uscentral35: Wed Aug 2 22:29:34 EDT 2017: Logging to: /root/tmp/scanlog.1501727374 uscentral35: Wed Aug 2 22:29:34 EDT 2017: Logging to: /home/xzxphbpj/.security/scanlog.1501727374 uscentral35: Wed Aug 2 22:29:34 EDT 2017: Cleaning up. uscentral35: Wed Aug 2 22:29:34 EDT 2017: Preparing ClamAV. uscentral35: Wed Aug 2 22:29:57 EDT 2017: Preparation completed. uscentral35: Wed Aug 2 22:29:57 EDT 2017: Scan directory: /home/xzxphbpj uscentral35: Wed Aug 2 22:29:57 EDT 2017: Backup directory: /home/xzxphbpj/.security/scanbackup.1501727374 uscentral35: Wed Aug 2 22:29:57 EDT 2017: Scanning. /home/xzxphbpj/public_html/bestmassagechair.info/cgi-bin/lehknydj.php: HG.Shell.14.UNOFFICIAL FOUND /home/xzxphbpj/public_html/bestmassagechair.info/cgi-bin/lehknydj.php: moved to '/home/xzxphbpj/.security/scanbackup.1501727374/lehknydj.php' /home/xzxphbpj/public_html/bestmassagechair.info/cgi-bin/kmyozqls.php: SL-PHP-EVAL_REQUEST-avpx.UNOFFICIAL FOUND /home/xzxphbpj/public_html/bestmassagechair.info/cgi-bin/kmyozqls.php: moved to '/home/xzxphbpj/.security/scanbackup.1501727374/kmyozqls.php' /home/xzxphbpj/public_html/bestmassagechair.info/cgi-bin/lerspuzd.php: SL-PHP-EVAL_REQUEST-avhr.UNOFFICIAL FOUND /home/xzxphbpj/public_html/bestmassagechair.info/cgi-bin/lerspuzd.php: moved to '/home/xzxphbpj/.security/scanbackup.1501727374/lerspuzd.php' /home/xzxphbpj/public_html/bestmassagechair.info/test99.php: SL-PHP-EVAL_REQUEST-avpx.UNOFFICIAL FOUND /home/xzxphbpj/public_html/bestmassagechair.info/test99.php: moved to '/home/xzxphbpj/.security/scanbackup.1501727374/test99.php' /home/xzxphbpj/public_html/bestmassagechair.info/vimgtudc.php: HG.Shell.14.UNOFFICIAL FOUND /home/xzxphbpj/public_html/bestmassagechair.info/vimgtudc.php: moved to '/home/xzxphbpj/.security/scanbackup.1501727374/vimgtudc.php' /home/xzxphbpj/public_html/bestmassagechair.info/nfdglkpj.php: SL-PHP-EVAL_REQUEST-avpx.UNOFFICIAL FOUND /home/xzxphbpj/public_html/bestmassagechair.info/nfdglkpj.php: moved to '/home/xzxphbpj/.security/scanbackup.1501727374/nfdglkpj.php' /home/xzxphbpj/public_html/worldlifenow.com/wp-content/plugins/quick-adsense-reloaded/xppfwdva.php: HG.Shell.14.UNOFFICIAL FOUND /home/xzxphbpj/public_html/worldlifenow.com/wp-content/plugins/quick-adsense-reloaded/xppfwdva.php: moved to '/home/xzxphbpj/.security/scanbackup.1501727374/xppfwdva.php' /home/xzxphbpj/public_html/worldlifenow.com/wp-content/plugins/quick-adsense-reloaded/languages/index.php: SL-PHP-EVAL_REQUEST-avhr.UNOFFICIAL FOUND /home/xzxphbpj/public_html/worldlifenow.com/wp-content/plugins/quick-adsense-reloaded/languages/index.php: moved to '/home/xzxphbpj/.security/scanbackup.1501727374/index.php' /home/xzxphbpj/public_html/worldlifenow.com/wp-content/uploads/2017/06/khtatbew.php: PHP.Mailer-9.UNOFFICIAL FOUND /home/xzxphbpj/public_html/worldlifenow.com/wp-content/uploads/2017/06/khtatbew.php: moved to '/home/xzxphbpj/.security/scanbackup.1501727374/khtatbew.php' /home/xzxphbpj/public_html/worldlifenow.com/wp-content/themes/ruby/archive.php: SL-PHP-BACKDOOR-GENERIC-adr.UNOFFICIAL FOUND /home/xzxphbpj/public_html/worldlifenow.com/wp-content/themes/ruby/archive.php: moved to '/home/xzxphbpj/.security/scanbackup.1501727374/archive.php' /home/xzxphbpj/public_html/worldlifenow.com/wp-content/themes/sketch/languages/zzoctyez.php: PHP.Mailer-9.UNOFFICIAL FOUND /home/xzxphbpj/public_html/worldlifenow.com/wp-content/themes/sketch/languages/zzoctyez.php: moved to '/home/xzxphbpj/.security/scanbackup.1501727374/zzoctyez.php' /home/xzxphbpj/public_html/worldlifenow.com/wp-content/themes/sketch/languages/dhwxgzia.php: HG.Shell.14.UNOFFICIAL FOUND /home/xzxphbpj/public_html/worldlifenow.com/wp-content/themes/sketch/languages/dhwxgzia.php: moved to '/home/xzxphbpj/.security/scanbackup.1501727374/dhwxgzia.php' /home/xzxphbpj/public_html/worldlifenow.com/wp-content/themes/twentyseventeen/searchform.php: SL-PHP-BACKDOOR-GENERIC-adr.UNOFFICIAL FOUND /home/xzxphbpj/public_html/worldlifenow.com/wp-content/themes/twentyseventeen/searchform.php: moved to '/home/xzxphbpj/.security/scanbackup.1501727374/searchform.php' /home/xzxphbpj/public_html/worldlifenow.com/wp-content/themes/twentyfifteen/js/tqyfbxli.php: SL-PHP-FILEHACKER-ho.UNOFFICIAL FOUND /home/xzxphbpj/public_html/worldlifenow.com/wp-content/themes/twentyfifteen/kveezsji.php: PHP.Mailer-9.UNOFFICIAL FOUND /home/xzxphbpj/public_html/worldlifenow.com/wp-content/themes/twentyfifteen/kveezsji.php: moved to '/home/xzxphbpj/.security/scanbackup.1501727374/kveezsji.php' /home/xzxphbpj/public_html/worldlifenow.com/wp-content/themes/twentyfifteen/lzmagons.php: SL-PHP-EVAL_REQUEST-avpx.UNOFFICIAL FOUND /home/xzxphbpj/public_html/worldlifenow.com/wp-content/themes/twentyfifteen/lzmagons.php: moved to '/home/xzxphbpj/.security/scanbackup.1501727374/lzmagons.php' /home/xzxphbpj/public_html/worldlifenow.com/wp-includes/customize/ozevsbyh.php: PHP.Mailer-9.UNOFFICIAL FOUND /home/xzxphbpj/public_html/worldlifenow.com/wp-includes/customize/ozevsbyh.php: moved to '/home/xzxphbpj/.security/scanbackup.1501727374/ozevsbyh.php' /home/xzxphbpj/public_html/worldlifenow.com/wp-includes/rest-api/fields/sbsapnjy.php: PHP.Mailer-9.UNOFFICIAL FOUND /home/xzxphbpj/public_html/worldlifenow.com/wp-includes/rest-api/fields/sbsapnjy.php: moved to '/home/xzxphbpj/.security/scanbackup.1501727374/sbsapnjy.php' /home/xzxphbpj/public_html/worldlifenow.com/wp-includes/SimplePie/Content/hxutrock.php: PHP.Mailer-9.UNOFFICIAL FOUND /home/xzxphbpj/public_html/worldlifenow.com/wp-includes/SimplePie/Content/hxutrock.php: moved to '/home/xzxphbpj/.security/scanbackup.1501727374/hxutrock.php' /home/xzxphbpj/public_html/worldlifenow.com/wp-includes/SimplePie/Content/Type/nsqguwxa.php: HG.Shell.14.UNOFFICIAL FOUND /home/xzxphbpj/public_html/worldlifenow.com/wp-includes/SimplePie/Content/Type/nsqguwxa.php: moved to '/home/xzxphbpj/.security/scanbackup.1501727374/nsqguwxa.php' /home/xzxphbpj/public_html/worldlifenow.com/wp-includes/Text/Diff/Renderer/epvhnloy.php: PHP.Mailer-9.UNOFFICIAL FOUND /home/xzxphbpj/public_html/worldlifenow.com/wp-includes/Text/Diff/Renderer/epvhnloy.php: moved to '/home/xzxphbpj/.security/scanbackup.1501727374/epvhnloy.php' /home/xzxphbpj/public_html/worldlifenow.com/wp-includes/widgets/class-wp-nav-menu-widget.php: SL-PHP-BACKDOOR-GENERIC-adr.UNOFFICIAL FOUND /home/xzxphbpj/public_html/worldlifenow.com/wp-includes/widgets/class-wp-nav-menu-widget.php: moved to '/home/xzxphbpj/.security/scanbackup.1501727374/class-wp-nav-menu-widget.php' /home/xzxphbpj/public_html/worldlifenow.com/wp-includes/Requests/Transport/cURL.php: SL-PHP-BACKDOOR-GENERIC-adr.UNOFFICIAL FOUND /home/xzxphbpj/public_html/worldlifenow.com/wp-includes/Requests/Transport/cURL.php: moved to '/home/xzxphbpj/.security/scanbackup.1501727374/cURL.php' /home/xzxphbpj/public_html/worldlifenow.com/wp-includes/images/crystal/aboovncx.php: HG.Shell.14.UNOFFICIAL FOUND /home/xzxphbpj/public_html/worldlifenow.com/wp-includes/images/crystal/aboovncx.php: moved to '/home/xzxphbpj/.security/scanbackup.1501727374/aboovncx.php' /home/xzxphbpj/public_html/worldlifenow.com/wp-includes/images/smilies/favicon_4cabe1.ico: SL-PHP-FILEHACKER-hk.UNOFFICIAL FOUND /home/xzxphbpj/public_html/worldlifenow.com/wp-includes/images/smilies/favicon_4cabe1.ico: moved to '/home/xzxphbpj/.security/scanbackup.1501727374/favicon_4cabe1.ico' ----------- SCAN SUMMARY ----------- Known viruses: 1886881 Engine version: devel-clamav-0.99-beta1-632-g8a582c7 Scanned directories: 362 Scanned files: 2975 Infected files: 25 Data scanned: 76.57 MB Data read: 57.06 MB (ratio 1.34:1) Time: 17.409 sec (0 m 17 s) uscentral35: Wed Aug 2 22:30:15 EDT 2017: Scanning '/dev/shm'. ----------- SCAN SUMMARY ----------- Known viruses: 1886881 Engine version: devel-clamav-0.99-beta1-632-g8a582c7 Scanned directories: 0 Scanned files: 0 Infected files: 0 Data scanned: 0.00 MB Data read: 0.00 MB (ratio 0.00:1) Time: 3.303 sec (0 m 3 s) uscentral35: Wed Aug 2 22:30:18 EDT 2017: Scanning '/tmp'. ----------- SCAN SUMMARY ----------- Known viruses: 1886881 Engine version: devel-clamav-0.99-beta1-632-g8a582c7 Scanned directories: 0 Scanned files: 0 Infected files: 0 Data scanned: 0.00 MB Data read: 0.00 MB (ratio 0.00:1) Time: 3.295 sec (0 m 3 s) uscentral35: Wed Aug 2 22:30:21 EDT 2017: Scan Complete. uscentral35: Wed Aug 2 22:30:21 EDT 2017: Logging to: /root/tmp/scanlog.1501727421 uscentral35: Wed Aug 2 22:30:21 EDT 2017: Logging to: /home/apexdigi/.security/scanlog.1501727421 uscentral35: Wed Aug 2 22:30:21 EDT 2017: Cleaning up. uscentral35: Wed Aug 2 22:30:21 EDT 2017: Preparing ClamAV. uscentral35: Wed Aug 2 22:30:44 EDT 2017: Preparation completed. uscentral35: Wed Aug 2 22:30:44 EDT 2017: Scan directory: /home/apexdigi uscentral35: Wed Aug 2 22:30:44 EDT 2017: Backup directory: /home/apexdigi/.security/scanbackup.1501727421 uscentral35: Wed Aug 2 22:30:44 EDT 2017: Scanning. ----------- SCAN SUMMARY ----------- Known viruses: 1886881 Engine version: devel-clamav-0.99-beta1-632-g8a582c7 Scanned directories: 1839 Scanned files: 19253 Infected files: 0 Data scanned: 292.72 MB Data read: 879.84 MB (ratio 0.33:1) Time: 37.518 sec (0 m 37 s) uscentral35: Wed Aug 2 22:31:21 EDT 2017: Scanning '/dev/shm'. ----------- SCAN SUMMARY ----------- Known viruses: 1886881 Engine version: devel-clamav-0.99-beta1-632-g8a582c7 Scanned directories: 0 Scanned files: 0 Infected files: 0 Data scanned: 0.00 MB Data read: 0.00 MB (ratio 0.00:1) Time: 3.262 sec (0 m 3 s) uscentral35: Wed Aug 2 22:31:25 EDT 2017: Scanning '/tmp'. ----------- SCAN SUMMARY ----------- Known viruses: 1886881 Engine version: devel-clamav-0.99-beta1-632-g8a582c7 Scanned directories: 0 Scanned files: 0 Infected files: 0 Data scanned: 0.00 MB Data read: 0.00 MB (ratio 0.00:1) Time: 3.566 sec (0 m 3 s) uscentral35: Wed Aug 2 22:31:28 EDT 2017: Scan Complete. uscentral35: Wed Aug 2 22:31:28 EDT 2017: Logging to: /root/tmp/scanlog.1501727488 uscentral35: Wed Aug 2 22:31:28 EDT 2017: Logging to: /home/dajincn/.security/scanlog.1501727488 uscentral35: Wed Aug 2 22:31:28 EDT 2017: Cleaning up. uscentral35: Wed Aug 2 22:31:28 EDT 2017: Preparing ClamAV. uscentral35: Wed Aug 2 22:31:52 EDT 2017: Preparation completed. uscentral35: Wed Aug 2 22:31:52 EDT 2017: Scan directory: /home/dajincn uscentral35: Wed Aug 2 22:31:52 EDT 2017: Backup directory: /home/dajincn/.security/scanbackup.1501727488 uscentral35: Wed Aug 2 22:31:52 EDT 2017: Scanning. ----------- SCAN SUMMARY ----------- Known viruses: 1886881 Engine version: devel-clamav-0.99-beta1-632-g8a582c7 Scanned directories: 404 Scanned files: 3539 Infected files: 0 Data scanned: 156.31 MB Data read: 325.02 MB (ratio 0.48:1) Time: 24.072 sec (0 m 24 s) uscentral35: Wed Aug 2 22:32:16 EDT 2017: Scanning '/dev/shm'. ----------- SCAN SUMMARY ----------- Known viruses: 1886881 Engine version: devel-clamav-0.99-beta1-632-g8a582c7 Scanned directories: 0 Scanned files: 0 Infected files: 0 Data scanned: 0.00 MB Data read: 0.00 MB (ratio 0.00:1) Time: 3.262 sec (0 m 3 s) uscentral35: Wed Aug 2 22:32:20 EDT 2017: Scanning '/tmp'. ----------- SCAN SUMMARY ----------- Known viruses: 1886881 Engine version: devel-clamav-0.99-beta1-632-g8a582c7 Scanned directories: 0 Scanned files: 0 Infected files: 0 Data scanned: 0.00 MB Data read: 0.00 MB (ratio 0.00:1) Time: 3.416 sec (0 m 3 s) uscentral35: Wed Aug 2 22:32:23 EDT 2017: Scan Complete. uscentral35: Wed Aug 2 22:32:23 EDT 2017: Logging to: /root/tmp/scanlog.1501727543 uscentral35: Wed Aug 2 22:32:23 EDT 2017: Logging to: /home/contain/.security/scanlog.1501727543 uscentral35: Wed Aug 2 22:32:23 EDT 2017: Cleaning up. uscentral35: Wed Aug 2 22:32:23 EDT 2017: Preparing ClamAV. uscentral35: Wed Aug 2 22:32:45 EDT 2017: Preparation completed. uscentral35: Wed Aug 2 22:32:45 EDT 2017: Scan directory: /home/contain uscentral35: Wed Aug 2 22:32:46 EDT 2017: Backup directory: /home/contain/.security/scanbackup.1501727543 uscentral35: Wed Aug 2 22:32:46 EDT 2017: Scanning. ----------- SCAN SUMMARY ----------- Known viruses: 1886881 Engine version: devel-clamav-0.99-beta1-632-g8a582c7 Scanned directories: 525 Scanned files: 4001 Infected files: 0 Data scanned: 81.27 MB Data read: 58.60 MB (ratio 1.39:1) Time: 18.104 sec (0 m 18 s) uscentral35: Wed Aug 2 22:33:04 EDT 2017: Scanning '/dev/shm'. ----------- SCAN SUMMARY ----------- Known viruses: 1886881 Engine version: devel-clamav-0.99-beta1-632-g8a582c7 Scanned directories: 0 Scanned files: 0 Infected files: 0 Data scanned: 0.00 MB Data read: 0.00 MB (ratio 0.00:1) Time: 3.265 sec (0 m 3 s) uscentral35: Wed Aug 2 22:33:07 EDT 2017: Scanning '/tmp'. ----------- SCAN SUMMARY ----------- Known viruses: 1886881 Engine version: devel-clamav-0.99-beta1-632-g8a582c7 Scanned directories: 0 Scanned files: 0 Infected files: 0 Data scanned: 0.00 MB Data read: 0.00 MB (ratio 0.00:1) Time: 3.319 sec (0 m 3 s) uscentral35: Wed Aug 2 22:33:10 EDT 2017: Scan Complete.