![]() Server : Apache/2.4.62 (Unix) OpenSSL/1.0.2k-fips System : Linux server1.richineiserver.com 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64 User : fdshops ( 1003) PHP Version : 8.2.21 Disable Function : NONE Directory : /usr/local/maldetect.bk15108/logs/ |
Feb 27 2025 03:32:01 server1 maldet(32564): {sigup} performing signature update check... Feb 27 2025 03:32:01 server1 maldet(32564): {sigup} local signature set is version 20250225482944 Feb 27 2025 03:32:27 server1 maldet(32564): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 27 2025 03:32:27 server1 maldet(32564): {sigup} latest signature set already installed Feb 27 2025 03:32:27 server1 maldet(32211): {update} completed update v1.6.6 1591f0 => v1.6.6 359d25, running signature updates... Feb 27 2025 03:32:27 server1 maldet(32671): {sigup} performing signature update check... Feb 27 2025 03:32:27 server1 maldet(32671): {sigup} local signature set is version 20250225482944 Feb 27 2025 03:32:50 server1 maldet(32671): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 27 2025 03:32:50 server1 maldet(32671): {sigup} latest signature set already installed Feb 27 2025 03:32:50 server1 maldet(32211): {update} update and config import completed Feb 27 2025 03:32:50 server1 maldet(313): {sigup} performing signature update check... Feb 27 2025 03:32:50 server1 maldet(313): {sigup} local signature set is version 20250225482944 Feb 27 2025 03:33:13 server1 maldet(313): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 27 2025 03:33:13 server1 maldet(313): {sigup} latest signature set already installed Feb 27 2025 03:33:13 server1 maldet(429): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 27 2025 03:33:13 server1 maldet(429): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 27 2025 03:33:13 server1 maldet(429): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Feb 27 2025 03:33:13 server1 maldet(429): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 27 2025 03:33:13 server1 maldet(429): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 27 2025 03:33:18 server1 maldet(429): {scan} file list completed in 5s, found 57 files... Feb 27 2025 03:33:18 server1 maldet(429): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Feb 27 2025 03:33:18 server1 maldet(429): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (57 files) in progress... Feb 27 2025 03:33:54 server1 maldet(429): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 57, malware hits 0, cleaned hits 0, time 41s Feb 27 2025 03:33:54 server1 maldet(429): {scan} scan report saved, to view run: maldet --report 250227-0333.429 Feb 28 2025 03:48:30 server1 maldet(23046): {update} checking for available updates... Feb 28 2025 03:48:31 server1 maldet(23046): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 28 2025 03:48:31 server1 maldet(23046): {update} hashing install files and checking against server... Feb 28 2025 03:48:31 server1 maldet(23046): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 28 2025 03:48:31 server1 maldet(23046): {update} latest version already installed. Feb 28 2025 03:48:31 server1 maldet(23159): {sigup} performing signature update check... Feb 28 2025 03:48:31 server1 maldet(23159): {sigup} local signature set is version 20250225482944 Feb 28 2025 03:48:32 server1 maldet(23159): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 28 2025 03:48:32 server1 maldet(23159): {sigup} latest signature set already installed Feb 28 2025 03:48:32 server1 maldet(23251): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 28 2025 03:48:32 server1 maldet(23251): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 28 2025 03:48:32 server1 maldet(23251): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Feb 28 2025 03:48:32 server1 maldet(23251): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 28 2025 03:48:32 server1 maldet(23251): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 28 2025 03:48:37 server1 maldet(23251): {scan} file list completed in 5s, found 32 files... Feb 28 2025 03:48:37 server1 maldet(23251): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Feb 28 2025 03:48:37 server1 maldet(23251): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (32 files) in progress... Feb 28 2025 03:49:13 server1 maldet(23251): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 32, malware hits 0, cleaned hits 0, time 41s Feb 28 2025 03:49:13 server1 maldet(23251): {scan} scan report saved, to view run: maldet --report 250228-0348.23251 Mar 01 2025 03:36:35 server1 maldet(8598): {update} checking for available updates... Mar 01 2025 03:37:11 server1 maldet(8598): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 01 2025 03:37:11 server1 maldet(8598): {update} hashing install files and checking against server... Mar 01 2025 03:37:33 server1 maldet(8598): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 01 2025 03:37:33 server1 maldet(8598): {update} latest version already installed. Mar 01 2025 03:37:33 server1 maldet(8729): {sigup} performing signature update check... Mar 01 2025 03:37:33 server1 maldet(8729): {sigup} local signature set is version 20250225482944 Mar 01 2025 03:37:58 server1 maldet(8729): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 01 2025 03:37:58 server1 maldet(8729): {sigup} new signature set 202502281171132 available Mar 01 2025 03:37:58 server1 maldet(8729): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 01 2025 03:38:22 server1 maldet(8729): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 01 2025 03:39:20 server1 maldet(8729): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 01 2025 03:39:20 server1 maldet(8729): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 01 2025 03:40:14 server1 maldet(8729): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 01 2025 03:40:38 server1 maldet(8729): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 01 2025 03:40:38 server1 maldet(8729): {sigup} verified md5sum of maldet-sigpack.tgz Mar 01 2025 03:40:38 server1 maldet(8729): {sigup} unpacked and installed maldet-sigpack.tgz Mar 01 2025 03:40:38 server1 maldet(8729): {sigup} verified md5sum of maldet-clean.tgz Mar 01 2025 03:40:38 server1 maldet(8729): {sigup} unpacked and installed maldet-clean.tgz Mar 01 2025 03:40:38 server1 maldet(8729): {sigup} signature set update completed Mar 01 2025 03:40:38 server1 maldet(8729): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 01 2025 03:40:38 server1 maldet(9061): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 01 2025 03:40:38 server1 maldet(9061): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 01 2025 03:40:38 server1 maldet(9061): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 01 2025 03:40:38 server1 maldet(9061): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 01 2025 03:40:38 server1 maldet(9061): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 01 2025 03:40:40 server1 maldet(9061): {scan} file list completed in 2s, found 31 files... Mar 01 2025 03:40:40 server1 maldet(9061): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Mar 01 2025 03:40:40 server1 maldet(9061): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (31 files) in progress... Mar 01 2025 03:41:14 server1 maldet(9061): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 31, malware hits 0, cleaned hits 0, time 36s Mar 01 2025 03:41:14 server1 maldet(9061): {scan} scan report saved, to view run: maldet --report 250301-0340.9061 Mar 02 2025 03:20:58 server1 maldet(28379): {update} checking for available updates... Mar 02 2025 03:21:06 server1 maldet(28379): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 02 2025 03:21:06 server1 maldet(28379): {update} hashing install files and checking against server... Mar 02 2025 03:21:16 server1 maldet(28379): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 02 2025 03:21:16 server1 maldet(28379): {update} latest version already installed. Mar 02 2025 03:21:16 server1 maldet(28504): {sigup} performing signature update check... Mar 02 2025 03:21:16 server1 maldet(28504): {sigup} local signature set is version 202502281171132 Mar 02 2025 03:21:23 server1 maldet(28504): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 02 2025 03:21:23 server1 maldet(28504): {sigup} new signature set 202503011812952 available Mar 02 2025 03:21:23 server1 maldet(28504): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 02 2025 03:21:33 server1 maldet(28504): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 02 2025 03:21:42 server1 maldet(28504): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 02 2025 03:21:42 server1 maldet(28504): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 02 2025 03:21:51 server1 maldet(28504): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 02 2025 03:22:01 server1 maldet(28504): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 02 2025 03:22:01 server1 maldet(28504): {sigup} verified md5sum of maldet-sigpack.tgz Mar 02 2025 03:22:01 server1 maldet(28504): {sigup} unpacked and installed maldet-sigpack.tgz Mar 02 2025 03:22:01 server1 maldet(28504): {sigup} verified md5sum of maldet-clean.tgz Mar 02 2025 03:22:01 server1 maldet(28504): {sigup} unpacked and installed maldet-clean.tgz Mar 02 2025 03:22:01 server1 maldet(28504): {sigup} signature set update completed Mar 02 2025 03:22:02 server1 maldet(28504): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 02 2025 03:22:02 server1 maldet(28725): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 02 2025 03:22:02 server1 maldet(28725): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 02 2025 03:22:02 server1 maldet(28725): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 02 2025 03:22:02 server1 maldet(28725): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 02 2025 03:22:02 server1 maldet(28725): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 02 2025 03:22:03 server1 maldet(28725): {scan} file list completed in 1s, found 66 files... Mar 02 2025 03:22:03 server1 maldet(28725): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Mar 02 2025 03:22:03 server1 maldet(28725): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (66 files) in progress... Mar 02 2025 03:22:39 server1 maldet(28725): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 66, malware hits 0, cleaned hits 0, time 37s Mar 02 2025 03:22:39 server1 maldet(28725): {scan} scan report saved, to view run: maldet --report 250302-0322.28725 Mar 03 2025 03:42:10 server1 maldet(12572): {update} checking for available updates... Mar 03 2025 03:42:11 server1 maldet(12572): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 03 2025 03:42:11 server1 maldet(12572): {update} hashing install files and checking against server... Mar 03 2025 03:42:11 server1 maldet(12572): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 03 2025 03:42:11 server1 maldet(12572): {update} latest version already installed. Mar 03 2025 03:42:11 server1 maldet(12685): {sigup} performing signature update check... Mar 03 2025 03:42:11 server1 maldet(12685): {sigup} local signature set is version 202503011812952 Mar 03 2025 03:42:12 server1 maldet(12685): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 03 2025 03:42:12 server1 maldet(12685): {sigup} latest signature set already installed Mar 03 2025 03:42:12 server1 maldet(12781): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 03 2025 03:42:12 server1 maldet(12781): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 03 2025 03:42:12 server1 maldet(12781): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 03 2025 03:42:12 server1 maldet(12781): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 03 2025 03:42:12 server1 maldet(12781): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 03 2025 03:42:14 server1 maldet(12781): {scan} file list completed in 2s, found 42 files... Mar 03 2025 03:42:14 server1 maldet(12781): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Mar 03 2025 03:42:14 server1 maldet(12781): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (42 files) in progress... Mar 03 2025 03:42:52 server1 maldet(12781): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 42, malware hits 0, cleaned hits 0, time 40s Mar 03 2025 03:42:52 server1 maldet(12781): {scan} scan report saved, to view run: maldet --report 250303-0342.12781 Mar 04 2025 03:37:32 server1 maldet(30888): {update} checking for available updates... Mar 04 2025 03:37:33 server1 maldet(30888): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 04 2025 03:37:33 server1 maldet(30888): {update} hashing install files and checking against server... Mar 04 2025 03:37:34 server1 maldet(30888): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 04 2025 03:37:34 server1 maldet(30888): {update} latest version already installed. Mar 04 2025 03:37:34 server1 maldet(31001): {sigup} performing signature update check... Mar 04 2025 03:37:34 server1 maldet(31001): {sigup} local signature set is version 202503011812952 Mar 04 2025 03:37:35 server1 maldet(31001): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 04 2025 03:37:35 server1 maldet(31001): {sigup} latest signature set already installed Mar 04 2025 03:37:35 server1 maldet(31093): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 04 2025 03:37:35 server1 maldet(31093): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 04 2025 03:37:35 server1 maldet(31093): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 04 2025 03:37:35 server1 maldet(31093): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 04 2025 03:37:35 server1 maldet(31093): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 04 2025 03:37:36 server1 maldet(31093): {scan} file list completed in 1s, found 32 files... Mar 04 2025 03:37:36 server1 maldet(31093): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Mar 04 2025 03:37:36 server1 maldet(31093): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (32 files) in progress... Mar 04 2025 03:38:15 server1 maldet(31093): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 32, malware hits 0, cleaned hits 0, time 40s Mar 04 2025 03:38:15 server1 maldet(31093): {scan} scan report saved, to view run: maldet --report 250304-0337.31093 Mar 05 2025 03:20:10 server1 maldet(18791): {update} checking for available updates... Mar 05 2025 03:20:11 server1 maldet(18791): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 05 2025 03:20:11 server1 maldet(18791): {update} hashing install files and checking against server... Mar 05 2025 03:20:12 server1 maldet(18791): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 05 2025 03:20:12 server1 maldet(18791): {update} latest version already installed. Mar 05 2025 03:20:13 server1 maldet(18911): {sigup} performing signature update check... Mar 05 2025 03:20:13 server1 maldet(18911): {sigup} local signature set is version 202503011812952 Mar 05 2025 03:20:14 server1 maldet(18911): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 05 2025 03:20:14 server1 maldet(18911): {sigup} new signature set 20250304486819 available Mar 05 2025 03:20:14 server1 maldet(18911): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 05 2025 03:20:16 server1 maldet(18911): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 05 2025 03:20:18 server1 maldet(18911): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 05 2025 03:20:18 server1 maldet(18911): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 05 2025 03:20:20 server1 maldet(18911): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 05 2025 03:20:21 server1 maldet(18911): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 05 2025 03:20:21 server1 maldet(18911): {sigup} verified md5sum of maldet-sigpack.tgz Mar 05 2025 03:20:21 server1 maldet(18911): {sigup} unpacked and installed maldet-sigpack.tgz Mar 05 2025 03:20:21 server1 maldet(18911): {sigup} verified md5sum of maldet-clean.tgz Mar 05 2025 03:20:21 server1 maldet(18911): {sigup} unpacked and installed maldet-clean.tgz Mar 05 2025 03:20:21 server1 maldet(18911): {sigup} signature set update completed Mar 05 2025 03:20:21 server1 maldet(18911): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 05 2025 03:20:21 server1 maldet(19121): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 05 2025 03:20:21 server1 maldet(19121): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 05 2025 03:20:21 server1 maldet(19121): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 05 2025 03:20:21 server1 maldet(19121): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 05 2025 03:20:21 server1 maldet(19121): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 05 2025 03:20:23 server1 maldet(19121): {scan} file list completed in 2s, found 1449 files... Mar 05 2025 03:20:23 server1 maldet(19121): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Mar 05 2025 03:20:23 server1 maldet(19121): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1449 files) in progress... Mar 05 2025 03:21:19 server1 maldet(19121): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1449, malware hits 0, cleaned hits 0, time 58s Mar 05 2025 03:21:19 server1 maldet(19121): {scan} scan report saved, to view run: maldet --report 250305-0320.19121 Mar 06 2025 03:30:22 server1 maldet(4067): {update} checking for available updates... Mar 06 2025 03:30:23 server1 maldet(4067): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 06 2025 03:30:23 server1 maldet(4067): {update} hashing install files and checking against server... Mar 06 2025 03:30:23 server1 maldet(4067): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 06 2025 03:30:23 server1 maldet(4067): {update} latest version already installed. Mar 06 2025 03:30:23 server1 maldet(4180): {sigup} performing signature update check... Mar 06 2025 03:30:23 server1 maldet(4180): {sigup} local signature set is version 20250304486819 Mar 06 2025 03:30:24 server1 maldet(4180): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 06 2025 03:30:24 server1 maldet(4180): {sigup} latest signature set already installed Mar 06 2025 03:30:24 server1 maldet(4272): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 06 2025 03:30:24 server1 maldet(4272): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 06 2025 03:30:24 server1 maldet(4272): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 06 2025 03:30:24 server1 maldet(4272): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 06 2025 03:30:24 server1 maldet(4272): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 06 2025 03:30:28 server1 maldet(4272): {scan} file list completed in 4s, found 62 files... Mar 06 2025 03:30:28 server1 maldet(4272): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Mar 06 2025 03:30:28 server1 maldet(4272): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (62 files) in progress... Mar 06 2025 03:31:07 server1 maldet(4272): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 62, malware hits 0, cleaned hits 0, time 43s Mar 06 2025 03:31:07 server1 maldet(4272): {scan} scan report saved, to view run: maldet --report 250306-0330.4272 Mar 07 2025 03:24:40 server1 maldet(25785): {update} checking for available updates... Mar 07 2025 03:24:40 server1 maldet(25785): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 07 2025 03:24:40 server1 maldet(25785): {update} hashing install files and checking against server... Mar 07 2025 03:24:41 server1 maldet(25785): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 07 2025 03:24:41 server1 maldet(25785): {update} latest version already installed. Mar 07 2025 03:24:41 server1 maldet(25898): {sigup} performing signature update check... Mar 07 2025 03:24:41 server1 maldet(25898): {sigup} local signature set is version 20250304486819 Mar 07 2025 03:24:41 server1 maldet(25898): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 07 2025 03:24:41 server1 maldet(25898): {sigup} latest signature set already installed Mar 07 2025 03:24:41 server1 maldet(25990): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 07 2025 03:24:42 server1 maldet(25990): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 07 2025 03:24:42 server1 maldet(25990): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 07 2025 03:24:42 server1 maldet(25990): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 07 2025 03:24:42 server1 maldet(25990): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 07 2025 03:24:43 server1 maldet(25990): {scan} file list completed in 1s, found 56 files... Mar 07 2025 03:24:43 server1 maldet(25990): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Mar 07 2025 03:24:43 server1 maldet(25990): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (56 files) in progress... Mar 07 2025 03:25:17 server1 maldet(25990): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 56, malware hits 0, cleaned hits 0, time 36s Mar 07 2025 03:25:17 server1 maldet(25990): {scan} scan report saved, to view run: maldet --report 250307-0324.25990 Mar 08 2025 03:48:07 server1 maldet(12815): {update} checking for available updates... Mar 08 2025 03:48:54 server1 maldet(12815): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 08 2025 03:48:54 server1 maldet(12815): {update} hashing install files and checking against server... Mar 08 2025 03:49:18 server1 maldet(12815): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 08 2025 03:49:18 server1 maldet(12815): {update} latest version already installed. Mar 08 2025 03:49:18 server1 maldet(12958): {sigup} performing signature update check... Mar 08 2025 03:49:18 server1 maldet(12958): {sigup} local signature set is version 20250304486819 Mar 08 2025 03:49:49 server1 maldet(12958): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 08 2025 03:49:49 server1 maldet(12958): {sigup} new signature set 202503071159774 available Mar 08 2025 03:49:49 server1 maldet(12958): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 08 2025 03:50:16 server1 maldet(12958): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 08 2025 03:50:38 server1 maldet(12958): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 08 2025 03:50:38 server1 maldet(12958): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 08 2025 03:51:02 server1 maldet(12958): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 08 2025 03:51:49 server1 maldet(12958): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 08 2025 03:51:49 server1 maldet(12958): {sigup} verified md5sum of maldet-sigpack.tgz Mar 08 2025 03:51:49 server1 maldet(12958): {sigup} unpacked and installed maldet-sigpack.tgz Mar 08 2025 03:51:49 server1 maldet(12958): {sigup} verified md5sum of maldet-clean.tgz Mar 08 2025 03:51:49 server1 maldet(12958): {sigup} unpacked and installed maldet-clean.tgz Mar 08 2025 03:51:49 server1 maldet(12958): {sigup} signature set update completed Mar 08 2025 03:51:49 server1 maldet(12958): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 08 2025 03:51:49 server1 maldet(13302): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 08 2025 03:51:49 server1 maldet(13302): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 08 2025 03:51:49 server1 maldet(13302): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 08 2025 03:51:49 server1 maldet(13302): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 08 2025 03:51:49 server1 maldet(13302): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 08 2025 03:51:58 server1 maldet(13302): {scan} file list completed in 9s, found 48 files... Mar 08 2025 03:51:58 server1 maldet(13302): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Mar 08 2025 03:51:58 server1 maldet(13302): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (48 files) in progress... Mar 08 2025 03:52:31 server1 maldet(13302): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 48, malware hits 0, cleaned hits 0, time 42s Mar 08 2025 03:52:31 server1 maldet(13302): {scan} scan report saved, to view run: maldet --report 250308-0351.13302 Mar 09 2025 03:45:43 server1 maldet(2997): {update} checking for available updates... Mar 09 2025 03:45:43 server1 maldet(2997): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 09 2025 03:45:43 server1 maldet(2997): {update} hashing install files and checking against server... Mar 09 2025 03:45:44 server1 maldet(2997): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 09 2025 03:45:44 server1 maldet(2997): {update} latest version already installed. Mar 09 2025 03:45:44 server1 maldet(3110): {sigup} performing signature update check... Mar 09 2025 03:45:44 server1 maldet(3110): {sigup} local signature set is version 202503071159774 Mar 09 2025 03:45:45 server1 maldet(3110): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 09 2025 03:45:45 server1 maldet(3110): {sigup} latest signature set already installed Mar 09 2025 03:45:45 server1 maldet(3202): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 09 2025 03:45:45 server1 maldet(3202): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 09 2025 03:45:45 server1 maldet(3202): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 09 2025 03:45:45 server1 maldet(3202): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 09 2025 03:45:45 server1 maldet(3202): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 09 2025 03:45:46 server1 maldet(3202): {scan} file list completed in 1s, found 35 files... Mar 09 2025 03:45:46 server1 maldet(3202): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Mar 09 2025 03:45:46 server1 maldet(3202): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (35 files) in progress... Mar 09 2025 03:46:20 server1 maldet(3202): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 35, malware hits 0, cleaned hits 0, time 35s Mar 09 2025 03:46:20 server1 maldet(3202): {scan} scan report saved, to view run: maldet --report 250309-0345.3202 Mar 10 2025 03:22:17 server1 maldet(20591): {update} checking for available updates... Mar 10 2025 03:22:17 server1 maldet(20591): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 10 2025 03:22:17 server1 maldet(20591): {update} hashing install files and checking against server... Mar 10 2025 03:22:18 server1 maldet(20591): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 10 2025 03:22:18 server1 maldet(20591): {update} latest version already installed. Mar 10 2025 03:22:18 server1 maldet(20704): {sigup} performing signature update check... Mar 10 2025 03:22:18 server1 maldet(20704): {sigup} local signature set is version 202503071159774 Mar 10 2025 03:22:18 server1 maldet(20704): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 10 2025 03:22:18 server1 maldet(20704): {sigup} latest signature set already installed Mar 10 2025 03:22:18 server1 maldet(20796): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 10 2025 03:22:19 server1 maldet(20796): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 10 2025 03:22:19 server1 maldet(20796): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 10 2025 03:22:19 server1 maldet(20796): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 10 2025 03:22:19 server1 maldet(20796): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 10 2025 03:22:20 server1 maldet(20796): {scan} file list completed in 1s, found 33 files... Mar 10 2025 03:22:20 server1 maldet(20796): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Mar 10 2025 03:22:20 server1 maldet(20796): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (33 files) in progress... Mar 10 2025 03:22:54 server1 maldet(20796): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 33, malware hits 0, cleaned hits 0, time 36s Mar 10 2025 03:22:54 server1 maldet(20796): {scan} scan report saved, to view run: maldet --report 250310-0322.20796 Mar 11 2025 03:30:07 server1 maldet(5487): {update} checking for available updates... Mar 11 2025 03:30:08 server1 maldet(5487): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 11 2025 03:30:08 server1 maldet(5487): {update} hashing install files and checking against server... Mar 11 2025 03:30:09 server1 maldet(5487): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 11 2025 03:30:09 server1 maldet(5487): {update} latest version already installed. Mar 11 2025 03:30:09 server1 maldet(5600): {sigup} performing signature update check... Mar 11 2025 03:30:10 server1 maldet(5600): {sigup} local signature set is version 202503071159774 Mar 11 2025 03:30:10 server1 maldet(5600): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 11 2025 03:30:10 server1 maldet(5600): {sigup} latest signature set already installed Mar 11 2025 03:30:10 server1 maldet(5692): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 11 2025 03:30:10 server1 maldet(5692): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 11 2025 03:30:10 server1 maldet(5692): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 11 2025 03:30:10 server1 maldet(5692): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 11 2025 03:30:10 server1 maldet(5692): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 11 2025 03:30:12 server1 maldet(5692): {scan} file list completed in 2s, found 1709 files... Mar 11 2025 03:30:12 server1 maldet(5692): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Mar 11 2025 03:30:12 server1 maldet(5692): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1709 files) in progress... Mar 11 2025 03:31:04 server1 maldet(5692): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1709, malware hits 0, cleaned hits 0, time 54s Mar 11 2025 03:31:04 server1 maldet(5692): {scan} scan report saved, to view run: maldet --report 250311-0330.5692 Mar 12 2025 03:30:19 server1 maldet(23825): {update} checking for available updates... Mar 12 2025 03:30:19 server1 maldet(23825): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 12 2025 03:30:19 server1 maldet(23825): {update} hashing install files and checking against server... Mar 12 2025 03:30:20 server1 maldet(23825): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 12 2025 03:30:20 server1 maldet(23825): {update} latest version already installed. Mar 12 2025 03:30:20 server1 maldet(23939): {sigup} performing signature update check... Mar 12 2025 03:30:20 server1 maldet(23939): {sigup} local signature set is version 202503071159774 Mar 12 2025 03:30:21 server1 maldet(23939): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 12 2025 03:30:21 server1 maldet(23939): {sigup} latest signature set already installed Mar 12 2025 03:30:21 server1 maldet(24031): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 12 2025 03:30:21 server1 maldet(24031): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 12 2025 03:30:21 server1 maldet(24031): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 12 2025 03:30:21 server1 maldet(24031): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 12 2025 03:30:21 server1 maldet(24031): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 12 2025 03:30:22 server1 maldet(24031): {scan} file list completed in 1s, found 50 files... Mar 12 2025 03:30:22 server1 maldet(24031): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Mar 12 2025 03:30:22 server1 maldet(24031): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (50 files) in progress... Mar 12 2025 03:30:54 server1 maldet(24031): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 50, malware hits 0, cleaned hits 0, time 33s Mar 12 2025 03:30:54 server1 maldet(24031): {scan} scan report saved, to view run: maldet --report 250312-0330.24031 Mar 13 2025 03:20:41 server1 maldet(6082): {update} checking for available updates... Mar 13 2025 03:20:42 server1 maldet(6082): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 13 2025 03:20:42 server1 maldet(6082): {update} hashing install files and checking against server... Mar 13 2025 03:20:43 server1 maldet(6082): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 13 2025 03:20:43 server1 maldet(6082): {update} latest version already installed. Mar 13 2025 03:20:43 server1 maldet(6195): {sigup} performing signature update check... Mar 13 2025 03:20:43 server1 maldet(6195): {sigup} local signature set is version 202503071159774 Mar 13 2025 03:20:43 server1 maldet(6195): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 13 2025 03:20:43 server1 maldet(6195): {sigup} latest signature set already installed Mar 13 2025 03:20:43 server1 maldet(6287): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 13 2025 03:20:43 server1 maldet(6287): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 13 2025 03:20:43 server1 maldet(6287): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 13 2025 03:20:43 server1 maldet(6287): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 13 2025 03:20:43 server1 maldet(6287): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 13 2025 03:20:48 server1 maldet(6287): {scan} file list completed in 5s, found 23 files... Mar 13 2025 03:20:48 server1 maldet(6287): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Mar 13 2025 03:20:48 server1 maldet(6287): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (23 files) in progress... Mar 13 2025 03:21:18 server1 maldet(6287): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 23, malware hits 0, cleaned hits 0, time 35s Mar 13 2025 03:21:18 server1 maldet(6287): {scan} scan report saved, to view run: maldet --report 250313-0320.6287 Mar 14 2025 03:55:05 server1 maldet(27942): {update} checking for available updates... Mar 14 2025 03:55:07 server1 maldet(27942): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 14 2025 03:55:07 server1 maldet(27942): {update} hashing install files and checking against server... Mar 14 2025 03:55:07 server1 maldet(27942): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 14 2025 03:55:07 server1 maldet(27942): {update} latest version already installed. Mar 14 2025 03:55:07 server1 maldet(28056): {sigup} performing signature update check... Mar 14 2025 03:55:07 server1 maldet(28056): {sigup} local signature set is version 202503071159774 Mar 14 2025 03:55:08 server1 maldet(28056): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 14 2025 03:55:08 server1 maldet(28056): {sigup} new signature set 20250313525494 available Mar 14 2025 03:55:08 server1 maldet(28056): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 14 2025 03:55:09 server1 maldet(28056): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 14 2025 03:55:09 server1 maldet(28056): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 14 2025 03:55:09 server1 maldet(28056): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 14 2025 03:55:10 server1 maldet(28056): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 14 2025 03:55:10 server1 maldet(28056): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 14 2025 03:55:10 server1 maldet(28056): {sigup} verified md5sum of maldet-sigpack.tgz Mar 14 2025 03:55:10 server1 maldet(28056): {sigup} unpacked and installed maldet-sigpack.tgz Mar 14 2025 03:55:10 server1 maldet(28056): {sigup} verified md5sum of maldet-clean.tgz Mar 14 2025 03:55:10 server1 maldet(28056): {sigup} unpacked and installed maldet-clean.tgz Mar 14 2025 03:55:10 server1 maldet(28056): {sigup} signature set update completed Mar 14 2025 03:55:11 server1 maldet(28056): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 14 2025 03:55:11 server1 maldet(28265): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 14 2025 03:55:11 server1 maldet(28265): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 14 2025 03:55:11 server1 maldet(28265): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 14 2025 03:55:11 server1 maldet(28265): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 14 2025 03:55:11 server1 maldet(28265): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 14 2025 03:55:13 server1 maldet(28265): {scan} file list completed in 2s, found 60 files... Mar 14 2025 03:55:13 server1 maldet(28265): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Mar 14 2025 03:55:13 server1 maldet(28265): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (60 files) in progress... Mar 14 2025 03:55:51 server1 maldet(28265): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 60, malware hits 0, cleaned hits 0, time 40s Mar 14 2025 03:55:51 server1 maldet(28265): {scan} scan report saved, to view run: maldet --report 250314-0355.28265 Mar 15 2025 03:48:24 server1 maldet(16694): {update} checking for available updates... Mar 15 2025 03:48:25 server1 maldet(16694): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 15 2025 03:48:25 server1 maldet(16694): {update} hashing install files and checking against server... Mar 15 2025 03:48:25 server1 maldet(16694): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 15 2025 03:48:25 server1 maldet(16694): {update} latest version already installed. Mar 15 2025 03:48:25 server1 maldet(16807): {sigup} performing signature update check... Mar 15 2025 03:48:25 server1 maldet(16807): {sigup} local signature set is version 20250313525494 Mar 15 2025 03:48:26 server1 maldet(16807): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 15 2025 03:48:26 server1 maldet(16807): {sigup} latest signature set already installed Mar 15 2025 03:48:26 server1 maldet(16899): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 15 2025 03:48:26 server1 maldet(16899): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 15 2025 03:48:26 server1 maldet(16899): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 15 2025 03:48:26 server1 maldet(16899): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 15 2025 03:48:26 server1 maldet(16899): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 15 2025 03:48:29 server1 maldet(16899): {scan} file list completed in 3s, found 54 files... Mar 15 2025 03:48:29 server1 maldet(16899): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Mar 15 2025 03:48:29 server1 maldet(16899): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (54 files) in progress... Mar 15 2025 03:49:15 server1 maldet(16899): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 54, malware hits 0, cleaned hits 0, time 49s Mar 15 2025 03:49:15 server1 maldet(16899): {scan} scan report saved, to view run: maldet --report 250315-0348.16899 Mar 16 2025 03:51:39 server1 maldet(3932): {update} checking for available updates... Mar 16 2025 03:51:40 server1 maldet(3932): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 16 2025 03:51:40 server1 maldet(3932): {update} hashing install files and checking against server... Mar 16 2025 03:51:40 server1 maldet(3932): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 16 2025 03:51:40 server1 maldet(3932): {update} latest version already installed. Mar 16 2025 03:51:40 server1 maldet(4045): {sigup} performing signature update check... Mar 16 2025 03:51:40 server1 maldet(4045): {sigup} local signature set is version 20250313525494 Mar 16 2025 03:51:41 server1 maldet(4045): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 16 2025 03:51:41 server1 maldet(4045): {sigup} latest signature set already installed Mar 16 2025 03:51:41 server1 maldet(4137): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 16 2025 03:51:41 server1 maldet(4137): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 16 2025 03:51:41 server1 maldet(4137): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 16 2025 03:51:41 server1 maldet(4137): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 16 2025 03:51:41 server1 maldet(4137): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 16 2025 03:51:43 server1 maldet(4137): {scan} file list completed in 2s, found 44 files... Mar 16 2025 03:51:43 server1 maldet(4137): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Mar 16 2025 03:51:43 server1 maldet(4137): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (44 files) in progress... Mar 16 2025 03:52:26 server1 maldet(4137): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 44, malware hits 0, cleaned hits 0, time 45s Mar 16 2025 03:52:26 server1 maldet(4137): {scan} scan report saved, to view run: maldet --report 250316-0351.4137 Mar 17 2025 03:24:12 server1 maldet(17345): {update} checking for available updates... Mar 17 2025 03:24:40 server1 maldet(17345): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 17 2025 03:24:40 server1 maldet(17345): {update} hashing install files and checking against server... Mar 17 2025 03:25:04 server1 maldet(17345): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 17 2025 03:25:04 server1 maldet(17345): {update} latest version already installed. Mar 17 2025 03:25:04 server1 maldet(17531): {sigup} performing signature update check... Mar 17 2025 03:25:04 server1 maldet(17531): {sigup} local signature set is version 20250313525494 Mar 17 2025 03:25:25 server1 maldet(17531): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 17 2025 03:25:25 server1 maldet(17531): {sigup} new signature set 20250316483998 available Mar 17 2025 03:25:25 server1 maldet(17531): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 17 2025 03:25:45 server1 maldet(17531): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 17 2025 03:25:45 server1 maldet(17531): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 17 2025 03:25:45 server1 maldet(17531): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 17 2025 03:26:05 server1 maldet(17531): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 17 2025 03:26:23 server1 maldet(17531): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 17 2025 03:26:23 server1 maldet(17531): {sigup} verified md5sum of maldet-sigpack.tgz Mar 17 2025 03:26:23 server1 maldet(17531): {sigup} unpacked and installed maldet-sigpack.tgz Mar 17 2025 03:26:23 server1 maldet(17531): {sigup} verified md5sum of maldet-clean.tgz Mar 17 2025 03:26:23 server1 maldet(17531): {sigup} unpacked and installed maldet-clean.tgz Mar 17 2025 03:26:23 server1 maldet(17531): {sigup} signature set update completed Mar 17 2025 03:26:23 server1 maldet(17531): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 17 2025 03:26:23 server1 maldet(17771): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 17 2025 03:26:23 server1 maldet(17771): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 17 2025 03:26:23 server1 maldet(17771): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 17 2025 03:26:23 server1 maldet(17771): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 17 2025 03:26:23 server1 maldet(17771): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 17 2025 03:26:25 server1 maldet(17771): {scan} file list completed in 2s, found 39 files... Mar 17 2025 03:26:25 server1 maldet(17771): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Mar 17 2025 03:26:25 server1 maldet(17771): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (39 files) in progress... Mar 17 2025 03:27:03 server1 maldet(17771): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 39, malware hits 0, cleaned hits 0, time 40s Mar 17 2025 03:27:03 server1 maldet(17771): {scan} scan report saved, to view run: maldet --report 250317-0326.17771 Mar 18 2025 03:20:32 server1 maldet(4099): {update} checking for available updates... Mar 18 2025 03:20:33 server1 maldet(4099): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 18 2025 03:20:33 server1 maldet(4099): {update} hashing install files and checking against server... Mar 18 2025 03:20:33 server1 maldet(4099): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 18 2025 03:20:33 server1 maldet(4099): {update} latest version already installed. Mar 18 2025 03:20:34 server1 maldet(4212): {sigup} performing signature update check... Mar 18 2025 03:20:34 server1 maldet(4212): {sigup} local signature set is version 20250316483998 Mar 18 2025 03:20:34 server1 maldet(4212): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 18 2025 03:20:34 server1 maldet(4212): {sigup} latest signature set already installed Mar 18 2025 03:20:34 server1 maldet(4304): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 18 2025 03:20:34 server1 maldet(4304): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 18 2025 03:20:34 server1 maldet(4304): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 18 2025 03:20:34 server1 maldet(4304): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 18 2025 03:20:34 server1 maldet(4304): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 18 2025 03:20:40 server1 maldet(4304): {scan} file list completed in 6s, found 67 files... Mar 18 2025 03:20:40 server1 maldet(4304): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Mar 18 2025 03:20:40 server1 maldet(4304): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (67 files) in progress... Mar 18 2025 03:21:30 server1 maldet(4304): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 67, malware hits 0, cleaned hits 0, time 56s Mar 18 2025 03:21:30 server1 maldet(4304): {scan} scan report saved, to view run: maldet --report 250318-0320.4304 Mar 19 2025 03:22:13 server1 maldet(24723): {update} checking for available updates... Mar 19 2025 03:22:14 server1 maldet(24723): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 19 2025 03:22:14 server1 maldet(24723): {update} hashing install files and checking against server... Mar 19 2025 03:22:14 server1 maldet(24723): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 19 2025 03:22:14 server1 maldet(24723): {update} latest version already installed. Mar 19 2025 03:22:14 server1 maldet(24836): {sigup} performing signature update check... Mar 19 2025 03:22:14 server1 maldet(24836): {sigup} local signature set is version 20250316483998 Mar 19 2025 03:22:15 server1 maldet(24836): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 19 2025 03:22:15 server1 maldet(24836): {sigup} latest signature set already installed Mar 19 2025 03:22:15 server1 maldet(24928): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 19 2025 03:22:15 server1 maldet(24928): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 19 2025 03:22:15 server1 maldet(24928): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 19 2025 03:22:15 server1 maldet(24928): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 19 2025 03:22:15 server1 maldet(24928): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 19 2025 03:22:17 server1 maldet(24928): {scan} file list completed in 2s, found 1472 files... Mar 19 2025 03:22:17 server1 maldet(24928): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Mar 19 2025 03:22:17 server1 maldet(24928): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1472 files) in progress... Mar 19 2025 03:23:04 server1 maldet(24928): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1472, malware hits 0, cleaned hits 0, time 49s Mar 19 2025 03:23:04 server1 maldet(24928): {scan} scan report saved, to view run: maldet --report 250319-0322.24928 Mar 20 2025 03:18:41 server1 maldet(17774): {update} checking for available updates... Mar 20 2025 03:18:58 server1 maldet(17774): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 20 2025 03:18:58 server1 maldet(17774): {update} hashing install files and checking against server... Mar 20 2025 03:19:15 server1 maldet(17774): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 20 2025 03:19:15 server1 maldet(17774): {update} latest version already installed. Mar 20 2025 03:19:15 server1 maldet(17905): {sigup} performing signature update check... Mar 20 2025 03:19:15 server1 maldet(17905): {sigup} local signature set is version 20250316483998 Mar 20 2025 03:19:32 server1 maldet(17905): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 20 2025 03:19:32 server1 maldet(17905): {sigup} new signature set 20250319514026 available Mar 20 2025 03:19:32 server1 maldet(17905): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 20 2025 03:19:50 server1 maldet(17905): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 20 2025 03:20:10 server1 maldet(17905): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 20 2025 03:20:10 server1 maldet(17905): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 20 2025 03:20:33 server1 maldet(17905): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 20 2025 03:20:53 server1 maldet(17905): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 20 2025 03:20:53 server1 maldet(17905): {sigup} verified md5sum of maldet-sigpack.tgz Mar 20 2025 03:20:53 server1 maldet(17905): {sigup} unpacked and installed maldet-sigpack.tgz Mar 20 2025 03:20:53 server1 maldet(17905): {sigup} verified md5sum of maldet-clean.tgz Mar 20 2025 03:20:53 server1 maldet(17905): {sigup} unpacked and installed maldet-clean.tgz Mar 20 2025 03:20:53 server1 maldet(17905): {sigup} signature set update completed Mar 20 2025 03:20:53 server1 maldet(17905): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 20 2025 03:20:53 server1 maldet(18213): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 20 2025 03:20:53 server1 maldet(18213): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 20 2025 03:20:53 server1 maldet(18213): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 20 2025 03:20:53 server1 maldet(18213): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 20 2025 03:20:53 server1 maldet(18213): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 20 2025 03:20:55 server1 maldet(18213): {scan} file list completed in 2s, found 766 files... Mar 20 2025 03:20:55 server1 maldet(18213): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Mar 20 2025 03:20:55 server1 maldet(18213): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (766 files) in progress... Mar 20 2025 03:21:38 server1 maldet(18213): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 766, malware hits 0, cleaned hits 0, time 45s Mar 20 2025 03:21:38 server1 maldet(18213): {scan} scan report saved, to view run: maldet --report 250320-0320.18213 Mar 21 2025 03:41:39 server1 maldet(8386): {update} checking for available updates... Mar 21 2025 03:41:39 server1 maldet(8386): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 21 2025 03:41:39 server1 maldet(8386): {update} hashing install files and checking against server... Mar 21 2025 03:41:40 server1 maldet(8386): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 21 2025 03:41:40 server1 maldet(8386): {update} latest version already installed. Mar 21 2025 03:41:40 server1 maldet(8499): {sigup} performing signature update check... Mar 21 2025 03:41:40 server1 maldet(8499): {sigup} local signature set is version 20250319514026 Mar 21 2025 03:41:41 server1 maldet(8499): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 21 2025 03:41:41 server1 maldet(8499): {sigup} latest signature set already installed Mar 21 2025 03:41:41 server1 maldet(8591): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 21 2025 03:41:41 server1 maldet(8591): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 21 2025 03:41:41 server1 maldet(8591): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 21 2025 03:41:41 server1 maldet(8591): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 21 2025 03:41:41 server1 maldet(8591): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 21 2025 03:41:43 server1 maldet(8591): {scan} file list completed in 2s, found 58 files... Mar 21 2025 03:41:43 server1 maldet(8591): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Mar 21 2025 03:41:43 server1 maldet(8591): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (58 files) in progress... Mar 21 2025 03:42:15 server1 maldet(8591): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 58, malware hits 0, cleaned hits 0, time 34s Mar 21 2025 03:42:15 server1 maldet(8591): {scan} scan report saved, to view run: maldet --report 250321-0341.8591 Mar 22 2025 03:19:03 server1 maldet(31684): {update} checking for available updates... Mar 22 2025 03:19:03 server1 maldet(31684): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 22 2025 03:19:03 server1 maldet(31684): {update} hashing install files and checking against server... Mar 22 2025 03:19:04 server1 maldet(31684): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 22 2025 03:19:04 server1 maldet(31684): {update} latest version already installed. Mar 22 2025 03:19:04 server1 maldet(31797): {sigup} performing signature update check... Mar 22 2025 03:19:04 server1 maldet(31797): {sigup} local signature set is version 20250319514026 Mar 22 2025 03:19:04 server1 maldet(31797): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 22 2025 03:19:04 server1 maldet(31797): {sigup} latest signature set already installed Mar 22 2025 03:19:05 server1 maldet(31891): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 22 2025 03:19:05 server1 maldet(31891): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 22 2025 03:19:05 server1 maldet(31891): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 22 2025 03:19:05 server1 maldet(31891): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 22 2025 03:19:05 server1 maldet(31891): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 22 2025 03:19:09 server1 maldet(31891): {scan} file list completed in 4s, found 48 files... Mar 22 2025 03:19:09 server1 maldet(31891): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Mar 22 2025 03:19:09 server1 maldet(31891): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (48 files) in progress... Mar 22 2025 03:19:47 server1 maldet(31891): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 48, malware hits 0, cleaned hits 0, time 42s Mar 22 2025 03:19:47 server1 maldet(31891): {scan} scan report saved, to view run: maldet --report 250322-0319.31891 Mar 23 2025 03:50:41 server1 maldet(25801): {update} checking for available updates... Mar 23 2025 03:51:04 server1 maldet(25801): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 23 2025 03:51:04 server1 maldet(25801): {update} hashing install files and checking against server... Mar 23 2025 03:51:38 server1 maldet(25801): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 23 2025 03:51:38 server1 maldet(25801): {update} latest version already installed. Mar 23 2025 03:51:38 server1 maldet(25941): {sigup} performing signature update check... Mar 23 2025 03:51:38 server1 maldet(25941): {sigup} local signature set is version 20250319514026 Mar 23 2025 03:52:05 server1 maldet(25941): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 23 2025 03:52:05 server1 maldet(25941): {sigup} new signature set 202503221188379 available Mar 23 2025 03:52:05 server1 maldet(25941): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 23 2025 03:52:38 server1 maldet(25941): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 23 2025 03:53:05 server1 maldet(25941): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 23 2025 03:53:05 server1 maldet(25941): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 23 2025 03:53:26 server1 maldet(25941): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 23 2025 03:53:48 server1 maldet(25941): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 23 2025 03:53:48 server1 maldet(25941): {sigup} verified md5sum of maldet-sigpack.tgz Mar 23 2025 03:53:49 server1 maldet(25941): {sigup} unpacked and installed maldet-sigpack.tgz Mar 23 2025 03:53:49 server1 maldet(25941): {sigup} verified md5sum of maldet-clean.tgz Mar 23 2025 03:53:49 server1 maldet(25941): {sigup} unpacked and installed maldet-clean.tgz Mar 23 2025 03:53:49 server1 maldet(25941): {sigup} signature set update completed Mar 23 2025 03:53:49 server1 maldet(25941): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 23 2025 03:53:49 server1 maldet(26200): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 23 2025 03:53:49 server1 maldet(26200): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 23 2025 03:53:49 server1 maldet(26200): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 23 2025 03:53:49 server1 maldet(26200): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 23 2025 03:53:49 server1 maldet(26200): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 23 2025 03:53:51 server1 maldet(26200): {scan} file list completed in 2s, found 54 files... Mar 23 2025 03:53:51 server1 maldet(26200): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Mar 23 2025 03:53:51 server1 maldet(26200): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (54 files) in progress... Mar 23 2025 03:54:30 server1 maldet(26200): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 54, malware hits 0, cleaned hits 0, time 41s Mar 23 2025 03:54:30 server1 maldet(26200): {scan} scan report saved, to view run: maldet --report 250323-0353.26200 Mar 24 2025 03:24:03 server1 maldet(14687): {update} checking for available updates... Mar 24 2025 03:24:04 server1 maldet(14687): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 24 2025 03:24:04 server1 maldet(14687): {update} hashing install files and checking against server... Mar 24 2025 03:24:06 server1 maldet(14687): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 24 2025 03:24:06 server1 maldet(14687): {update} latest version already installed. Mar 24 2025 03:24:06 server1 maldet(14800): {sigup} performing signature update check... Mar 24 2025 03:24:07 server1 maldet(14800): {sigup} local signature set is version 202503221188379 Mar 24 2025 03:24:07 server1 maldet(14800): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 24 2025 03:24:07 server1 maldet(14800): {sigup} latest signature set already installed Mar 24 2025 03:24:07 server1 maldet(14892): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 24 2025 03:24:07 server1 maldet(14892): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 24 2025 03:24:07 server1 maldet(14892): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 24 2025 03:24:07 server1 maldet(14892): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 24 2025 03:24:07 server1 maldet(14892): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 24 2025 03:24:09 server1 maldet(14892): {scan} file list completed in 2s, found 36 files... Mar 24 2025 03:24:09 server1 maldet(14892): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Mar 24 2025 03:24:09 server1 maldet(14892): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (36 files) in progress... Mar 24 2025 03:24:57 server1 maldet(14892): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 36, malware hits 0, cleaned hits 0, time 50s Mar 24 2025 03:24:57 server1 maldet(14892): {scan} scan report saved, to view run: maldet --report 250324-0324.14892 Mar 25 2025 03:17:10 server1 maldet(4706): {update} checking for available updates... Mar 25 2025 03:17:11 server1 maldet(4706): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 25 2025 03:17:11 server1 maldet(4706): {update} hashing install files and checking against server... Mar 25 2025 03:17:11 server1 maldet(4706): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 25 2025 03:17:11 server1 maldet(4706): {update} latest version already installed. Mar 25 2025 03:17:11 server1 maldet(4819): {sigup} performing signature update check... Mar 25 2025 03:17:11 server1 maldet(4819): {sigup} local signature set is version 202503221188379 Mar 25 2025 03:17:12 server1 maldet(4819): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 25 2025 03:17:12 server1 maldet(4819): {sigup} latest signature set already installed Mar 25 2025 03:17:12 server1 maldet(4911): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 25 2025 03:17:12 server1 maldet(4911): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 25 2025 03:17:12 server1 maldet(4911): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 25 2025 03:17:12 server1 maldet(4911): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 25 2025 03:17:12 server1 maldet(4911): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 25 2025 03:17:19 server1 maldet(4911): {scan} file list completed in 7s, found 60 files... Mar 25 2025 03:17:19 server1 maldet(4911): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Mar 25 2025 03:17:19 server1 maldet(4911): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (60 files) in progress... Mar 25 2025 03:18:29 server1 maldet(4911): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 60, malware hits 0, cleaned hits 0, time 77s Mar 25 2025 03:18:29 server1 maldet(4911): {scan} scan report saved, to view run: maldet --report 250325-0317.4911 Mar 26 2025 04:46:17 server1 maldet(28022): {update} checking for available updates... Mar 26 2025 04:46:18 server1 maldet(28022): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 26 2025 04:46:18 server1 maldet(28022): {update} hashing install files and checking against server... Mar 26 2025 04:46:18 server1 maldet(28022): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 26 2025 04:46:18 server1 maldet(28022): {update} latest version already installed. Mar 26 2025 04:46:18 server1 maldet(28135): {sigup} performing signature update check... Mar 26 2025 04:46:18 server1 maldet(28135): {sigup} local signature set is version 202503221188379 Mar 26 2025 04:46:19 server1 maldet(28135): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 26 2025 04:46:19 server1 maldet(28135): {sigup} new signature set 202503251862979 available Mar 26 2025 04:46:19 server1 maldet(28135): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 26 2025 04:46:20 server1 maldet(28135): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 26 2025 04:46:20 server1 maldet(28135): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 26 2025 04:46:20 server1 maldet(28135): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 26 2025 04:46:21 server1 maldet(28135): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 26 2025 04:46:21 server1 maldet(28135): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 26 2025 04:46:21 server1 maldet(28135): {sigup} verified md5sum of maldet-sigpack.tgz Mar 26 2025 04:46:21 server1 maldet(28135): {sigup} unpacked and installed maldet-sigpack.tgz Mar 26 2025 04:46:21 server1 maldet(28135): {sigup} verified md5sum of maldet-clean.tgz Mar 26 2025 04:46:22 server1 maldet(28135): {sigup} unpacked and installed maldet-clean.tgz Mar 26 2025 04:46:22 server1 maldet(28135): {sigup} signature set update completed Mar 26 2025 04:46:22 server1 maldet(28135): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 26 2025 04:46:22 server1 maldet(28344): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 26 2025 04:46:22 server1 maldet(28344): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 26 2025 04:46:22 server1 maldet(28344): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 26 2025 04:46:22 server1 maldet(28344): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 26 2025 04:46:22 server1 maldet(28344): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 26 2025 04:46:26 server1 maldet(28344): {scan} file list completed in 4s, found 1714 files... Mar 26 2025 04:46:26 server1 maldet(28344): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Mar 26 2025 04:46:26 server1 maldet(28344): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1714 files) in progress... Mar 26 2025 04:47:44 server1 maldet(28344): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1714, malware hits 0, cleaned hits 0, time 82s Mar 26 2025 04:47:44 server1 maldet(28344): {scan} scan report saved, to view run: maldet --report 250326-0446.28344 Mar 27 2025 03:12:27 server1 maldet(16359): {update} checking for available updates... Mar 27 2025 03:12:28 server1 maldet(16359): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 27 2025 03:12:28 server1 maldet(16359): {update} hashing install files and checking against server... Mar 27 2025 03:12:28 server1 maldet(16359): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 27 2025 03:12:28 server1 maldet(16359): {update} latest version already installed. Mar 27 2025 03:12:28 server1 maldet(16472): {sigup} performing signature update check... Mar 27 2025 03:12:28 server1 maldet(16472): {sigup} local signature set is version 202503251862979 Mar 27 2025 03:12:29 server1 maldet(16472): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 27 2025 03:12:29 server1 maldet(16472): {sigup} latest signature set already installed Mar 27 2025 03:12:29 server1 maldet(16564): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 27 2025 03:12:29 server1 maldet(16564): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 27 2025 03:12:29 server1 maldet(16564): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 27 2025 03:12:29 server1 maldet(16564): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 27 2025 03:12:29 server1 maldet(16564): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 27 2025 03:12:34 server1 maldet(16564): {scan} file list completed in 5s, found 62 files... Mar 27 2025 03:12:34 server1 maldet(16564): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Mar 27 2025 03:12:34 server1 maldet(16564): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (62 files) in progress... Mar 27 2025 03:13:11 server1 maldet(16564): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 62, malware hits 0, cleaned hits 0, time 42s Mar 27 2025 03:13:11 server1 maldet(16564): {scan} scan report saved, to view run: maldet --report 250327-0312.16564 Mar 28 2025 03:19:11 server1 maldet(7648): {update} checking for available updates... Mar 28 2025 03:19:11 server1 maldet(7648): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 28 2025 03:19:11 server1 maldet(7648): {update} hashing install files and checking against server... Mar 28 2025 03:19:12 server1 maldet(7648): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 28 2025 03:19:12 server1 maldet(7648): {update} latest version already installed. Mar 28 2025 03:19:12 server1 maldet(7765): {sigup} performing signature update check... Mar 28 2025 03:19:12 server1 maldet(7765): {sigup} local signature set is version 202503251862979 Mar 28 2025 03:19:12 server1 maldet(7765): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 28 2025 03:19:12 server1 maldet(7765): {sigup} latest signature set already installed Mar 28 2025 03:19:12 server1 maldet(7857): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 28 2025 03:19:13 server1 maldet(7857): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 28 2025 03:19:13 server1 maldet(7857): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 28 2025 03:19:13 server1 maldet(7857): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 28 2025 03:19:13 server1 maldet(7857): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 28 2025 03:19:15 server1 maldet(7857): {scan} file list completed in 2s, found 54 files... Mar 28 2025 03:19:15 server1 maldet(7857): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Mar 28 2025 03:19:15 server1 maldet(7857): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (54 files) in progress... Mar 28 2025 03:19:46 server1 maldet(7857): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 54, malware hits 0, cleaned hits 0, time 34s Mar 28 2025 03:19:46 server1 maldet(7857): {scan} scan report saved, to view run: maldet --report 250328-0319.7857 Mar 29 2025 03:22:16 server1 maldet(28139): {update} checking for available updates... Mar 29 2025 03:22:24 server1 maldet(28139): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 29 2025 03:22:24 server1 maldet(28139): {update} hashing install files and checking against server... Mar 29 2025 03:22:34 server1 maldet(28139): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 29 2025 03:22:34 server1 maldet(28139): {update} latest version already installed. Mar 29 2025 03:22:34 server1 maldet(28255): {sigup} performing signature update check... Mar 29 2025 03:22:34 server1 maldet(28255): {sigup} local signature set is version 202503251862979 Mar 29 2025 03:22:43 server1 maldet(28255): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 29 2025 03:22:43 server1 maldet(28255): {sigup} new signature set 202503282537907 available Mar 29 2025 03:22:43 server1 maldet(28255): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 29 2025 03:22:54 server1 maldet(28255): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 29 2025 03:23:04 server1 maldet(28255): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 29 2025 03:23:04 server1 maldet(28255): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 29 2025 03:23:15 server1 maldet(28255): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 29 2025 03:23:26 server1 maldet(28255): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 29 2025 03:23:26 server1 maldet(28255): {sigup} verified md5sum of maldet-sigpack.tgz Mar 29 2025 03:23:26 server1 maldet(28255): {sigup} unpacked and installed maldet-sigpack.tgz Mar 29 2025 03:23:26 server1 maldet(28255): {sigup} verified md5sum of maldet-clean.tgz Mar 29 2025 03:23:26 server1 maldet(28255): {sigup} unpacked and installed maldet-clean.tgz Mar 29 2025 03:23:26 server1 maldet(28255): {sigup} signature set update completed Mar 29 2025 03:23:26 server1 maldet(28255): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 29 2025 03:23:26 server1 maldet(28478): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 29 2025 03:23:26 server1 maldet(28478): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 29 2025 03:23:26 server1 maldet(28478): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 29 2025 03:23:26 server1 maldet(28478): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 29 2025 03:23:26 server1 maldet(28478): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 29 2025 03:23:29 server1 maldet(28478): {scan} file list completed in 3s, found 52 files... Mar 29 2025 03:23:29 server1 maldet(28478): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Mar 29 2025 03:23:29 server1 maldet(28478): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (52 files) in progress... Mar 29 2025 03:24:02 server1 maldet(28478): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 52, malware hits 0, cleaned hits 0, time 36s Mar 29 2025 03:24:02 server1 maldet(28478): {scan} scan report saved, to view run: maldet --report 250329-0323.28478 Mar 30 2025 03:51:30 server1 maldet(15997): {update} checking for available updates... Mar 30 2025 03:51:30 server1 maldet(15997): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 30 2025 03:51:30 server1 maldet(15997): {update} hashing install files and checking against server... Mar 30 2025 03:51:31 server1 maldet(15997): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 30 2025 03:51:31 server1 maldet(15997): {update} latest version already installed. Mar 30 2025 03:51:31 server1 maldet(16110): {sigup} performing signature update check... Mar 30 2025 03:51:31 server1 maldet(16110): {sigup} local signature set is version 202503282537907 Mar 30 2025 03:51:31 server1 maldet(16110): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 30 2025 03:51:31 server1 maldet(16110): {sigup} latest signature set already installed Mar 30 2025 03:51:32 server1 maldet(16202): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 30 2025 03:51:32 server1 maldet(16202): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 30 2025 03:51:32 server1 maldet(16202): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 30 2025 03:51:32 server1 maldet(16202): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 30 2025 03:51:32 server1 maldet(16202): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 30 2025 03:51:33 server1 maldet(16202): {scan} file list completed in 1s, found 34 files... Mar 30 2025 03:51:33 server1 maldet(16202): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Mar 30 2025 03:51:33 server1 maldet(16202): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (34 files) in progress... Mar 30 2025 03:52:04 server1 maldet(16202): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 34, malware hits 0, cleaned hits 0, time 32s Mar 30 2025 03:52:04 server1 maldet(16202): {scan} scan report saved, to view run: maldet --report 250330-0351.16202 Mar 31 2025 03:59:32 server1 maldet(31145): {update} checking for available updates... Mar 31 2025 03:59:33 server1 maldet(31145): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 31 2025 03:59:33 server1 maldet(31145): {update} hashing install files and checking against server... Mar 31 2025 03:59:33 server1 maldet(31145): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 31 2025 03:59:33 server1 maldet(31145): {update} latest version already installed. Mar 31 2025 03:59:33 server1 maldet(31258): {sigup} performing signature update check... Mar 31 2025 03:59:33 server1 maldet(31258): {sigup} local signature set is version 202503282537907 Mar 31 2025 03:59:34 server1 maldet(31258): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 31 2025 03:59:34 server1 maldet(31258): {sigup} latest signature set already installed Mar 31 2025 03:59:34 server1 maldet(31350): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 31 2025 03:59:34 server1 maldet(31350): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 31 2025 03:59:34 server1 maldet(31350): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 31 2025 03:59:34 server1 maldet(31350): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 31 2025 03:59:34 server1 maldet(31350): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 31 2025 03:59:36 server1 maldet(31350): {scan} file list completed in 2s, found 29 files... Mar 31 2025 03:59:36 server1 maldet(31350): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Mar 31 2025 03:59:36 server1 maldet(31350): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (29 files) in progress... Mar 31 2025 04:00:12 server1 maldet(31350): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 29, malware hits 0, cleaned hits 0, time 38s Mar 31 2025 04:00:12 server1 maldet(31350): {scan} scan report saved, to view run: maldet --report 250331-0359.31350 Apr 01 2025 03:34:10 server1 maldet(15612): {update} checking for available updates... Apr 01 2025 03:34:57 server1 maldet(15612): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 01 2025 03:34:57 server1 maldet(15612): {update} hashing install files and checking against server... Apr 01 2025 03:35:29 server1 maldet(15612): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 01 2025 03:35:29 server1 maldet(15612): {update} latest version already installed. Apr 01 2025 03:35:29 server1 maldet(15807): {sigup} performing signature update check... Apr 01 2025 03:35:29 server1 maldet(15807): {sigup} local signature set is version 202503282537907 Apr 01 2025 03:35:29 server1 maldet(15807): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 01 2025 03:35:29 server1 maldet(15807): {sigup} new signature set 202503313275323 available Apr 01 2025 03:35:29 server1 maldet(15807): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 01 2025 03:36:12 server1 maldet(15807): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 01 2025 03:37:03 server1 maldet(15807): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 01 2025 03:37:03 server1 maldet(15807): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 01 2025 03:37:27 server1 maldet(15807): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 01 2025 03:37:50 server1 maldet(15807): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 01 2025 03:37:50 server1 maldet(15807): {sigup} verified md5sum of maldet-sigpack.tgz Apr 01 2025 03:37:50 server1 maldet(15807): {sigup} unpacked and installed maldet-sigpack.tgz Apr 01 2025 03:37:50 server1 maldet(15807): {sigup} verified md5sum of maldet-clean.tgz Apr 01 2025 03:37:50 server1 maldet(15807): {sigup} unpacked and installed maldet-clean.tgz Apr 01 2025 03:37:50 server1 maldet(15807): {sigup} signature set update completed Apr 01 2025 03:37:50 server1 maldet(15807): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 01 2025 03:37:50 server1 maldet(16088): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 01 2025 03:37:51 server1 maldet(16088): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 01 2025 03:37:51 server1 maldet(16088): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 01 2025 03:37:51 server1 maldet(16088): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 01 2025 03:37:51 server1 maldet(16088): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 01 2025 03:37:52 server1 maldet(16088): {scan} file list completed in 1s, found 27 files... Apr 01 2025 03:37:52 server1 maldet(16088): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Apr 01 2025 03:37:52 server1 maldet(16088): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (27 files) in progress... Apr 01 2025 03:38:26 server1 maldet(16088): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 27, malware hits 0, cleaned hits 0, time 36s Apr 01 2025 03:38:26 server1 maldet(16088): {scan} scan report saved, to view run: maldet --report 250401-0337.16088 Apr 02 2025 03:15:04 server1 maldet(31795): {update} checking for available updates... Apr 02 2025 03:15:05 server1 maldet(31795): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 02 2025 03:15:05 server1 maldet(31795): {update} hashing install files and checking against server... Apr 02 2025 03:15:06 server1 maldet(31795): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 02 2025 03:15:06 server1 maldet(31795): {update} latest version already installed. Apr 02 2025 03:15:06 server1 maldet(31908): {sigup} performing signature update check... Apr 02 2025 03:15:06 server1 maldet(31908): {sigup} local signature set is version 202503313275323 Apr 02 2025 03:15:07 server1 maldet(31908): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 02 2025 03:15:07 server1 maldet(31908): {sigup} new signature set 202504013916532 available Apr 02 2025 03:15:07 server1 maldet(31908): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 02 2025 03:15:07 server1 maldet(31908): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 02 2025 03:15:08 server1 maldet(31908): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 02 2025 03:15:08 server1 maldet(31908): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 02 2025 03:15:08 server1 maldet(31908): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 02 2025 03:15:09 server1 maldet(31908): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 02 2025 03:15:09 server1 maldet(31908): {sigup} verified md5sum of maldet-sigpack.tgz Apr 02 2025 03:15:09 server1 maldet(31908): {sigup} unpacked and installed maldet-sigpack.tgz Apr 02 2025 03:15:09 server1 maldet(31908): {sigup} verified md5sum of maldet-clean.tgz Apr 02 2025 03:15:09 server1 maldet(31908): {sigup} unpacked and installed maldet-clean.tgz Apr 02 2025 03:15:09 server1 maldet(31908): {sigup} signature set update completed Apr 02 2025 03:15:09 server1 maldet(31908): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 02 2025 03:15:09 server1 maldet(32118): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 02 2025 03:15:09 server1 maldet(32118): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 02 2025 03:15:09 server1 maldet(32118): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 02 2025 03:15:09 server1 maldet(32118): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 02 2025 03:15:09 server1 maldet(32118): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 02 2025 03:15:11 server1 maldet(32118): {scan} file list completed in 2s, found 1459 files... Apr 02 2025 03:15:11 server1 maldet(32118): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Apr 02 2025 03:15:11 server1 maldet(32118): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1459 files) in progress... Apr 02 2025 03:16:02 server1 maldet(32118): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1459, malware hits 0, cleaned hits 0, time 53s Apr 02 2025 03:16:02 server1 maldet(32118): {scan} scan report saved, to view run: maldet --report 250402-0315.32118 Apr 03 2025 03:43:03 server1 maldet(16434): {update} checking for available updates... Apr 03 2025 03:43:04 server1 maldet(16434): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 03 2025 03:43:04 server1 maldet(16434): {update} hashing install files and checking against server... Apr 03 2025 03:43:04 server1 maldet(16434): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 03 2025 03:43:04 server1 maldet(16434): {update} latest version already installed. Apr 03 2025 03:43:04 server1 maldet(16547): {sigup} performing signature update check... Apr 03 2025 03:43:04 server1 maldet(16547): {sigup} local signature set is version 202504013916532 Apr 03 2025 03:43:05 server1 maldet(16547): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 03 2025 03:43:05 server1 maldet(16547): {sigup} latest signature set already installed Apr 03 2025 03:43:05 server1 maldet(16639): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 03 2025 03:43:05 server1 maldet(16639): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 03 2025 03:43:05 server1 maldet(16639): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 03 2025 03:43:05 server1 maldet(16639): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 03 2025 03:43:05 server1 maldet(16639): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 03 2025 03:43:07 server1 maldet(16639): {scan} file list completed in 2s, found 1457 files... Apr 03 2025 03:43:07 server1 maldet(16639): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Apr 03 2025 03:43:07 server1 maldet(16639): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1457 files) in progress... Apr 03 2025 03:43:59 server1 maldet(16639): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1457, malware hits 0, cleaned hits 0, time 54s Apr 03 2025 03:43:59 server1 maldet(16639): {scan} scan report saved, to view run: maldet --report 250403-0343.16639 Apr 04 2025 03:20:49 server1 maldet(1114): {update} checking for available updates... Apr 04 2025 03:20:49 server1 maldet(1114): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 04 2025 03:20:49 server1 maldet(1114): {update} hashing install files and checking against server... Apr 04 2025 03:20:50 server1 maldet(1114): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 04 2025 03:20:50 server1 maldet(1114): {update} latest version already installed. Apr 04 2025 03:20:50 server1 maldet(1230): {sigup} performing signature update check... Apr 04 2025 03:20:50 server1 maldet(1230): {sigup} local signature set is version 202504013916532 Apr 04 2025 03:20:50 server1 maldet(1230): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 04 2025 03:20:50 server1 maldet(1230): {sigup} latest signature set already installed Apr 04 2025 03:20:51 server1 maldet(1333): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 04 2025 03:20:51 server1 maldet(1333): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 04 2025 03:20:51 server1 maldet(1333): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 04 2025 03:20:51 server1 maldet(1333): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 04 2025 03:20:51 server1 maldet(1333): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 04 2025 03:20:55 server1 maldet(1333): {scan} file list completed in 4s, found 61 files... Apr 04 2025 03:20:55 server1 maldet(1333): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Apr 04 2025 03:20:55 server1 maldet(1333): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (61 files) in progress... Apr 04 2025 03:21:30 server1 maldet(1333): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 61, malware hits 0, cleaned hits 0, time 39s Apr 04 2025 03:21:30 server1 maldet(1333): {scan} scan report saved, to view run: maldet --report 250404-0320.1333 Apr 05 2025 03:29:51 server1 maldet(19723): {update} checking for available updates... Apr 05 2025 03:30:55 server1 maldet(19723): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 05 2025 03:30:55 server1 maldet(19723): {update} hashing install files and checking against server... Apr 05 2025 03:31:24 server1 maldet(19723): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 05 2025 03:31:24 server1 maldet(19723): {update} latest version already installed. Apr 05 2025 03:31:24 server1 maldet(19941): {sigup} performing signature update check... Apr 05 2025 03:31:24 server1 maldet(19941): {sigup} local signature set is version 202504013916532 Apr 05 2025 03:32:15 server1 maldet(19941): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 05 2025 03:32:15 server1 maldet(19941): {sigup} new signature set 20250404517655 available Apr 05 2025 03:32:15 server1 maldet(19941): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 05 2025 03:32:48 server1 maldet(19941): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 05 2025 03:33:14 server1 maldet(19941): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 05 2025 03:33:14 server1 maldet(19941): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 05 2025 03:33:39 server1 maldet(19941): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 05 2025 03:34:26 server1 maldet(19941): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 05 2025 03:34:26 server1 maldet(19941): {sigup} verified md5sum of maldet-sigpack.tgz Apr 05 2025 03:34:26 server1 maldet(19941): {sigup} unpacked and installed maldet-sigpack.tgz Apr 05 2025 03:34:26 server1 maldet(19941): {sigup} verified md5sum of maldet-clean.tgz Apr 05 2025 03:34:26 server1 maldet(19941): {sigup} unpacked and installed maldet-clean.tgz Apr 05 2025 03:34:26 server1 maldet(19941): {sigup} signature set update completed Apr 05 2025 03:34:26 server1 maldet(19941): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 05 2025 03:34:26 server1 maldet(20205): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 05 2025 03:34:26 server1 maldet(20205): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 05 2025 03:34:26 server1 maldet(20205): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 05 2025 03:34:26 server1 maldet(20205): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 05 2025 03:34:26 server1 maldet(20205): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 05 2025 03:34:28 server1 maldet(20205): {scan} file list completed in 2s, found 166 files... Apr 05 2025 03:34:28 server1 maldet(20205): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Apr 05 2025 03:34:28 server1 maldet(20205): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (166 files) in progress... Apr 05 2025 03:35:18 server1 maldet(20205): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 166, malware hits 0, cleaned hits 0, time 52s Apr 05 2025 03:35:18 server1 maldet(20205): {scan} scan report saved, to view run: maldet --report 250405-0334.20205 Apr 06 2025 03:33:57 server1 maldet(9807): {update} checking for available updates... Apr 06 2025 03:33:58 server1 maldet(9807): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 06 2025 03:33:58 server1 maldet(9807): {update} hashing install files and checking against server... Apr 06 2025 03:33:58 server1 maldet(9807): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 06 2025 03:33:58 server1 maldet(9807): {update} latest version already installed. Apr 06 2025 03:33:58 server1 maldet(9920): {sigup} performing signature update check... Apr 06 2025 03:33:58 server1 maldet(9920): {sigup} local signature set is version 20250404517655 Apr 06 2025 03:33:59 server1 maldet(9920): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 06 2025 03:33:59 server1 maldet(9920): {sigup} latest signature set already installed Apr 06 2025 03:33:59 server1 maldet(10012): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 06 2025 03:33:59 server1 maldet(10012): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 06 2025 03:33:59 server1 maldet(10012): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 06 2025 03:33:59 server1 maldet(10012): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 06 2025 03:33:59 server1 maldet(10012): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 06 2025 03:34:01 server1 maldet(10012): {scan} file list completed in 2s, found 36 files... Apr 06 2025 03:34:01 server1 maldet(10012): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Apr 06 2025 03:34:01 server1 maldet(10012): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (36 files) in progress... Apr 06 2025 03:34:47 server1 maldet(10012): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 36, malware hits 0, cleaned hits 0, time 48s Apr 06 2025 03:34:47 server1 maldet(10012): {scan} scan report saved, to view run: maldet --report 250406-0333.10012 Apr 07 2025 03:23:05 server1 maldet(24272): {update} checking for available updates... Apr 07 2025 03:23:06 server1 maldet(24272): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 07 2025 03:23:06 server1 maldet(24272): {update} hashing install files and checking against server... Apr 07 2025 03:23:07 server1 maldet(24272): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 07 2025 03:23:07 server1 maldet(24272): {update} latest version already installed. Apr 07 2025 03:23:07 server1 maldet(24385): {sigup} performing signature update check... Apr 07 2025 03:23:07 server1 maldet(24385): {sigup} local signature set is version 20250404517655 Apr 07 2025 03:23:07 server1 maldet(24385): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 07 2025 03:23:07 server1 maldet(24385): {sigup} latest signature set already installed Apr 07 2025 03:23:07 server1 maldet(24477): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 07 2025 03:23:07 server1 maldet(24477): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 07 2025 03:23:07 server1 maldet(24477): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 07 2025 03:23:07 server1 maldet(24477): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 07 2025 03:23:07 server1 maldet(24477): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 07 2025 03:23:11 server1 maldet(24477): {scan} file list completed in 4s, found 34 files... Apr 07 2025 03:23:11 server1 maldet(24477): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Apr 07 2025 03:23:11 server1 maldet(24477): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (34 files) in progress... Apr 07 2025 03:23:55 server1 maldet(24477): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 34, malware hits 0, cleaned hits 0, time 48s Apr 07 2025 03:23:55 server1 maldet(24477): {scan} scan report saved, to view run: maldet --report 250407-0323.24477 Apr 08 2025 03:43:32 server1 maldet(11225): {update} checking for available updates... Apr 08 2025 03:43:32 server1 maldet(11225): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 08 2025 03:43:32 server1 maldet(11225): {update} hashing install files and checking against server... Apr 08 2025 03:43:33 server1 maldet(11225): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 08 2025 03:43:33 server1 maldet(11225): {update} latest version already installed. Apr 08 2025 03:43:33 server1 maldet(11338): {sigup} performing signature update check... Apr 08 2025 03:43:33 server1 maldet(11338): {sigup} local signature set is version 20250404517655 Apr 08 2025 03:43:33 server1 maldet(11338): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 08 2025 03:43:33 server1 maldet(11338): {sigup} new signature set 202504071198007 available Apr 08 2025 03:43:33 server1 maldet(11338): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 08 2025 03:43:34 server1 maldet(11338): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 08 2025 03:43:35 server1 maldet(11338): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 08 2025 03:43:35 server1 maldet(11338): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 08 2025 03:43:35 server1 maldet(11338): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 08 2025 03:43:36 server1 maldet(11338): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 08 2025 03:43:36 server1 maldet(11338): {sigup} verified md5sum of maldet-sigpack.tgz Apr 08 2025 03:43:36 server1 maldet(11338): {sigup} unpacked and installed maldet-sigpack.tgz Apr 08 2025 03:43:36 server1 maldet(11338): {sigup} verified md5sum of maldet-clean.tgz Apr 08 2025 03:43:36 server1 maldet(11338): {sigup} unpacked and installed maldet-clean.tgz Apr 08 2025 03:43:36 server1 maldet(11338): {sigup} signature set update completed Apr 08 2025 03:43:36 server1 maldet(11338): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 08 2025 03:43:36 server1 maldet(11547): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 08 2025 03:43:36 server1 maldet(11547): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 08 2025 03:43:36 server1 maldet(11547): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 08 2025 03:43:36 server1 maldet(11547): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 08 2025 03:43:36 server1 maldet(11547): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 08 2025 03:43:38 server1 maldet(11547): {scan} file list completed in 2s, found 39 files... Apr 08 2025 03:43:38 server1 maldet(11547): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Apr 08 2025 03:43:38 server1 maldet(11547): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (39 files) in progress... Apr 08 2025 03:44:17 server1 maldet(11547): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 39, malware hits 0, cleaned hits 0, time 41s Apr 08 2025 03:44:17 server1 maldet(11547): {scan} scan report saved, to view run: maldet --report 250408-0343.11547 Apr 09 2025 03:37:16 server1 maldet(3050): {update} checking for available updates... Apr 09 2025 03:37:17 server1 maldet(3050): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 09 2025 03:37:17 server1 maldet(3050): {update} hashing install files and checking against server... Apr 09 2025 03:37:17 server1 maldet(3050): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 09 2025 03:37:17 server1 maldet(3050): {update} latest version already installed. Apr 09 2025 03:37:17 server1 maldet(3163): {sigup} performing signature update check... Apr 09 2025 03:37:17 server1 maldet(3163): {sigup} local signature set is version 202504071198007 Apr 09 2025 03:37:18 server1 maldet(3163): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 09 2025 03:37:18 server1 maldet(3163): {sigup} latest signature set already installed Apr 09 2025 03:37:18 server1 maldet(3255): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 09 2025 03:37:18 server1 maldet(3255): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 09 2025 03:37:18 server1 maldet(3255): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 09 2025 03:37:18 server1 maldet(3255): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 09 2025 03:37:18 server1 maldet(3255): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 09 2025 03:37:20 server1 maldet(3255): {scan} file list completed in 2s, found 2464 files... Apr 09 2025 03:37:20 server1 maldet(3255): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Apr 09 2025 03:37:20 server1 maldet(3255): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2464 files) in progress... Apr 09 2025 03:38:39 server1 maldet(3255): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2464, malware hits 0, cleaned hits 0, time 81s Apr 09 2025 03:38:39 server1 maldet(3255): {scan} scan report saved, to view run: maldet --report 250409-0337.3255 Apr 10 2025 03:55:15 server1 maldet(22843): {update} checking for available updates... Apr 10 2025 03:55:16 server1 maldet(22843): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 10 2025 03:55:16 server1 maldet(22843): {update} hashing install files and checking against server... Apr 10 2025 03:55:16 server1 maldet(22843): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 10 2025 03:55:16 server1 maldet(22843): {update} latest version already installed. Apr 10 2025 03:55:16 server1 maldet(22958): {sigup} performing signature update check... Apr 10 2025 03:55:16 server1 maldet(22958): {sigup} local signature set is version 202504071198007 Apr 10 2025 03:55:17 server1 maldet(22958): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 10 2025 03:55:17 server1 maldet(22958): {sigup} latest signature set already installed Apr 10 2025 03:55:17 server1 maldet(23051): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 10 2025 03:55:17 server1 maldet(23051): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 10 2025 03:55:17 server1 maldet(23051): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 10 2025 03:55:17 server1 maldet(23051): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 10 2025 03:55:17 server1 maldet(23051): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 10 2025 03:55:19 server1 maldet(23051): {scan} file list completed in 2s, found 38 files... Apr 10 2025 03:55:19 server1 maldet(23051): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Apr 10 2025 03:55:19 server1 maldet(23051): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (38 files) in progress... Apr 10 2025 03:55:55 server1 maldet(23051): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 38, malware hits 0, cleaned hits 0, time 38s Apr 10 2025 03:55:55 server1 maldet(23051): {scan} scan report saved, to view run: maldet --report 250410-0355.23051 Apr 11 2025 03:26:49 server1 maldet(11018): {update} checking for available updates... Apr 11 2025 03:26:51 server1 maldet(11018): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 11 2025 03:26:51 server1 maldet(11018): {update} hashing install files and checking against server... Apr 11 2025 03:26:52 server1 maldet(11018): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 11 2025 03:26:52 server1 maldet(11018): {update} latest version already installed. Apr 11 2025 03:26:52 server1 maldet(11131): {sigup} performing signature update check... Apr 11 2025 03:26:52 server1 maldet(11131): {sigup} local signature set is version 202504071198007 Apr 11 2025 03:26:55 server1 maldet(11131): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 11 2025 03:26:55 server1 maldet(11131): {sigup} new signature set 202504101870578 available Apr 11 2025 03:26:55 server1 maldet(11131): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 11 2025 03:26:56 server1 maldet(11131): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 11 2025 03:26:56 server1 maldet(11131): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 11 2025 03:26:56 server1 maldet(11131): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 11 2025 03:26:59 server1 maldet(11131): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 11 2025 03:27:04 server1 maldet(11131): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 11 2025 03:27:04 server1 maldet(11131): {sigup} verified md5sum of maldet-sigpack.tgz Apr 11 2025 03:27:04 server1 maldet(11131): {sigup} unpacked and installed maldet-sigpack.tgz Apr 11 2025 03:27:04 server1 maldet(11131): {sigup} verified md5sum of maldet-clean.tgz Apr 11 2025 03:27:04 server1 maldet(11131): {sigup} unpacked and installed maldet-clean.tgz Apr 11 2025 03:27:04 server1 maldet(11131): {sigup} signature set update completed Apr 11 2025 03:27:04 server1 maldet(11131): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 11 2025 03:27:04 server1 maldet(11353): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 11 2025 03:27:04 server1 maldet(11353): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 11 2025 03:27:04 server1 maldet(11353): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 11 2025 03:27:04 server1 maldet(11353): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 11 2025 03:27:04 server1 maldet(11353): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 11 2025 03:27:06 server1 maldet(11353): {scan} file list completed in 2s, found 34 files... Apr 11 2025 03:27:06 server1 maldet(11353): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Apr 11 2025 03:27:06 server1 maldet(11353): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (34 files) in progress... Apr 11 2025 03:27:39 server1 maldet(11353): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 34, malware hits 0, cleaned hits 0, time 35s Apr 11 2025 03:27:40 server1 maldet(11353): {scan} scan report saved, to view run: maldet --report 250411-0327.11353 Apr 12 2025 03:33:15 server1 maldet(2905): {update} checking for available updates... Apr 12 2025 03:33:16 server1 maldet(2905): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 12 2025 03:33:16 server1 maldet(2905): {update} hashing install files and checking against server... Apr 12 2025 03:33:16 server1 maldet(2905): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 12 2025 03:33:16 server1 maldet(2905): {update} latest version already installed. Apr 12 2025 03:33:17 server1 maldet(3018): {sigup} performing signature update check... Apr 12 2025 03:33:17 server1 maldet(3018): {sigup} local signature set is version 202504101870578 Apr 12 2025 03:33:17 server1 maldet(3018): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 12 2025 03:33:17 server1 maldet(3018): {sigup} latest signature set already installed Apr 12 2025 03:33:17 server1 maldet(3110): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 12 2025 03:33:17 server1 maldet(3110): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 12 2025 03:33:17 server1 maldet(3110): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 12 2025 03:33:17 server1 maldet(3110): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 12 2025 03:33:17 server1 maldet(3110): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 12 2025 03:33:20 server1 maldet(3110): {scan} file list completed in 3s, found 19 files... Apr 12 2025 03:33:20 server1 maldet(3110): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Apr 12 2025 03:33:20 server1 maldet(3110): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (19 files) in progress... Apr 12 2025 03:33:53 server1 maldet(3110): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 19, malware hits 0, cleaned hits 0, time 36s Apr 12 2025 03:33:53 server1 maldet(3110): {scan} scan report saved, to view run: maldet --report 250412-0333.3110 Apr 13 2025 03:32:09 server1 maldet(24051): {update} checking for available updates... Apr 13 2025 03:32:09 server1 maldet(24051): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 13 2025 03:32:09 server1 maldet(24051): {update} hashing install files and checking against server... Apr 13 2025 03:32:10 server1 maldet(24051): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 13 2025 03:32:10 server1 maldet(24051): {update} latest version already installed. Apr 13 2025 03:32:10 server1 maldet(24164): {sigup} performing signature update check... Apr 13 2025 03:32:10 server1 maldet(24164): {sigup} local signature set is version 202504101870578 Apr 13 2025 03:32:10 server1 maldet(24164): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 13 2025 03:32:10 server1 maldet(24164): {sigup} latest signature set already installed Apr 13 2025 03:32:10 server1 maldet(24256): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 13 2025 03:32:10 server1 maldet(24256): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 13 2025 03:32:10 server1 maldet(24256): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 13 2025 03:32:10 server1 maldet(24256): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 13 2025 03:32:10 server1 maldet(24256): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 13 2025 03:32:12 server1 maldet(24256): {scan} file list completed in 2s, found 59 files... Apr 13 2025 03:32:12 server1 maldet(24256): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Apr 13 2025 03:32:12 server1 maldet(24256): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (59 files) in progress... Apr 13 2025 03:32:44 server1 maldet(24256): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 59, malware hits 0, cleaned hits 0, time 34s Apr 13 2025 03:32:44 server1 maldet(24256): {scan} scan report saved, to view run: maldet --report 250413-0332.24256 Apr 14 2025 03:43:31 server1 maldet(10729): {update} checking for available updates... Apr 14 2025 03:43:38 server1 maldet(10729): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 14 2025 03:43:38 server1 maldet(10729): {update} hashing install files and checking against server... Apr 14 2025 03:43:44 server1 maldet(10729): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 14 2025 03:43:44 server1 maldet(10729): {update} latest version already installed. Apr 14 2025 03:43:44 server1 maldet(10844): {sigup} performing signature update check... Apr 14 2025 03:43:44 server1 maldet(10844): {sigup} local signature set is version 202504101870578 Apr 14 2025 03:43:49 server1 maldet(10844): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 14 2025 03:43:49 server1 maldet(10844): {sigup} new signature set 202504132544993 available Apr 14 2025 03:43:49 server1 maldet(10844): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 14 2025 03:43:53 server1 maldet(10844): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 14 2025 03:43:57 server1 maldet(10844): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 14 2025 03:43:57 server1 maldet(10844): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 14 2025 03:44:00 server1 maldet(10844): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 14 2025 03:44:04 server1 maldet(10844): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 14 2025 03:44:04 server1 maldet(10844): {sigup} verified md5sum of maldet-sigpack.tgz Apr 14 2025 03:44:05 server1 maldet(10844): {sigup} unpacked and installed maldet-sigpack.tgz Apr 14 2025 03:44:05 server1 maldet(10844): {sigup} verified md5sum of maldet-clean.tgz Apr 14 2025 03:44:05 server1 maldet(10844): {sigup} unpacked and installed maldet-clean.tgz Apr 14 2025 03:44:05 server1 maldet(10844): {sigup} signature set update completed Apr 14 2025 03:44:05 server1 maldet(10844): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 14 2025 03:44:05 server1 maldet(11062): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 14 2025 03:44:05 server1 maldet(11062): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 14 2025 03:44:05 server1 maldet(11062): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 14 2025 03:44:05 server1 maldet(11062): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 14 2025 03:44:05 server1 maldet(11062): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 14 2025 03:44:07 server1 maldet(11062): {scan} file list completed in 2s, found 25 files... Apr 14 2025 03:44:07 server1 maldet(11062): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Apr 14 2025 03:44:07 server1 maldet(11062): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (25 files) in progress... Apr 14 2025 03:44:39 server1 maldet(11062): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 25, malware hits 0, cleaned hits 0, time 34s Apr 14 2025 03:44:39 server1 maldet(11062): {scan} scan report saved, to view run: maldet --report 250414-0344.11062 Apr 15 2025 03:37:20 server1 maldet(3132): {update} checking for available updates... Apr 15 2025 03:37:21 server1 maldet(3132): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 15 2025 03:37:21 server1 maldet(3132): {update} hashing install files and checking against server... Apr 15 2025 03:37:21 server1 maldet(3132): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 15 2025 03:37:21 server1 maldet(3132): {update} latest version already installed. Apr 15 2025 03:37:21 server1 maldet(3245): {sigup} performing signature update check... Apr 15 2025 03:37:21 server1 maldet(3245): {sigup} local signature set is version 202504132544993 Apr 15 2025 03:37:22 server1 maldet(3245): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 15 2025 03:37:22 server1 maldet(3245): {sigup} latest signature set already installed Apr 15 2025 03:37:22 server1 maldet(3337): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 15 2025 03:37:22 server1 maldet(3337): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 15 2025 03:37:22 server1 maldet(3337): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 15 2025 03:37:22 server1 maldet(3337): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 15 2025 03:37:22 server1 maldet(3337): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 15 2025 03:37:24 server1 maldet(3337): {scan} file list completed in 2s, found 33 files... Apr 15 2025 03:37:24 server1 maldet(3337): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Apr 15 2025 03:37:24 server1 maldet(3337): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (33 files) in progress... Apr 15 2025 03:38:45 server1 maldet(3337): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 33, malware hits 0, cleaned hits 0, time 83s Apr 15 2025 03:38:45 server1 maldet(3337): {scan} scan report saved, to view run: maldet --report 250415-0337.3337 Apr 16 2025 03:32:19 server1 maldet(24548): {update} checking for available updates... Apr 16 2025 03:32:19 server1 maldet(24548): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 16 2025 03:32:19 server1 maldet(24548): {update} hashing install files and checking against server... Apr 16 2025 03:32:20 server1 maldet(24548): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 16 2025 03:32:20 server1 maldet(24548): {update} latest version already installed. Apr 16 2025 03:32:20 server1 maldet(24661): {sigup} performing signature update check... Apr 16 2025 03:32:20 server1 maldet(24661): {sigup} local signature set is version 202504132544993 Apr 16 2025 03:32:20 server1 maldet(24661): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 16 2025 03:32:20 server1 maldet(24661): {sigup} latest signature set already installed Apr 16 2025 03:32:20 server1 maldet(24753): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 16 2025 03:32:21 server1 maldet(24753): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 16 2025 03:32:21 server1 maldet(24753): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 16 2025 03:32:21 server1 maldet(24753): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 16 2025 03:32:21 server1 maldet(24753): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 16 2025 03:32:24 server1 maldet(24753): {scan} file list completed in 3s, found 2248 files... Apr 16 2025 03:32:24 server1 maldet(24753): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Apr 16 2025 03:32:24 server1 maldet(24753): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2248 files) in progress... Apr 16 2025 03:33:47 server1 maldet(24753): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2248, malware hits 0, cleaned hits 0, time 87s Apr 16 2025 03:33:47 server1 maldet(24753): {scan} scan report saved, to view run: maldet --report 250416-0332.24753 Apr 17 2025 03:30:43 server1 maldet(14883): {update} checking for available updates... Apr 17 2025 03:32:39 server1 maldet(14883): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 17 2025 03:32:39 server1 maldet(14883): {update} hashing install files and checking against server... Apr 17 2025 03:34:28 server1 maldet(14883): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 17 2025 03:34:28 server1 maldet(14883): {update} version check shows latest but hash check failed, forcing update... Apr 17 2025 03:34:29 server1 maldet(14883): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz Apr 17 2025 03:34:54 server1 maldet(14883): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz.md5 Apr 17 2025 03:34:54 server1 maldet(14883): {update} verified md5sum of maldetect-current.tar.gz