine/detail.php.301145471 no longer exists. Aug 07 2026 05:03:21 mail maldet(32259): {hit} malware hit {HEX}php.inject.generic.565 found for /home/tecnoht/public_html/termozerba--com/products.php Aug 07 2026 05:03:21 mail maldet(32259): {quar} malware quarantined from '/home/tecnoht/public_html/termozerba--com/products.php' to '/usr/local/maldetect/quarantine/products.php.102632583' Aug 07 2026 05:03:21 mail maldet(32259): {clean} could not find clean rule for hit php.inject.generic or file /usr/local/maldetect/quarantine/products.php.102632583 no longer exists. Aug 07 2026 05:03:21 mail maldet(32259): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 96977, malware hits 2, cleaned hits 0, time 4811s Aug 07 2026 05:03:21 mail maldet(32259): {scan} scan report saved, to view run: maldet --report 260807-0343.32259 Aug 08 2026 03:49:33 mail maldet(12072): {update} checking for available updates... Aug 08 2026 03:49:34 mail maldet(12072): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 08 2026 03:49:34 mail maldet(12072): {update} hashing install files and checking against server... Aug 08 2026 03:49:34 mail maldet(12072): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 08 2026 03:49:34 mail maldet(12072): {update} latest version already installed. Aug 08 2026 03:49:35 mail maldet(12966): {sigup} performing signature update check... Aug 08 2026 03:49:35 mail maldet(12966): {sigup} local signature set is version 2026052490478 Aug 08 2026 03:49:35 mail maldet(12966): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 08 2026 03:49:35 mail maldet(12966): {sigup} latest signature set already installed Aug 08 2026 03:49:36 mail maldet(13835): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 08 2026 03:49:38 mail maldet(13835): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Aug 08 2026 03:49:38 mail maldet(13835): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Aug 08 2026 03:49:38 mail maldet(13835): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 08 2026 03:49:38 mail maldet(13835): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Aug 08 2026 04:08:34 mail maldet(13835): {scan} file list completed in 1136s, found 604318 files... Aug 08 2026 04:08:34 mail maldet(13835): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Aug 08 2026 04:08:34 mail maldet(13835): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (604318 files) in progress... Aug 08 2026 10:53:38 mail maldet(13835): {hit} malware hit {HEX}php.inject.generic.565 found for /home/tecnoht/public_html/termozerba--com/detail.php Aug 08 2026 10:53:38 mail maldet(13835): {quar} malware quarantined from '/home/tecnoht/public_html/termozerba--com/detail.php' to '/usr/local/maldetect/quarantine/detail.php.2791532099' Aug 08 2026 10:53:39 mail maldet(13835): {clean} could not find clean rule for hit php.inject.generic or file /usr/local/maldetect/quarantine/detail.php.2791532099 no longer exists. Aug 08 2026 10:53:39 mail maldet(13835): {hit} malware hit {HEX}php.inject.generic.565 found for /home/tecnoht/public_html/termozerba--com/products.php Aug 08 2026 10:53:39 mail maldet(13835): {quar} malware quarantined from '/home/tecnoht/public_html/termozerba--com/products.php' to '/usr/local/maldetect/quarantine/products.php.6929111' Aug 08 2026 10:53:39 mail maldet(13835): {clean} could not find clean rule for hit php.inject.generic or file /usr/local/maldetect/quarantine/products.php.6929111 no longer exists. Aug 08 2026 10:53:39 mail maldet(13835): {hit} malware hit {HEX}php.inject.generic.565 found for /home/tecnoht/public_html/termozerba--com/index.php Aug 08 2026 10:53:39 mail maldet(13835): {quar} malware quarantined from '/home/tecnoht/public_html/termozerba--com/index.php' to '/usr/local/maldetect/quarantine/index.php.326187607' Aug 08 2026 10:53:39 mail maldet(13835): {clean} could not find clean rule for hit php.inject.generic or file /usr/local/maldetect/quarantine/index.php.326187607 no longer exists. Aug 08 2026 10:53:39 mail maldet(13835): {hit} malware hit {HEX}php.webshell.egyspider.883 found for /home/tecnoht/public_html/termozerba--com/wp-content/plugins/bf16c0ec/media-contentt.phtml Aug 08 2026 10:53:39 mail maldet(13835): {quar} malware quarantined from '/home/tecnoht/public_html/termozerba--com/wp-content/plugins/bf16c0ec/media-contentt.phtml' to '/usr/local/maldetect/quarantine/media-contentt.phtml.3067120423' Aug 08 2026 10:53:39 mail maldet(13835): {clean} could not find clean rule for hit php.webshell.egyspider or file /usr/local/maldetect/quarantine/media-contentt.phtml.3067120423 no longer exists. Aug 08 2026 10:53:39 mail maldet(13835): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 604318, malware hits 4, cleaned hits 0, time 25443s Aug 08 2026 10:53:39 mail maldet(13835): {scan} scan report saved, to view run: maldet --report 260808-0349.13835 Aug 09 2026 04:06:50 mail maldet(19658): {update} checking for available updates... Aug 09 2026 04:06:51 mail maldet(19658): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 09 2026 04:06:51 mail maldet(19658): {update} hashing install files and checking against server... Aug 09 2026 04:06:51 mail maldet(19658): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 09 2026 04:06:51 mail maldet(19658): {update} latest version already installed. Aug 09 2026 04:06:52 mail maldet(20540): {sigup} performing signature update check... Aug 09 2026 04:06:52 mail maldet(20540): {sigup} local signature set is version 2026052490478 Aug 09 2026 04:06:52 mail maldet(20540): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 09 2026 04:06:52 mail maldet(20540): {sigup} latest signature set already installed Aug 09 2026 04:06:53 mail maldet(21405): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 09 2026 04:06:54 mail maldet(21405): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Aug 09 2026 04:06:54 mail maldet(21405): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Aug 09 2026 04:06:55 mail maldet(21405): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 09 2026 04:06:55 mail maldet(21405): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Aug 09 2026 04:13:45 mail maldet(21405): {scan} file list completed in 410s, found 1941 files... Aug 09 2026 04:13:45 mail maldet(21405): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Aug 09 2026 04:13:45 mail maldet(21405): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1941 files) in progress... Aug 09 2026 04:22:08 mail maldet(21405): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1941, malware hits 0, cleaned hits 0, time 915s Aug 09 2026 04:22:08 mail maldet(21405): {scan} scan report saved, to view run: maldet --report 260809-0406.21405 Aug 10 2026 04:21:38 mail maldet(24785): {update} checking for available updates... Aug 10 2026 04:21:38 mail maldet(24785): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 10 2026 04:21:38 mail maldet(24785): {update} hashing install files and checking against server... Aug 10 2026 04:21:39 mail maldet(24785): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 10 2026 04:21:39 mail maldet(24785): {update} latest version already installed. Aug 10 2026 04:21:39 mail maldet(25693): {sigup} performing signature update check... Aug 10 2026 04:21:39 mail maldet(25693): {sigup} local signature set is version 2026052490478 Aug 10 2026 04:21:39 mail maldet(25693): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 10 2026 04:21:40 mail maldet(25693): {sigup} latest signature set already installed Aug 10 2026 04:21:40 mail maldet(26581): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 10 2026 04:21:42 mail maldet(26581): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Aug 10 2026 04:21:42 mail maldet(26581): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Aug 10 2026 04:21:42 mail maldet(26581): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 10 2026 04:21:42 mail maldet(26581): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Aug 10 2026 04:54:22 mail maldet(26581): {scan} file list completed in 1960s, found 2018 files... Aug 10 2026 04:54:22 mail maldet(26581): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Aug 10 2026 04:54:22 mail maldet(26581): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2018 files) in progress... Aug 10 2026 05:04:32 mail maldet(26581): {hit} malware hit {HEX}php.webshell.egyspider.883 found for /home/tecnoht/public_html/termozerba--com/wp-media.phtml Aug 10 2026 05:04:33 mail maldet(26581): {quar} malware quarantined from '/home/tecnoht/public_html/termozerba--com/wp-media.phtml' to '/usr/local/maldetect/quarantine/wp-media.phtml.2436513523' Aug 10 2026 05:04:33 mail maldet(26581): {clean} could not find clean rule for hit php.webshell.egyspider or file /usr/local/maldetect/quarantine/wp-media.phtml.2436513523 no longer exists. Aug 10 2026 05:04:33 mail maldet(26581): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2018, malware hits 1, cleaned hits 0, time 2573s Aug 10 2026 05:04:33 mail maldet(26581): {scan} scan report saved, to view run: maldet --report 260810-0421.26581 Aug 11 2026 03:56:03 mail maldet(23177): {update} checking for available updates... Aug 11 2026 03:56:04 mail maldet(23177): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 11 2026 03:56:04 mail maldet(23177): {update} hashing install files and checking against server... Aug 11 2026 03:56:05 mail maldet(23177): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 11 2026 03:56:05 mail maldet(23177): {update} latest version already installed. Aug 11 2026 03:56:05 mail maldet(24060): {sigup} performing signature update check... Aug 11 2026 03:56:05 mail maldet(24060): {sigup} local signature set is version 2026052490478 Aug 11 2026 03:56:06 mail maldet(24060): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 11 2026 03:56:06 mail maldet(24060): {sigup} latest signature set already installed Aug 11 2026 03:56:06 mail maldet(24895): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 11 2026 03:56:08 mail maldet(24895): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Aug 11 2026 03:56:08 mail maldet(24895): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Aug 11 2026 03:56:08 mail maldet(24895): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 11 2026 03:56:08 mail maldet(24895): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Aug 11 2026 04:01:24 mail maldet(24895): {scan} file list completed in 316s, found 4804 files... Aug 11 2026 04:01:24 mail maldet(24895): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Aug 11 2026 04:01:24 mail maldet(24895): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (4804 files) in progress... Aug 11 2026 04:13:02 mail maldet(24895): {hit} malware hit {HEX}php.inject.base64.550 found for /home/tecnoht/public_html/termozerba--com/wp-includes/6aQGCHcnWs4.php Aug 11 2026 04:13:03 mail maldet(24895): {quar} malware quarantined from '/home/tecnoht/public_html/termozerba--com/wp-includes/6aQGCHcnWs4.php' to '/usr/local/maldetect/quarantine/6aQGCHcnWs4.php.352315733' Aug 11 2026 04:13:03 mail maldet(24895): {clean} could not find clean rule for hit php.inject.base64 or file /usr/local/maldetect/quarantine/6aQGCHcnWs4.php.352315733 no longer exists. Aug 11 2026 04:13:03 mail maldet(24895): {hit} malware hit {HEX}php.inject.generic.565 found for /home/tecnoht/public_html/termozerba--com/detail.php Aug 11 2026 04:13:03 mail maldet(24895): {quar} malware quarantined from '/home/tecnoht/public_html/termozerba--com/detail.php' to '/usr/local/maldetect/quarantine/detail.php.2370322985' Aug 11 2026 04:13:03 mail maldet(24895): {clean} could not find clean rule for hit php.inject.generic or file /usr/local/maldetect/quarantine/detail.php.2370322985 no longer exists. Aug 11 2026 04:13:03 mail maldet(24895): {hit} malware hit {HEX}php.inject.generic.565 found for /home/tecnoht/public_html/termozerba--com/wp-admin/user/xmleihhf.php Aug 11 2026 04:13:03 mail maldet(24895): {quar} malware quarantined from '/home/tecnoht/public_html/termozerba--com/wp-admin/user/xmleihhf.php' to '/usr/local/maldetect/quarantine/xmleihhf.php.949029995' Aug 11 2026 04:13:03 mail maldet(24895): {clean} could not find clean rule for hit php.inject.generic or file /usr/local/maldetect/quarantine/xmleihhf.php.949029995 no longer exists. Aug 11 2026 04:13:03 mail maldet(24895): {hit} malware hit {HEX}php.inject.base64.550 found for /home/tecnoht/public_html/manzonisrl--mi.it/uWEp6HBT59j.php Aug 11 2026 04:13:03 mail maldet(24895): {quar} malware quarantined from '/home/tecnoht/public_html/manzonisrl--mi.it/uWEp6HBT59j.php' to '/usr/local/maldetect/quarantine/uWEp6HBT59j.php.68628070' Aug 11 2026 04:13:03 mail maldet(24895): {clean} could not find clean rule for hit php.inject.base64 or file /usr/local/maldetect/quarantine/uWEp6HBT59j.php.68628070 no longer exists. Aug 11 2026 04:13:03 mail maldet(24895): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 4804, malware hits 4, cleaned hits 0, time 1017s Aug 11 2026 04:13:03 mail maldet(24895): {scan} scan report saved, to view run: maldet --report 260811-0356.24895 Aug 12 2026 04:00:52 mail maldet(28496): {update} checking for available updates... Aug 12 2026 04:00:53 mail maldet(28496): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 12 2026 04:00:53 mail maldet(28496): {update} hashing install files and checking against server... Aug 12 2026 04:00:53 mail maldet(28496): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 12 2026 04:00:53 mail maldet(28496): {update} latest version already installed. Aug 12 2026 04:00:54 mail maldet(29430): {sigup} performing signature update check... Aug 12 2026 04:00:54 mail maldet(29430): {sigup} local signature set is version 2026052490478 Aug 12 2026 04:00:54 mail maldet(29430): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 12 2026 04:00:54 mail maldet(29430): {sigup} latest signature set already installed Aug 12 2026 04:00:55 mail maldet(30303): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 12 2026 04:01:02 mail maldet(30303): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Aug 12 2026 04:01:02 mail maldet(30303): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Aug 12 2026 04:01:02 mail maldet(30303): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 12 2026 04:01:02 mail maldet(30303): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Aug 12 2026 04:35:58 mail maldet(30303): {scan} file list completed in 2096s, found 9627 files... Aug 12 2026 04:35:58 mail maldet(30303): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Aug 12 2026 04:35:58 mail maldet(30303): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (9627 files) in progress... Aug 12 2026 04:45:53 mail maldet(30303): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details; quarantine_on_error=0 or unset, quarantine has been disabled! Aug 12 2026 04:45:53 mail maldet(30303): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 9627, malware hits 0, cleaned hits 0, time 2698s Aug 12 2026 04:45:53 mail maldet(30303): {scan} scan report saved, to view run: maldet --report 260812-0400.30303 Aug 13 2026 03:49:48 mail maldet(490): {update} checking for available updates... Aug 13 2026 03:49:48 mail maldet(490): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 13 2026 03:49:48 mail maldet(490): {update} hashing install files and checking against server... Aug 13 2026 03:49:49 mail maldet(490): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 13 2026 03:49:49 mail maldet(490): {update} latest version already installed. Aug 13 2026 03:49:49 mail maldet(1394): {sigup} performing signature update check... Aug 13 2026 03:49:49 mail maldet(1394): {sigup} local signature set is version 2026052490478 Aug 13 2026 03:49:50 mail maldet(1394): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 13 2026 03:49:50 mail maldet(1394): {sigup} latest signature set already installed Aug 13 2026 03:49:50 mail maldet(2252): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 13 2026 03:49:52 mail maldet(2252): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Aug 13 2026 03:49:52 mail maldet(2252): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Aug 13 2026 03:49:52 mail maldet(2252): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 13 2026 03:49:52 mail maldet(2252): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Aug 13 2026 03:58:00 mail maldet(2252): {scan} file list completed in 488s, found 2945 files... Aug 13 2026 03:58:00 mail maldet(2252): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Aug 13 2026 03:58:00 mail maldet(2252): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2945 files) in progress... Aug 13 2026 04:05:30 mail maldet(2252): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2945, malware hits 0, cleaned hits 0, time 940s Aug 13 2026 04:05:30 mail maldet(2252): {scan} scan report saved, to view run: maldet --report 260813-0349.2252 Aug 14 2026 03:53:49 mail maldet(10338): {update} checking for available updates... Aug 14 2026 03:53:49 mail maldet(10338): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 14 2026 03:53:49 mail maldet(10338): {update} hashing install files and checking against server... Aug 14 2026 03:53:50 mail maldet(10338): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 14 2026 03:53:50 mail maldet(10338): {update} latest version already installed. Aug 14 2026 03:53:50 mail maldet(11221): {sigup} performing signature update check... Aug 14 2026 03:53:50 mail maldet(11221): {sigup} local signature set is version 2026052490478 Aug 14 2026 03:53:51 mail maldet(11221): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 14 2026 03:53:51 mail maldet(11221): {sigup} latest signature set already installed Aug 14 2026 03:53:51 mail maldet(12074): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 14 2026 03:53:56 mail maldet(12074): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Aug 14 2026 03:53:56 mail maldet(12074): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Aug 14 2026 03:53:56 mail maldet(12074): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 14 2026 03:53:56 mail maldet(12074): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Aug 14 2026 04:14:05 mail maldet(12074): {scan} file list completed in 1209s, found 3388 files... Aug 14 2026 04:14:05 mail maldet(12074): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Aug 14 2026 04:14:05 mail maldet(12074): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (3388 files) in progress... Aug 14 2026 04:24:15 mail maldet(12074): {hit} malware hit {HEX}php.inject.base64.550 found for /home/tecnoht/public_html/termozerba--com/wp-includes/7KaP1vSbHFj.php Aug 14 2026 04:24:16 mail maldet(12074): {quar} malware quarantined from '/home/tecnoht/public_html/termozerba--com/wp-includes/7KaP1vSbHFj.php' to '/usr/local/maldetect/quarantine/7KaP1vSbHFj.php.2437421248' Aug 14 2026 04:24:16 mail maldet(12074): {clean} could not find clean rule for hit php.inject.base64 or file /usr/local/maldetect/quarantine/7KaP1vSbHFj.php.2437421248 no longer exists. Aug 14 2026 04:24:16 mail maldet(12074): {hit} malware hit {HEX}php.inject.base64.550 found for /home/tecnoht/public_html/manzonisrl--mi.it/wm3daAfYMkS.php Aug 14 2026 04:24:16 mail maldet(12074): {quar} malware quarantined from '/home/tecnoht/public_html/manzonisrl--mi.it/wm3daAfYMkS.php' to '/usr/local/maldetect/quarantine/wm3daAfYMkS.php.253204291' Aug 14 2026 04:24:16 mail maldet(12074): {clean} could not find clean rule for hit php.inject.base64 or file /usr/local/maldetect/quarantine/wm3daAfYMkS.php.253204291 no longer exists. Aug 14 2026 04:24:16 mail maldet(12074): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 3388, malware hits 2, cleaned hits 0, time 1825s Aug 14 2026 04:24:16 mail maldet(12074): {scan} scan report saved, to view run: maldet --report 260814-0353.12074 Aug 15 2026 03:36:04 mail maldet(29523): {update} checking for available updates... Aug 15 2026 03:36:04 mail maldet(29523): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 15 2026 03:36:04 mail maldet(29523): {update} hashing install files and checking against server... Aug 15 2026 03:36:05 mail maldet(29523): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 15 2026 03:36:05 mail maldet(29523): {update} latest version already installed. Aug 15 2026 03:36:05 mail maldet(30389): {sigup} performing signature update check... Aug 15 2026 03:36:05 mail maldet(30389): {sigup} local signature set is version 2026052490478 Aug 15 2026 03:36:06 mail maldet(30389): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 15 2026 03:36:06 mail maldet(30389): {sigup} latest signature set already installed Aug 15 2026 03:36:06 mail maldet(31260): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 15 2026 03:36:09 mail maldet(31260): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Aug 15 2026 03:36:09 mail maldet(31260): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Aug 15 2026 03:36:09 mail maldet(31260): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 15 2026 03:36:09 mail maldet(31260): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Aug 15 2026 03:48:11 mail maldet(31260): {scan} file list completed in 722s, found 1836 files... Aug 15 2026 03:48:11 mail maldet(31260): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Aug 15 2026 03:48:11 mail maldet(31260): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1836 files) in progress... Aug 15 2026 03:54:05 mail maldet(31260): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1836, malware hits 0, cleaned hits 0, time 1079s Aug 15 2026 03:54:05 mail maldet(31260): {scan} scan report saved, to view run: maldet --report 260815-0336.31260 Aug 16 2026 04:15:15 mail maldet(1172): {update} checking for available updates... Aug 16 2026 04:15:16 mail maldet(1172): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 16 2026 04:15:16 mail maldet(1172): {update} hashing install files and checking against server... Aug 16 2026 04:15:16 mail maldet(1172): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 16 2026 04:15:16 mail maldet(1172): {update} latest version already installed. Aug 16 2026 04:15:17 mail maldet(2065): {sigup} performing signature update check... Aug 16 2026 04:15:17 mail maldet(2065): {sigup} local signature set is version 2026052490478 Aug 16 2026 04:15:17 mail maldet(2065): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 16 2026 04:15:17 mail maldet(2065): {sigup} latest signature set already installed Aug 16 2026 04:15:18 mail maldet(2923): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 16 2026 04:15:19 mail maldet(2923): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Aug 16 2026 04:15:19 mail maldet(2923): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Aug 16 2026 04:15:19 mail maldet(2923): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 16 2026 04:15:19 mail maldet(2923): {scan} executed /bin/cpulimit -l 100 -- /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Aug 16 2026 04:25:26 mail maldet(2923): {scan} file list completed in 607s, found 959 files... Aug 16 2026 04:25:26 mail maldet(2923): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Aug 16 2026 04:25:26 mail maldet(2923): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (959 files) in progress... Aug 16 2026 04:29:44 mail maldet(2923): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 959, malware hits 0, cleaned hits 0, time 866s Aug 16 2026 04:29:44 mail maldet(2923): {scan} scan report saved, to view run: maldet --report 260816-0415.2923
修改文件时间
将文件时间修改为当前时间的前一年
删除文件