![]() Server : Apache/2.4.62 (Unix) OpenSSL/1.0.2k-fips System : Linux server1.richineiserver.com 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64 User : fdshops ( 1003) PHP Version : 8.2.21 Disable Function : NONE Directory : /usr/local/maldetect.last/ |
Apr 17 2025 03:34:55 server1 maldet(15295): {sigup} performing signature update check... Apr 17 2025 03:34:55 server1 maldet(15295): {sigup} local signature set is version 20250225482944 Apr 17 2025 03:35:22 server1 maldet(15295): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 17 2025 03:35:22 server1 maldet(15295): {sigup} new signature set 202504163218957 available Apr 17 2025 03:35:22 server1 maldet(15295): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 17 2025 03:36:22 server1 maldet(15295): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 17 2025 03:36:46 server1 maldet(15295): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 17 2025 03:36:46 server1 maldet(15295): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 17 2025 03:37:09 server1 maldet(15295): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 17 2025 03:37:34 server1 maldet(15295): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 17 2025 03:37:34 server1 maldet(15295): {sigup} verified md5sum of maldet-sigpack.tgz Apr 17 2025 03:37:34 server1 maldet(15295): {sigup} unpacked and installed maldet-sigpack.tgz Apr 17 2025 03:37:34 server1 maldet(15295): {sigup} verified md5sum of maldet-clean.tgz Apr 17 2025 03:37:34 server1 maldet(15295): {sigup} unpacked and installed maldet-clean.tgz Apr 17 2025 03:37:34 server1 maldet(15295): {sigup} signature set update completed Apr 17 2025 03:37:34 server1 maldet(15295): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 17 2025 03:37:35 server1 maldet(14883): {update} completed update v1.6.6 3a1792 => v1.6.6 359d25, running signature updates... Apr 17 2025 03:37:35 server1 maldet(15627): {sigup} performing signature update check... Apr 17 2025 03:37:35 server1 maldet(15627): {sigup} local signature set is version 202504163218957 Apr 17 2025 03:38:01 server1 maldet(15627): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 17 2025 03:38:01 server1 maldet(15627): {sigup} latest signature set already installed Apr 17 2025 03:38:01 server1 maldet(14883): {update} update and config import completed Apr 17 2025 03:38:01 server1 maldet(15731): {sigup} performing signature update check... Apr 17 2025 03:38:01 server1 maldet(15731): {sigup} local signature set is version 202504163218957 Apr 17 2025 03:38:34 server1 maldet(15731): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 17 2025 03:38:34 server1 maldet(15731): {sigup} latest signature set already installed Apr 17 2025 03:38:34 server1 maldet(15838): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 17 2025 03:38:34 server1 maldet(15838): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 17 2025 03:38:34 server1 maldet(15838): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 17 2025 03:38:34 server1 maldet(15838): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 17 2025 03:38:34 server1 maldet(15838): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 17 2025 03:38:35 server1 maldet(15838): {scan} file list completed in 1s, found 38 files... Apr 17 2025 03:38:35 server1 maldet(15838): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Apr 17 2025 03:38:35 server1 maldet(15838): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (38 files) in progress... Apr 17 2025 03:39:10 server1 maldet(15838): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 38, malware hits 0, cleaned hits 0, time 36s Apr 17 2025 03:39:10 server1 maldet(15838): {scan} scan report saved, to view run: maldet --report 250417-0338.15838 Apr 18 2025 03:19:26 server1 maldet(4263): {update} checking for available updates... Apr 18 2025 03:19:26 server1 maldet(4263): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 18 2025 03:19:26 server1 maldet(4263): {update} hashing install files and checking against server... Apr 18 2025 03:19:27 server1 maldet(4263): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 18 2025 03:19:27 server1 maldet(4263): {update} latest version already installed. Apr 18 2025 03:19:27 server1 maldet(4378): {sigup} performing signature update check... Apr 18 2025 03:19:27 server1 maldet(4378): {sigup} local signature set is version 202504163218957 Apr 18 2025 03:19:27 server1 maldet(4378): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 18 2025 03:19:27 server1 maldet(4378): {sigup} latest signature set already installed Apr 18 2025 03:19:27 server1 maldet(4470): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 18 2025 03:19:27 server1 maldet(4470): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 18 2025 03:19:27 server1 maldet(4470): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 18 2025 03:19:28 server1 maldet(4470): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 18 2025 03:19:28 server1 maldet(4470): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 18 2025 03:19:29 server1 maldet(4470): {scan} file list completed in 1s, found 37 files... Apr 18 2025 03:19:29 server1 maldet(4470): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Apr 18 2025 03:19:29 server1 maldet(4470): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (37 files) in progress... Apr 18 2025 03:20:03 server1 maldet(4470): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 37, malware hits 0, cleaned hits 0, time 36s Apr 18 2025 03:20:03 server1 maldet(4470): {scan} scan report saved, to view run: maldet --report 250418-0319.4470 Apr 19 2025 03:15:49 server1 maldet(25571): {update} checking for available updates... Apr 19 2025 03:15:49 server1 maldet(25571): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 19 2025 03:15:49 server1 maldet(25571): {update} hashing install files and checking against server... Apr 19 2025 03:15:50 server1 maldet(25571): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 19 2025 03:15:50 server1 maldet(25571): {update} latest version already installed. Apr 19 2025 03:15:50 server1 maldet(25684): {sigup} performing signature update check... Apr 19 2025 03:15:50 server1 maldet(25684): {sigup} local signature set is version 202504163218957 Apr 19 2025 03:15:50 server1 maldet(25684): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 19 2025 03:15:50 server1 maldet(25684): {sigup} latest signature set already installed Apr 19 2025 03:15:50 server1 maldet(25776): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 19 2025 03:15:50 server1 maldet(25776): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 19 2025 03:15:50 server1 maldet(25776): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 19 2025 03:15:50 server1 maldet(25776): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 19 2025 03:15:51 server1 maldet(25776): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 19 2025 03:15:53 server1 maldet(25776): {scan} file list completed in 3s, found 56 files... Apr 19 2025 03:15:53 server1 maldet(25776): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Apr 19 2025 03:15:53 server1 maldet(25776): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (56 files) in progress... Apr 19 2025 03:16:32 server1 maldet(25776): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 56, malware hits 0, cleaned hits 0, time 42s Apr 19 2025 03:16:32 server1 maldet(25776): {scan} scan report saved, to view run: maldet --report 250419-0315.25776 Apr 20 2025 03:16:26 server1 maldet(15174): {update} checking for available updates... Apr 20 2025 03:16:27 server1 maldet(15174): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 20 2025 03:16:27 server1 maldet(15174): {update} hashing install files and checking against server... Apr 20 2025 03:16:27 server1 maldet(15174): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 20 2025 03:16:27 server1 maldet(15174): {update} latest version already installed. Apr 20 2025 03:16:27 server1 maldet(15287): {sigup} performing signature update check... Apr 20 2025 03:16:27 server1 maldet(15287): {sigup} local signature set is version 202504163218957 Apr 20 2025 03:16:28 server1 maldet(15287): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 20 2025 03:16:28 server1 maldet(15287): {sigup} new signature set 20250419480331 available Apr 20 2025 03:16:28 server1 maldet(15287): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 20 2025 03:16:29 server1 maldet(15287): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 20 2025 03:16:29 server1 maldet(15287): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 20 2025 03:16:29 server1 maldet(15287): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 20 2025 03:16:30 server1 maldet(15287): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 20 2025 03:16:30 server1 maldet(15287): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 20 2025 03:16:30 server1 maldet(15287): {sigup} verified md5sum of maldet-sigpack.tgz Apr 20 2025 03:16:30 server1 maldet(15287): {sigup} unpacked and installed maldet-sigpack.tgz Apr 20 2025 03:16:30 server1 maldet(15287): {sigup} verified md5sum of maldet-clean.tgz Apr 20 2025 03:16:30 server1 maldet(15287): {sigup} unpacked and installed maldet-clean.tgz Apr 20 2025 03:16:30 server1 maldet(15287): {sigup} signature set update completed Apr 20 2025 03:16:30 server1 maldet(15287): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 20 2025 03:16:30 server1 maldet(15496): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 20 2025 03:16:30 server1 maldet(15496): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 20 2025 03:16:30 server1 maldet(15496): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 20 2025 03:16:30 server1 maldet(15496): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 20 2025 03:16:31 server1 maldet(15496): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 20 2025 03:16:33 server1 maldet(15496): {scan} file list completed in 3s, found 44 files... Apr 20 2025 03:16:33 server1 maldet(15496): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Apr 20 2025 03:16:33 server1 maldet(15496): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (44 files) in progress... Apr 20 2025 03:17:13 server1 maldet(15496): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 44, malware hits 0, cleaned hits 0, time 43s Apr 20 2025 03:17:13 server1 maldet(15496): {scan} scan report saved, to view run: maldet --report 250420-0316.15496 Apr 21 2025 03:28:05 server1 maldet(799): {update} checking for available updates... Apr 21 2025 03:28:05 server1 maldet(799): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 21 2025 03:28:05 server1 maldet(799): {update} hashing install files and checking against server... Apr 21 2025 03:28:06 server1 maldet(799): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 21 2025 03:28:06 server1 maldet(799): {update} latest version already installed. Apr 21 2025 03:28:06 server1 maldet(919): {sigup} performing signature update check... Apr 21 2025 03:28:06 server1 maldet(919): {sigup} local signature set is version 20250419480331 Apr 21 2025 03:28:06 server1 maldet(919): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 21 2025 03:28:06 server1 maldet(919): {sigup} latest signature set already installed Apr 21 2025 03:28:06 server1 maldet(1032): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 21 2025 03:28:06 server1 maldet(1032): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 21 2025 03:28:06 server1 maldet(1032): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 21 2025 03:28:06 server1 maldet(1032): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 21 2025 03:28:06 server1 maldet(1032): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 21 2025 03:28:08 server1 maldet(1032): {scan} file list completed in 2s, found 50 files... Apr 21 2025 03:28:08 server1 maldet(1032): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Apr 21 2025 03:28:08 server1 maldet(1032): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (50 files) in progress... Apr 21 2025 03:28:43 server1 maldet(1032): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 50, malware hits 0, cleaned hits 0, time 37s Apr 21 2025 03:28:43 server1 maldet(1032): {scan} scan report saved, to view run: maldet --report 250421-0328.1032 Apr 22 2025 03:48:36 server1 maldet(20669): {update} checking for available updates... Apr 22 2025 03:48:36 server1 maldet(20669): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 22 2025 03:48:36 server1 maldet(20669): {update} hashing install files and checking against server... Apr 22 2025 03:48:37 server1 maldet(20669): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 22 2025 03:48:37 server1 maldet(20669): {update} latest version already installed. Apr 22 2025 03:48:37 server1 maldet(20782): {sigup} performing signature update check... Apr 22 2025 03:48:37 server1 maldet(20782): {sigup} local signature set is version 20250419480331 Apr 22 2025 03:48:37 server1 maldet(20782): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 22 2025 03:48:37 server1 maldet(20782): {sigup} latest signature set already installed Apr 22 2025 03:48:37 server1 maldet(20875): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 22 2025 03:48:38 server1 maldet(20875): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 22 2025 03:48:38 server1 maldet(20875): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 22 2025 03:48:38 server1 maldet(20875): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 22 2025 03:48:38 server1 maldet(20875): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 22 2025 03:48:39 server1 maldet(20875): {scan} file list completed in 1s, found 32 files... Apr 22 2025 03:48:39 server1 maldet(20875): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Apr 22 2025 03:48:39 server1 maldet(20875): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (32 files) in progress... Apr 22 2025 03:49:17 server1 maldet(20875): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 32, malware hits 0, cleaned hits 0, time 40s Apr 22 2025 03:49:17 server1 maldet(20875): {scan} scan report saved, to view run: maldet --report 250422-0348.20875 Apr 23 2025 03:48:55 server1 maldet(8217): {update} checking for available updates... Apr 23 2025 03:48:55 server1 maldet(8217): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 23 2025 03:48:55 server1 maldet(8217): {update} hashing install files and checking against server... Apr 23 2025 03:48:56 server1 maldet(8217): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 23 2025 03:48:56 server1 maldet(8217): {update} latest version already installed. Apr 23 2025 03:48:56 server1 maldet(8330): {sigup} performing signature update check... Apr 23 2025 03:48:56 server1 maldet(8330): {sigup} local signature set is version 20250419480331 Apr 23 2025 03:48:56 server1 maldet(8330): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 23 2025 03:48:56 server1 maldet(8330): {sigup} new signature set 202504221155028 available Apr 23 2025 03:48:56 server1 maldet(8330): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 23 2025 03:48:57 server1 maldet(8330): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 23 2025 03:48:58 server1 maldet(8330): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 23 2025 03:48:58 server1 maldet(8330): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 23 2025 03:48:58 server1 maldet(8330): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 23 2025 03:48:59 server1 maldet(8330): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 23 2025 03:48:59 server1 maldet(8330): {sigup} verified md5sum of maldet-sigpack.tgz Apr 23 2025 03:48:59 server1 maldet(8330): {sigup} unpacked and installed maldet-sigpack.tgz Apr 23 2025 03:48:59 server1 maldet(8330): {sigup} verified md5sum of maldet-clean.tgz Apr 23 2025 03:48:59 server1 maldet(8330): {sigup} unpacked and installed maldet-clean.tgz Apr 23 2025 03:48:59 server1 maldet(8330): {sigup} signature set update completed Apr 23 2025 03:48:59 server1 maldet(8330): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 23 2025 03:48:59 server1 maldet(8541): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 23 2025 03:48:59 server1 maldet(8541): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 23 2025 03:48:59 server1 maldet(8541): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 23 2025 03:48:59 server1 maldet(8541): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 23 2025 03:48:59 server1 maldet(8541): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 23 2025 03:49:03 server1 maldet(8541): {scan} file list completed in 4s, found 1711 files... Apr 23 2025 03:49:03 server1 maldet(8541): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Apr 23 2025 03:49:03 server1 maldet(8541): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1711 files) in progress... Apr 23 2025 03:50:07 server1 maldet(8541): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1711, malware hits 0, cleaned hits 0, time 68s Apr 23 2025 03:50:07 server1 maldet(8541): {scan} scan report saved, to view run: maldet --report 250423-0348.8541 Apr 24 2025 03:18:01 server1 maldet(6134): {update} checking for available updates... Apr 24 2025 03:18:02 server1 maldet(6134): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 24 2025 03:18:02 server1 maldet(6134): {update} hashing install files and checking against server... Apr 24 2025 03:18:02 server1 maldet(6134): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 24 2025 03:18:02 server1 maldet(6134): {update} latest version already installed. Apr 24 2025 03:18:03 server1 maldet(6252): {sigup} performing signature update check... Apr 24 2025 03:18:03 server1 maldet(6252): {sigup} local signature set is version 202504221155028 Apr 24 2025 03:18:03 server1 maldet(6252): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 24 2025 03:18:03 server1 maldet(6252): {sigup} latest signature set already installed Apr 24 2025 03:18:03 server1 maldet(6344): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 24 2025 03:18:03 server1 maldet(6344): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 24 2025 03:18:03 server1 maldet(6344): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 24 2025 03:18:03 server1 maldet(6344): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 24 2025 03:18:03 server1 maldet(6344): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 24 2025 03:18:08 server1 maldet(6344): {scan} file list completed in 5s, found 51 files... Apr 24 2025 03:18:08 server1 maldet(6344): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Apr 24 2025 03:18:08 server1 maldet(6344): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (51 files) in progress... Apr 24 2025 03:18:43 server1 maldet(6344): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 51, malware hits 0, cleaned hits 0, time 40s Apr 24 2025 03:18:43 server1 maldet(6344): {scan} scan report saved, to view run: maldet --report 250424-0318.6344 Apr 25 2025 03:47:51 server1 maldet(3749): {update} checking for available updates... Apr 25 2025 03:47:51 server1 maldet(3749): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 25 2025 03:47:51 server1 maldet(3749): {update} hashing install files and checking against server... Apr 25 2025 03:47:52 server1 maldet(3749): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 25 2025 03:47:52 server1 maldet(3749): {update} latest version already installed. Apr 25 2025 03:47:52 server1 maldet(3862): {sigup} performing signature update check... Apr 25 2025 03:47:52 server1 maldet(3862): {sigup} local signature set is version 202504221155028 Apr 25 2025 03:47:52 server1 maldet(3862): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 25 2025 03:47:52 server1 maldet(3862): {sigup} latest signature set already installed Apr 25 2025 03:47:52 server1 maldet(3954): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 25 2025 03:47:53 server1 maldet(3954): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 25 2025 03:47:53 server1 maldet(3954): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 25 2025 03:47:53 server1 maldet(3954): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 25 2025 03:47:53 server1 maldet(3954): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 25 2025 03:47:55 server1 maldet(3954): {scan} file list completed in 2s, found 25 files... Apr 25 2025 03:47:55 server1 maldet(3954): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Apr 25 2025 03:47:55 server1 maldet(3954): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (25 files) in progress... Apr 25 2025 03:48:31 server1 maldet(3954): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 25, malware hits 0, cleaned hits 0, time 39s Apr 25 2025 03:48:31 server1 maldet(3954): {scan} scan report saved, to view run: maldet --report 250425-0347.3954 Apr 26 2025 03:45:36 server1 maldet(2982): {update} checking for available updates... Apr 26 2025 03:45:37 server1 maldet(2982): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 26 2025 03:45:37 server1 maldet(2982): {update} hashing install files and checking against server... Apr 26 2025 03:45:37 server1 maldet(2982): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 26 2025 03:45:37 server1 maldet(2982): {update} latest version already installed. Apr 26 2025 03:45:37 server1 maldet(3098): {sigup} performing signature update check... Apr 26 2025 03:45:37 server1 maldet(3098): {sigup} local signature set is version 202504221155028 Apr 26 2025 03:45:38 server1 maldet(3098): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 26 2025 03:45:38 server1 maldet(3098): {sigup} new signature set 202504251845085 available Apr 26 2025 03:45:38 server1 maldet(3098): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 26 2025 03:45:39 server1 maldet(3098): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 26 2025 03:45:39 server1 maldet(3098): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 26 2025 03:45:39 server1 maldet(3098): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 26 2025 03:45:40 server1 maldet(3098): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 26 2025 03:45:40 server1 maldet(3098): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 26 2025 03:45:40 server1 maldet(3098): {sigup} verified md5sum of maldet-sigpack.tgz Apr 26 2025 03:45:40 server1 maldet(3098): {sigup} unpacked and installed maldet-sigpack.tgz Apr 26 2025 03:45:40 server1 maldet(3098): {sigup} verified md5sum of maldet-clean.tgz Apr 26 2025 03:45:40 server1 maldet(3098): {sigup} unpacked and installed maldet-clean.tgz Apr 26 2025 03:45:40 server1 maldet(3098): {sigup} signature set update completed Apr 26 2025 03:45:40 server1 maldet(3098): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 26 2025 03:45:41 server1 maldet(3307): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 26 2025 03:45:41 server1 maldet(3307): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 26 2025 03:45:41 server1 maldet(3307): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 26 2025 03:45:41 server1 maldet(3307): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 26 2025 03:45:41 server1 maldet(3307): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 26 2025 03:45:42 server1 maldet(3307): {scan} file list completed in 1s, found 26 files... Apr 26 2025 03:45:42 server1 maldet(3307): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Apr 26 2025 03:45:42 server1 maldet(3307): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (26 files) in progress... Apr 26 2025 03:46:15 server1 maldet(3307): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 26, malware hits 0, cleaned hits 0, time 34s Apr 26 2025 03:46:15 server1 maldet(3307): {scan} scan report saved, to view run: maldet --report 250426-0345.3307 Apr 27 2025 03:40:35 server1 maldet(28182): {update} checking for available updates... Apr 27 2025 03:40:35 server1 maldet(28182): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 27 2025 03:40:35 server1 maldet(28182): {update} hashing install files and checking against server... Apr 27 2025 03:40:36 server1 maldet(28182): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 27 2025 03:40:36 server1 maldet(28182): {update} latest version already installed. Apr 27 2025 03:40:36 server1 maldet(28295): {sigup} performing signature update check... Apr 27 2025 03:40:36 server1 maldet(28295): {sigup} local signature set is version 202504251845085 Apr 27 2025 03:40:36 server1 maldet(28295): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 27 2025 03:40:36 server1 maldet(28295): {sigup} latest signature set already installed Apr 27 2025 03:40:37 server1 maldet(28390): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 27 2025 03:40:37 server1 maldet(28390): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 27 2025 03:40:37 server1 maldet(28390): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 27 2025 03:40:37 server1 maldet(28390): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 27 2025 03:40:37 server1 maldet(28390): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 27 2025 03:40:38 server1 maldet(28390): {scan} file list completed in 1s, found 56 files... Apr 27 2025 03:40:38 server1 maldet(28390): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Apr 27 2025 03:40:38 server1 maldet(28390): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (56 files) in progress... Apr 27 2025 03:41:19 server1 maldet(28390): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 56, malware hits 0, cleaned hits 0, time 42s Apr 27 2025 03:41:19 server1 maldet(28390): {scan} scan report saved, to view run: maldet --report 250427-0340.28390 Apr 28 2025 03:13:11 server1 maldet(16528): {update} checking for available updates... Apr 28 2025 03:13:11 server1 maldet(16528): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 28 2025 03:13:11 server1 maldet(16528): {update} hashing install files and checking against server... Apr 28 2025 03:13:12 server1 maldet(16528): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 28 2025 03:13:12 server1 maldet(16528): {update} latest version already installed. Apr 28 2025 03:13:12 server1 maldet(16641): {sigup} performing signature update check... Apr 28 2025 03:13:12 server1 maldet(16641): {sigup} local signature set is version 202504251845085 Apr 28 2025 03:13:12 server1 maldet(16641): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 28 2025 03:13:12 server1 maldet(16641): {sigup} latest signature set already installed Apr 28 2025 03:13:12 server1 maldet(16733): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 28 2025 03:13:12 server1 maldet(16733): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 28 2025 03:13:12 server1 maldet(16733): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 28 2025 03:13:12 server1 maldet(16733): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 28 2025 03:13:12 server1 maldet(16733): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 28 2025 03:13:14 server1 maldet(16733): {scan} file list completed in 2s, found 53 files... Apr 28 2025 03:13:14 server1 maldet(16733): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Apr 28 2025 03:13:14 server1 maldet(16733): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (53 files) in progress... Apr 28 2025 03:13:50 server1 maldet(16733): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 53, malware hits 0, cleaned hits 0, time 38s Apr 28 2025 03:13:50 server1 maldet(16733): {scan} scan report saved, to view run: maldet --report 250428-0313.16733 Apr 29 2025 03:26:18 server1 maldet(9403): {update} checking for available updates... Apr 29 2025 03:26:19 server1 maldet(9403): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 29 2025 03:26:19 server1 maldet(9403): {update} hashing install files and checking against server... Apr 29 2025 03:26:19 server1 maldet(9403): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 29 2025 03:26:19 server1 maldet(9403): {update} latest version already installed. Apr 29 2025 03:26:19 server1 maldet(9516): {sigup} performing signature update check... Apr 29 2025 03:26:19 server1 maldet(9516): {sigup} local signature set is version 202504251845085 Apr 29 2025 03:26:20 server1 maldet(9516): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 29 2025 03:26:20 server1 maldet(9516): {sigup} new signature set 202504282520736 available Apr 29 2025 03:26:20 server1 maldet(9516): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 29 2025 03:26:21 server1 maldet(9516): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 29 2025 03:26:21 server1 maldet(9516): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 29 2025 03:26:21 server1 maldet(9516): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 29 2025 03:26:22 server1 maldet(9516): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 29 2025 03:26:22 server1 maldet(9516): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 29 2025 03:26:22 server1 maldet(9516): {sigup} verified md5sum of maldet-sigpack.tgz Apr 29 2025 03:26:22 server1 maldet(9516): {sigup} unpacked and installed maldet-sigpack.tgz Apr 29 2025 03:26:22 server1 maldet(9516): {sigup} verified md5sum of maldet-clean.tgz Apr 29 2025 03:26:22 server1 maldet(9516): {sigup} unpacked and installed maldet-clean.tgz Apr 29 2025 03:26:22 server1 maldet(9516): {sigup} signature set update completed Apr 29 2025 03:26:22 server1 maldet(9516): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 29 2025 03:26:22 server1 maldet(9732): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 29 2025 03:26:22 server1 maldet(9732): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 29 2025 03:26:22 server1 maldet(9732): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 29 2025 03:26:22 server1 maldet(9732): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 29 2025 03:26:22 server1 maldet(9732): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 29 2025 03:26:25 server1 maldet(9732): {scan} file list completed in 3s, found 31 files... Apr 29 2025 03:26:25 server1 maldet(9732): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Apr 29 2025 03:26:25 server1 maldet(9732): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (31 files) in progress... Apr 29 2025 03:26:56 server1 maldet(9732): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 31, malware hits 0, cleaned hits 0, time 34s Apr 29 2025 03:26:56 server1 maldet(9732): {scan} scan report saved, to view run: maldet --report 250429-0326.9732 Apr 30 2025 03:16:01 server1 maldet(32438): {update} checking for available updates... Apr 30 2025 03:16:01 server1 maldet(32438): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 30 2025 03:16:02 server1 maldet(32438): {update} hashing install files and checking against server... Apr 30 2025 03:16:02 server1 maldet(32438): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 30 2025 03:16:02 server1 maldet(32438): {update} latest version already installed. Apr 30 2025 03:16:02 server1 maldet(32555): {sigup} performing signature update check... Apr 30 2025 03:16:02 server1 maldet(32555): {sigup} local signature set is version 202504282520736 Apr 30 2025 03:16:03 server1 maldet(32555): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 30 2025 03:16:03 server1 maldet(32555): {sigup} latest signature set already installed Apr 30 2025 03:16:03 server1 maldet(32647): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 30 2025 03:16:03 server1 maldet(32647): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 30 2025 03:16:03 server1 maldet(32647): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 30 2025 03:16:03 server1 maldet(32647): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 30 2025 03:16:03 server1 maldet(32647): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 30 2025 03:16:07 server1 maldet(32647): {scan} file list completed in 3s, found 1428 files... Apr 30 2025 03:16:07 server1 maldet(32647): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Apr 30 2025 03:16:07 server1 maldet(32647): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1428 files) in progress... Apr 30 2025 03:16:55 server1 maldet(32647): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1428, malware hits 0, cleaned hits 0, time 52s Apr 30 2025 03:16:55 server1 maldet(32647): {scan} scan report saved, to view run: maldet --report 250430-0316.32647 May 01 2025 03:13:19 server1 maldet(24156): {update} checking for available updates... May 01 2025 03:13:20 server1 maldet(24156): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 01 2025 03:13:20 server1 maldet(24156): {update} hashing install files and checking against server... May 01 2025 03:13:20 server1 maldet(24156): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 01 2025 03:13:20 server1 maldet(24156): {update} latest version already installed. May 01 2025 03:13:20 server1 maldet(24276): {sigup} performing signature update check... May 01 2025 03:13:20 server1 maldet(24276): {sigup} local signature set is version 202504282520736 May 01 2025 03:13:21 server1 maldet(24276): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 01 2025 03:13:21 server1 maldet(24276): {sigup} latest signature set already installed May 01 2025 03:13:21 server1 maldet(24368): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 01 2025 03:13:21 server1 maldet(24368): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 01 2025 03:13:21 server1 maldet(24368): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 01 2025 03:13:21 server1 maldet(24368): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 01 2025 03:13:21 server1 maldet(24368): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 01 2025 03:13:26 server1 maldet(24368): {scan} file list completed in 5s, found 56 files... May 01 2025 03:13:26 server1 maldet(24368): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 01 2025 03:13:26 server1 maldet(24368): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (56 files) in progress... May 01 2025 03:14:09 server1 maldet(24368): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 56, malware hits 0, cleaned hits 0, time 48s May 01 2025 03:14:09 server1 maldet(24368): {scan} scan report saved, to view run: maldet --report 250501-0313.24368 May 02 2025 03:25:04 server1 maldet(17660): {update} checking for available updates... May 02 2025 03:25:05 server1 maldet(17660): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 02 2025 03:25:05 server1 maldet(17660): {update} hashing install files and checking against server... May 02 2025 03:25:05 server1 maldet(17660): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 02 2025 03:25:05 server1 maldet(17660): {update} latest version already installed. May 02 2025 03:25:05 server1 maldet(17776): {sigup} performing signature update check... May 02 2025 03:25:05 server1 maldet(17776): {sigup} local signature set is version 202504282520736 May 02 2025 03:25:06 server1 maldet(17776): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 02 2025 03:25:06 server1 maldet(17776): {sigup} new signature set 202505013184135 available May 02 2025 03:25:06 server1 maldet(17776): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 02 2025 03:25:07 server1 maldet(17776): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 02 2025 03:25:08 server1 maldet(17776): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 02 2025 03:25:08 server1 maldet(17776): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 02 2025 03:25:08 server1 maldet(17776): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 02 2025 03:25:09 server1 maldet(17776): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 02 2025 03:25:09 server1 maldet(17776): {sigup} verified md5sum of maldet-sigpack.tgz May 02 2025 03:25:09 server1 maldet(17776): {sigup} unpacked and installed maldet-sigpack.tgz May 02 2025 03:25:09 server1 maldet(17776): {sigup} verified md5sum of maldet-clean.tgz May 02 2025 03:25:09 server1 maldet(17776): {sigup} unpacked and installed maldet-clean.tgz May 02 2025 03:25:09 server1 maldet(17776): {sigup} signature set update completed May 02 2025 03:25:09 server1 maldet(17776): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 02 2025 03:25:09 server1 maldet(17985): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 02 2025 03:25:09 server1 maldet(17985): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 02 2025 03:25:09 server1 maldet(17985): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 02 2025 03:25:09 server1 maldet(17985): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 02 2025 03:25:09 server1 maldet(17985): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 02 2025 03:25:11 server1 maldet(17985): {scan} file list completed in 2s, found 48 files... May 02 2025 03:25:11 server1 maldet(17985): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 02 2025 03:25:11 server1 maldet(17985): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (48 files) in progress... May 02 2025 03:25:52 server1 maldet(17985): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 48, malware hits 0, cleaned hits 0, time 43s May 02 2025 03:25:52 server1 maldet(17985): {scan} scan report saved, to view run: maldet --report 250502-0325.17985 May 03 2025 03:22:29 server1 maldet(9518): {update} checking for available updates... May 03 2025 03:22:30 server1 maldet(9518): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 03 2025 03:22:30 server1 maldet(9518): {update} hashing install files and checking against server... May 03 2025 03:22:30 server1 maldet(9518): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 03 2025 03:22:30 server1 maldet(9518): {update} latest version already installed. May 03 2025 03:22:30 server1 maldet(9635): {sigup} performing signature update check... May 03 2025 03:22:30 server1 maldet(9635): {sigup} local signature set is version 202505013184135 May 03 2025 03:22:31 server1 maldet(9635): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 03 2025 03:22:31 server1 maldet(9635): {sigup} latest signature set already installed May 03 2025 03:22:31 server1 maldet(9727): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 03 2025 03:22:31 server1 maldet(9727): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 03 2025 03:22:31 server1 maldet(9727): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 03 2025 03:22:31 server1 maldet(9727): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 03 2025 03:22:31 server1 maldet(9727): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 03 2025 03:22:32 server1 maldet(9727): {scan} file list completed in 1s, found 34 files... May 03 2025 03:22:32 server1 maldet(9727): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 03 2025 03:22:32 server1 maldet(9727): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (34 files) in progress... May 03 2025 03:23:15 server1 maldet(9727): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 34, malware hits 0, cleaned hits 0, time 44s May 03 2025 03:23:15 server1 maldet(9727): {scan} scan report saved, to view run: maldet --report 250503-0322.9727 May 04 2025 03:27:04 server1 maldet(589): {update} checking for available updates... May 04 2025 03:27:05 server1 maldet(589): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 04 2025 03:27:05 server1 maldet(589): {update} hashing install files and checking against server... May 04 2025 03:27:06 server1 maldet(589): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 04 2025 03:27:06 server1 maldet(589): {update} latest version already installed. May 04 2025 03:27:06 server1 maldet(716): {sigup} performing signature update check... May 04 2025 03:27:06 server1 maldet(716): {sigup} local signature set is version 202505013184135 May 04 2025 03:27:07 server1 maldet(716): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 04 2025 03:27:07 server1 maldet(716): {sigup} latest signature set already installed May 04 2025 03:27:07 server1 maldet(808): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 04 2025 03:27:07 server1 maldet(808): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 04 2025 03:27:07 server1 maldet(808): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 04 2025 03:27:07 server1 maldet(808): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 04 2025 03:27:07 server1 maldet(808): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 04 2025 03:27:12 server1 maldet(808): {scan} file list completed in 5s, found 40 files... May 04 2025 03:27:12 server1 maldet(808): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 04 2025 03:27:12 server1 maldet(808): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (40 files) in progress... May 04 2025 03:28:06 server1 maldet(808): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 40, malware hits 0, cleaned hits 0, time 59s May 04 2025 03:28:06 server1 maldet(808): {scan} scan report saved, to view run: maldet --report 250504-0327.808 May 05 2025 03:53:47 server1 maldet(24858): {update} checking for available updates... May 05 2025 03:53:48 server1 maldet(24858): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 05 2025 03:53:48 server1 maldet(24858): {update} hashing install files and checking against server... May 05 2025 03:53:48 server1 maldet(24858): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 05 2025 03:53:48 server1 maldet(24858): {update} latest version already installed. May 05 2025 03:53:48 server1 maldet(24971): {sigup} performing signature update check... May 05 2025 03:53:48 server1 maldet(24971): {sigup} local signature set is version 202505013184135 May 05 2025 03:53:49 server1 maldet(24971): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 05 2025 03:53:49 server1 maldet(24971): {sigup} new signature set 20250504486927 available May 05 2025 03:53:49 server1 maldet(24971): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 05 2025 03:53:50 server1 maldet(24971): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 05 2025 03:53:50 server1 maldet(24971): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 05 2025 03:53:50 server1 maldet(24971): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 05 2025 03:53:51 server1 maldet(24971): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 05 2025 03:53:51 server1 maldet(24971): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 05 2025 03:53:51 server1 maldet(24971): {sigup} verified md5sum of maldet-sigpack.tgz May 05 2025 03:53:51 server1 maldet(24971): {sigup} unpacked and installed maldet-sigpack.tgz May 05 2025 03:53:51 server1 maldet(24971): {sigup} verified md5sum of maldet-clean.tgz May 05 2025 03:53:51 server1 maldet(24971): {sigup} unpacked and installed maldet-clean.tgz May 05 2025 03:53:51 server1 maldet(24971): {sigup} signature set update completed May 05 2025 03:53:51 server1 maldet(24971): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 05 2025 03:53:51 server1 maldet(25183): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 05 2025 03:53:51 server1 maldet(25183): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 05 2025 03:53:51 server1 maldet(25183): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 05 2025 03:53:51 server1 maldet(25183): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 05 2025 03:53:51 server1 maldet(25183): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 05 2025 03:53:55 server1 maldet(25183): {scan} file list completed in 4s, found 29 files... May 05 2025 03:53:55 server1 maldet(25183): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 05 2025 03:53:55 server1 maldet(25183): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (29 files) in progress... May 05 2025 03:54:52 server1 maldet(25183): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 29, malware hits 0, cleaned hits 0, time 61s May 05 2025 03:54:52 server1 maldet(25183): {scan} scan report saved, to view run: maldet --report 250505-0353.25183 May 06 2025 03:35:06 server1 maldet(14783): {update} checking for available updates... May 06 2025 03:35:06 server1 maldet(14783): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 06 2025 03:35:06 server1 maldet(14783): {update} hashing install files and checking against server... May 06 2025 03:35:07 server1 maldet(14783): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 06 2025 03:35:07 server1 maldet(14783): {update} latest version already installed. May 06 2025 03:35:07 server1 maldet(14896): {sigup} performing signature update check... May 06 2025 03:35:07 server1 maldet(14896): {sigup} local signature set is version 20250504486927 May 06 2025 03:35:07 server1 maldet(14896): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 06 2025 03:35:07 server1 maldet(14896): {sigup} latest signature set already installed May 06 2025 03:35:08 server1 maldet(14988): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 06 2025 03:35:08 server1 maldet(14988): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 06 2025 03:35:08 server1 maldet(14988): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 06 2025 03:35:08 server1 maldet(14988): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 06 2025 03:35:08 server1 maldet(14988): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 06 2025 03:35:12 server1 maldet(14988): {scan} file list completed in 4s, found 29 files... May 06 2025 03:35:12 server1 maldet(14988): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 06 2025 03:35:12 server1 maldet(14988): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (29 files) in progress... May 06 2025 03:35:51 server1 maldet(14988): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 29, malware hits 0, cleaned hits 0, time 43s May 06 2025 03:35:51 server1 maldet(14988): {scan} scan report saved, to view run: maldet --report 250506-0335.14988 May 07 2025 03:20:42 server1 maldet(3374): {update} checking for available updates... May 07 2025 03:20:43 server1 maldet(3374): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 07 2025 03:20:43 server1 maldet(3374): {update} hashing install files and checking against server... May 07 2025 03:20:43 server1 maldet(3374): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 07 2025 03:20:43 server1 maldet(3374): {update} latest version already installed. May 07 2025 03:20:43 server1 maldet(3487): {sigup} performing signature update check... May 07 2025 03:20:43 server1 maldet(3487): {sigup} local signature set is version 20250504486927 May 07 2025 03:20:44 server1 maldet(3487): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 07 2025 03:20:44 server1 maldet(3487): {sigup} latest signature set already installed May 07 2025 03:20:44 server1 maldet(3579): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 07 2025 03:20:44 server1 maldet(3579): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 07 2025 03:20:44 server1 maldet(3579): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 07 2025 03:20:44 server1 maldet(3579): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 07 2025 03:20:44 server1 maldet(3579): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 07 2025 03:20:46 server1 maldet(3579): {scan} file list completed in 2s, found 1787 files... May 07 2025 03:20:46 server1 maldet(3579): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 07 2025 03:20:46 server1 maldet(3579): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1787 files) in progress... May 07 2025 03:22:14 server1 maldet(3579): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1787, malware hits 0, cleaned hits 0, time 90s May 07 2025 03:22:14 server1 maldet(3579): {scan} scan report saved, to view run: maldet --report 250507-0320.3579 May 08 2025 03:56:14 server1 maldet(27954): {update} checking for available updates... May 08 2025 03:56:15 server1 maldet(27954): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 08 2025 03:56:15 server1 maldet(27954): {update} hashing install files and checking against server... May 08 2025 03:56:15 server1 maldet(27954): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 08 2025 03:56:15 server1 maldet(27954): {update} latest version already installed. May 08 2025 03:56:15 server1 maldet(28067): {sigup} performing signature update check... May 08 2025 03:56:15 server1 maldet(28067): {sigup} local signature set is version 20250504486927 May 08 2025 03:56:16 server1 maldet(28067): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 08 2025 03:56:16 server1 maldet(28067): {sigup} new signature set 202505071163993 available May 08 2025 03:56:16 server1 maldet(28067): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 08 2025 03:56:17 server1 maldet(28067): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 08 2025 03:56:17 server1 maldet(28067): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 08 2025 03:56:17 server1 maldet(28067): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 08 2025 03:56:18 server1 maldet(28067): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 08 2025 03:56:18 server1 maldet(28067): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 08 2025 03:56:18 server1 maldet(28067): {sigup} verified md5sum of maldet-sigpack.tgz May 08 2025 03:56:19 server1 maldet(28067): {sigup} unpacked and installed maldet-sigpack.tgz May 08 2025 03:56:19 server1 maldet(28067): {sigup} verified md5sum of maldet-clean.tgz May 08 2025 03:56:19 server1 maldet(28067): {sigup} unpacked and installed maldet-clean.tgz May 08 2025 03:56:19 server1 maldet(28067): {sigup} signature set update completed May 08 2025 03:56:19 server1 maldet(28067): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 08 2025 03:56:19 server1 maldet(28280): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 08 2025 03:56:19 server1 maldet(28280): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 08 2025 03:56:19 server1 maldet(28280): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 08 2025 03:56:19 server1 maldet(28280): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 08 2025 03:56:19 server1 maldet(28280): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 08 2025 03:56:21 server1 maldet(28280): {scan} file list completed in 2s, found 79 files... May 08 2025 03:56:21 server1 maldet(28280): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 08 2025 03:56:21 server1 maldet(28280): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (79 files) in progress... May 08 2025 03:56:55 server1 maldet(28280): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 79, malware hits 0, cleaned hits 0, time 36s May 08 2025 03:56:55 server1 maldet(28280): {scan} scan report saved, to view run: maldet --report 250508-0356.28280 May 09 2025 03:23:05 server1 maldet(17404): {update} checking for available updates... May 09 2025 03:23:06 server1 maldet(17404): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 09 2025 03:23:06 server1 maldet(17404): {update} hashing install files and checking against server... May 09 2025 03:23:06 server1 maldet(17404): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 09 2025 03:23:06 server1 maldet(17404): {update} latest version already installed. May 09 2025 03:23:06 server1 maldet(17520): {sigup} performing signature update check... May 09 2025 03:23:06 server1 maldet(17520): {sigup} local signature set is version 202505071163993 May 09 2025 03:23:07 server1 maldet(17520): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 09 2025 03:23:07 server1 maldet(17520): {sigup} latest signature set already installed May 09 2025 03:23:07 server1 maldet(17612): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 09 2025 03:23:07 server1 maldet(17612): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 09 2025 03:23:07 server1 maldet(17612): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 09 2025 03:23:07 server1 maldet(17612): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 09 2025 03:23:07 server1 maldet(17612): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 09 2025 03:23:08 server1 maldet(17612): {scan} file list completed in 1s, found 62 files... May 09 2025 03:23:09 server1 maldet(17612): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 09 2025 03:23:09 server1 maldet(17612): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (62 files) in progress... May 09 2025 03:23:41 server1 maldet(17612): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 62, malware hits 0, cleaned hits 0, time 34s May 09 2025 03:23:41 server1 maldet(17612): {scan} scan report saved, to view run: maldet --report 250509-0323.17612 May 10 2025 03:28:33 server1 maldet(7987): {update} checking for available updates... May 10 2025 03:28:34 server1 maldet(7987): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 10 2025 03:28:34 server1 maldet(7987): {update} hashing install files and checking against server... May 10 2025 03:28:34 server1 maldet(7987): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 10 2025 03:28:34 server1 maldet(7987): {update} latest version already installed. May 10 2025 03:28:34 server1 maldet(8108): {sigup} performing signature update check... May 10 2025 03:28:34 server1 maldet(8108): {sigup} local signature set is version 202505071163993 May 10 2025 03:28:34 server1 maldet(8108): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 10 2025 03:28:34 server1 maldet(8108): {sigup} latest signature set already installed May 10 2025 03:28:35 server1 maldet(8200): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 10 2025 03:28:35 server1 maldet(8200): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 10 2025 03:28:35 server1 maldet(8200): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 10 2025 03:28:35 server1 maldet(8200): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 10 2025 03:28:35 server1 maldet(8200): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 10 2025 03:28:36 server1 maldet(8200): {scan} file list completed in 1s, found 50 files... May 10 2025 03:28:36 server1 maldet(8200): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 10 2025 03:28:36 server1 maldet(8200): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (50 files) in progress... May 10 2025 03:29:08 server1 maldet(8200): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 50, malware hits 0, cleaned hits 0, time 33s May 10 2025 03:29:08 server1 maldet(8200): {scan} scan report saved, to view run: maldet --report 250510-0328.8200 May 11 2025 04:11:45 server1 maldet(2230): {update} checking for available updates... May 11 2025 04:11:45 server1 maldet(2230): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 11 2025 04:11:46 server1 maldet(2230): {update} hashing install files and checking against server... May 11 2025 04:11:46 server1 maldet(2230): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 11 2025 04:11:46 server1 maldet(2230): {update} latest version already installed. May 11 2025 04:11:46 server1 maldet(2343): {sigup} performing signature update check... May 11 2025 04:11:46 server1 maldet(2343): {sigup} local signature set is version 202505071163993 May 11 2025 04:11:46 server1 maldet(2343): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 11 2025 04:11:46 server1 maldet(2343): {sigup} new signature set 202505102039127 available May 11 2025 04:11:46 server1 maldet(2343): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 11 2025 04:11:47 server1 maldet(2343): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 11 2025 04:11:47 server1 maldet(2343): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 11 2025 04:11:47 server1 maldet(2343): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 11 2025 04:11:48 server1 maldet(2343): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 11 2025 04:11:48 server1 maldet(2343): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 11 2025 04:11:48 server1 maldet(2343): {sigup} verified md5sum of maldet-sigpack.tgz May 11 2025 04:11:48 server1 maldet(2343): {sigup} unpacked and installed maldet-sigpack.tgz May 11 2025 04:11:48 server1 maldet(2343): {sigup} verified md5sum of maldet-clean.tgz May 11 2025 04:11:48 server1 maldet(2343): {sigup} unpacked and installed maldet-clean.tgz May 11 2025 04:11:48 server1 maldet(2343): {sigup} signature set update completed May 11 2025 04:11:48 server1 maldet(2343): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 11 2025 04:11:48 server1 maldet(2552): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 11 2025 04:11:48 server1 maldet(2552): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 11 2025 04:11:48 server1 maldet(2552): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 11 2025 04:11:49 server1 maldet(2552): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 11 2025 04:11:49 server1 maldet(2552): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 11 2025 04:11:50 server1 maldet(2552): {scan} file list completed in 1s, found 69 files... May 11 2025 04:11:50 server1 maldet(2552): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 11 2025 04:11:50 server1 maldet(2552): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (69 files) in progress... May 11 2025 04:12:24 server1 maldet(2552): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 69, malware hits 0, cleaned hits 0, time 36s May 11 2025 04:12:24 server1 maldet(2552): {scan} scan report saved, to view run: maldet --report 250511-0411.2552 May 12 2025 03:25:10 server1 maldet(22002): {update} checking for available updates... May 12 2025 03:25:10 server1 maldet(22002): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 12 2025 03:25:10 server1 maldet(22002): {update} hashing install files and checking against server... May 12 2025 03:25:11 server1 maldet(22002): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 12 2025 03:25:11 server1 maldet(22002): {update} latest version already installed. May 12 2025 03:25:11 server1 maldet(22118): {sigup} performing signature update check... May 12 2025 03:25:11 server1 maldet(22118): {sigup} local signature set is version 202505102039127 May 12 2025 03:25:11 server1 maldet(22118): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 12 2025 03:25:11 server1 maldet(22118): {sigup} latest signature set already installed May 12 2025 03:25:11 server1 maldet(22210): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 12 2025 03:25:12 server1 maldet(22210): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 12 2025 03:25:12 server1 maldet(22210): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 12 2025 03:25:12 server1 maldet(22210): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 12 2025 03:25:12 server1 maldet(22210): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 12 2025 03:25:13 server1 maldet(22210): {scan} file list completed in 1s, found 47 files... May 12 2025 03:25:13 server1 maldet(22210): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 12 2025 03:25:13 server1 maldet(22210): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (47 files) in progress... May 12 2025 03:25:46 server1 maldet(22210): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 47, malware hits 0, cleaned hits 0, time 35s May 12 2025 03:25:46 server1 maldet(22210): {scan} scan report saved, to view run: maldet --report 250512-0325.22210 May 13 2025 03:41:22 server1 maldet(13050): {update} checking for available updates... May 13 2025 03:41:22 server1 maldet(13050): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 13 2025 03:41:22 server1 maldet(13050): {update} hashing install files and checking against server... May 13 2025 03:41:23 server1 maldet(13050): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 13 2025 03:41:23 server1 maldet(13050): {update} latest version already installed. May 13 2025 03:41:23 server1 maldet(13163): {sigup} performing signature update check... May 13 2025 03:41:23 server1 maldet(13163): {sigup} local signature set is version 202505102039127 May 13 2025 03:41:23 server1 maldet(13163): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 13 2025 03:41:23 server1 maldet(13163): {sigup} latest signature set already installed May 13 2025 03:41:23 server1 maldet(13255): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 13 2025 03:41:24 server1 maldet(13255): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 13 2025 03:41:24 server1 maldet(13255): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 13 2025 03:41:24 server1 maldet(13255): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 13 2025 03:41:24 server1 maldet(13255): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 13 2025 03:41:25 server1 maldet(13255): {scan} file list completed in 1s, found 58 files... May 13 2025 03:41:25 server1 maldet(13255): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 13 2025 03:41:25 server1 maldet(13255): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (58 files) in progress... May 13 2025 03:42:07 server1 maldet(13255): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 58, malware hits 0, cleaned hits 0, time 44s May 13 2025 03:42:07 server1 maldet(13255): {scan} scan report saved, to view run: maldet --report 250513-0341.13255 May 14 2025 03:24:27 server1 maldet(3807): {update} checking for available updates... May 14 2025 03:24:28 server1 maldet(3807): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 14 2025 03:24:28 server1 maldet(3807): {update} hashing install files and checking against server... May 14 2025 03:24:28 server1 maldet(3807): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 14 2025 03:24:28 server1 maldet(3807): {update} latest version already installed. May 14 2025 03:24:28 server1 maldet(3920): {sigup} performing signature update check... May 14 2025 03:24:28 server1 maldet(3920): {sigup} local signature set is version 202505102039127 May 14 2025 03:24:29 server1 maldet(3920): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 14 2025 03:24:29 server1 maldet(3920): {sigup} new signature set 202505133012176 available May 14 2025 03:24:29 server1 maldet(3920): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 14 2025 03:24:30 server1 maldet(3920): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 14 2025 03:24:30 server1 maldet(3920): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 14 2025 03:24:30 server1 maldet(3920): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 14 2025 03:24:30 server1 maldet(3920): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 14 2025 03:24:31 server1 maldet(3920): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 14 2025 03:24:31 server1 maldet(3920): {sigup} verified md5sum of maldet-sigpack.tgz May 14 2025 03:24:31 server1 maldet(3920): {sigup} unpacked and installed maldet-sigpack.tgz May 14 2025 03:24:31 server1 maldet(3920): {sigup} verified md5sum of maldet-clean.tgz May 14 2025 03:24:31 server1 maldet(3920): {sigup} unpacked and installed maldet-clean.tgz May 14 2025 03:24:31 server1 maldet(3920): {sigup} signature set update completed May 14 2025 03:24:31 server1 maldet(3920): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 14 2025 03:24:31 server1 maldet(4135): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 14 2025 03:24:31 server1 maldet(4135): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 14 2025 03:24:31 server1 maldet(4135): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 14 2025 03:24:31 server1 maldet(4135): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 14 2025 03:24:31 server1 maldet(4135): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 14 2025 03:24:33 server1 maldet(4135): {scan} file list completed in 2s, found 1425 files... May 14 2025 03:24:33 server1 maldet(4135): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 14 2025 03:24:33 server1 maldet(4135): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1425 files) in progress... May 14 2025 03:25:27 server1 maldet(4135): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1425, malware hits 0, cleaned hits 0, time 56s May 14 2025 03:25:27 server1 maldet(4135): {scan} scan report saved, to view run: maldet --report 250514-0324.4135 May 15 2025 03:27:30 server1 maldet(28583): {update} checking for available updates... May 15 2025 03:27:31 server1 maldet(28583): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 15 2025 03:27:31 server1 maldet(28583): {update} hashing install files and checking against server... May 15 2025 03:27:31 server1 maldet(28583): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 15 2025 03:27:31 server1 maldet(28583): {update} latest version already installed. May 15 2025 03:27:31 server1 maldet(28696): {sigup} performing signature update check... May 15 2025 03:27:31 server1 maldet(28696): {sigup} local signature set is version 202505133012176 May 15 2025 03:27:32 server1 maldet(28696): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 15 2025 03:27:32 server1 maldet(28696): {sigup} latest signature set already installed May 15 2025 03:27:32 server1 maldet(28788): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 15 2025 03:27:32 server1 maldet(28788): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 15 2025 03:27:32 server1 maldet(28788): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 15 2025 03:27:32 server1 maldet(28788): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 15 2025 03:27:32 server1 maldet(28788): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 15 2025 03:27:40 server1 maldet(28788): {scan} file list completed in 8s, found 62 files... May 15 2025 03:27:40 server1 maldet(28788): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 15 2025 03:27:40 server1 maldet(28788): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (62 files) in progress... May 15 2025 03:28:13 server1 maldet(28788): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 62, malware hits 0, cleaned hits 0, time 41s May 15 2025 03:28:13 server1 maldet(28788): {scan} scan report saved, to view run: maldet --report 250515-0327.28788 May 16 2025 03:39:33 server1 maldet(25763): {update} checking for available updates... May 16 2025 03:39:33 server1 maldet(25763): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 16 2025 03:39:33 server1 maldet(25763): {update} hashing install files and checking against server... May 16 2025 03:39:34 server1 maldet(25763): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 16 2025 03:39:34 server1 maldet(25763): {update} latest version already installed. May 16 2025 03:39:34 server1 maldet(25878): {sigup} performing signature update check... May 16 2025 03:39:34 server1 maldet(25878): {sigup} local signature set is version 202505133012176 May 16 2025 03:39:34 server1 maldet(25878): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 16 2025 03:39:34 server1 maldet(25878): {sigup} latest signature set already installed May 16 2025 03:39:34 server1 maldet(25970): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 16 2025 03:39:34 server1 maldet(25970): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 16 2025 03:39:35 server1 maldet(25970): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 16 2025 03:39:35 server1 maldet(25970): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 16 2025 03:39:35 server1 maldet(25970): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 16 2025 03:39:40 server1 maldet(25970): {scan} file list completed in 5s, found 37 files... May 16 2025 03:39:40 server1 maldet(25970): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 16 2025 03:39:40 server1 maldet(25970): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (37 files) in progress... May 16 2025 03:40:15 server1 maldet(25970): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 37, malware hits 0, cleaned hits 0, time 41s May 16 2025 03:40:15 server1 maldet(25970): {scan} scan report saved, to view run: maldet --report 250516-0339.25970 May 17 2025 03:12:50 server1 maldet(17132): {update} checking for available updates... May 17 2025 03:12:51 server1 maldet(17132): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 17 2025 03:12:51 server1 maldet(17132): {update} hashing install files and checking against server... May 17 2025 03:12:51 server1 maldet(17132): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 17 2025 03:12:51 server1 maldet(17132): {update} latest version already installed. May 17 2025 03:12:51 server1 maldet(17245): {sigup} performing signature update check... May 17 2025 03:12:51 server1 maldet(17245): {sigup} local signature set is version 202505133012176 May 17 2025 03:12:52 server1 maldet(17245): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 17 2025 03:12:52 server1 maldet(17245): {sigup} new signature set 202505163985107 available May 17 2025 03:12:52 server1 maldet(17245): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 17 2025 03:12:53 server1 maldet(17245): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 17 2025 03:12:53 server1 maldet(17245): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 17 2025 03:12:53 server1 maldet(17245): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 17 2025 03:12:53 server1 maldet(17245): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 17 2025 03:12:54 server1 maldet(17245): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 17 2025 03:12:54 server1 maldet(17245): {sigup} verified md5sum of maldet-sigpack.tgz May 17 2025 03:12:54 server1 maldet(17245): {sigup} unpacked and installed maldet-sigpack.tgz May 17 2025 03:12:54 server1 maldet(17245): {sigup} verified md5sum of maldet-clean.tgz May 17 2025 03:12:54 server1 maldet(17245): {sigup} unpacked and installed maldet-clean.tgz May 17 2025 03:12:54 server1 maldet(17245): {sigup} signature set update completed May 17 2025 03:12:54 server1 maldet(17245): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 17 2025 03:12:54 server1 maldet(17454): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 17 2025 03:12:54 server1 maldet(17454): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 17 2025 03:12:54 server1 maldet(17454): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 17 2025 03:12:54 server1 maldet(17454): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 17 2025 03:12:54 server1 maldet(17454): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 17 2025 03:12:56 server1 maldet(17454): {scan} file list completed in 2s, found 28 files... May 17 2025 03:12:56 server1 maldet(17454): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 17 2025 03:12:56 server1 maldet(17454): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (28 files) in progress... May 17 2025 03:13:32 server1 maldet(17454): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 28, malware hits 0, cleaned hits 0, time 38s May 17 2025 03:13:32 server1 maldet(17454): {scan} scan report saved, to view run: maldet --report 250517-0312.17454 May 18 2025 03:21:11 server1 maldet(13122): {update} checking for available updates... May 18 2025 03:21:11 server1 maldet(13122): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 18 2025 03:21:11 server1 maldet(13122): {update} hashing install files and checking against server... May 18 2025 03:21:12 server1 maldet(13122): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 18 2025 03:21:12 server1 maldet(13122): {update} latest version already installed. May 18 2025 03:21:12 server1 maldet(13239): {sigup} performing signature update check... May 18 2025 03:21:12 server1 maldet(13239): {sigup} local signature set is version 202505163985107 May 18 2025 03:21:13 server1 maldet(13239): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 18 2025 03:21:13 server1 maldet(13239): {sigup} latest signature set already installed May 18 2025 03:21:13 server1 maldet(13331): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 18 2025 03:21:13 server1 maldet(13331): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 18 2025 03:21:13 server1 maldet(13331): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 18 2025 03:21:13 server1 maldet(13331): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 18 2025 03:21:13 server1 maldet(13331): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 18 2025 03:21:17 server1 maldet(13331): {scan} file list completed in 4s, found 36 files... May 18 2025 03:21:17 server1 maldet(13331): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 18 2025 03:21:17 server1 maldet(13331): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (36 files) in progress... May 18 2025 03:22:15 server1 maldet(13331): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 36, malware hits 0, cleaned hits 0, time 62s May 18 2025 03:22:15 server1 maldet(13331): {scan} scan report saved, to view run: maldet --report 250518-0321.13331 May 19 2025 03:47:27 server1 maldet(6160): {update} checking for available updates... May 19 2025 03:47:28 server1 maldet(6160): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 19 2025 03:47:28 server1 maldet(6160): {update} hashing install files and checking against server... May 19 2025 03:47:28 server1 maldet(6160): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 19 2025 03:47:28 server1 maldet(6160): {update} latest version already installed. May 19 2025 03:47:28 server1 maldet(6273): {sigup} performing signature update check... May 19 2025 03:47:28 server1 maldet(6273): {sigup} local signature set is version 202505163985107 May 19 2025 03:47:29 server1 maldet(6273): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 19 2025 03:47:29 server1 maldet(6273): {sigup} latest signature set already installed May 19 2025 03:47:29 server1 maldet(6365): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 19 2025 03:47:29 server1 maldet(6365): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 19 2025 03:47:29 server1 maldet(6365): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 19 2025 03:47:29 server1 maldet(6365): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 19 2025 03:47:29 server1 maldet(6365): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 19 2025 03:47:33 server1 maldet(6365): {scan} file list completed in 4s, found 28 files... May 19 2025 03:47:33 server1 maldet(6365): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 19 2025 03:47:33 server1 maldet(6365): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (28 files) in progress... May 19 2025 03:48:07 server1 maldet(6365): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 28, malware hits 0, cleaned hits 0, time 38s May 19 2025 03:48:07 server1 maldet(6365): {scan} scan report saved, to view run: maldet --report 250519-0347.6365 May 20 2025 03:28:05 server1 maldet(29544): {update} checking for available updates... May 20 2025 03:28:25 server1 maldet(29544): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 20 2025 03:28:25 server1 maldet(29544): {update} hashing install files and checking against server... May 20 2025 03:28:51 server1 maldet(29544): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 20 2025 03:28:51 server1 maldet(29544): {update} latest version already installed. May 20 2025 03:28:51 server1 maldet(29691): {sigup} performing signature update check... May 20 2025 03:28:51 server1 maldet(29691): {sigup} local signature set is version 202505163985107 May 20 2025 03:29:23 server1 maldet(29691): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 20 2025 03:29:23 server1 maldet(29691): {sigup} new signature set 20250519762470 available May 20 2025 03:29:23 server1 maldet(29691): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 20 2025 03:29:50 server1 maldet(29691): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 20 2025 03:29:51 server1 maldet(29691): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 20 2025 03:29:51 server1 maldet(29691): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 20 2025 03:30:25 server1 maldet(29691): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 20 2025 03:30:25 server1 maldet(29691): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 20 2025 03:30:25 server1 maldet(29691): {sigup} verified md5sum of maldet-sigpack.tgz May 20 2025 03:30:25 server1 maldet(29691): {sigup} unpacked and installed maldet-sigpack.tgz May 20 2025 03:30:25 server1 maldet(29691): {sigup} verified md5sum of maldet-clean.tgz May 20 2025 03:30:25 server1 maldet(29691): {sigup} unpacked and installed maldet-clean.tgz May 20 2025 03:30:25 server1 maldet(29691): {sigup} signature set update completed May 20 2025 03:30:25 server1 maldet(29691): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 20 2025 03:30:25 server1 maldet(30128): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 20 2025 03:30:25 server1 maldet(30128): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 20 2025 03:30:25 server1 maldet(30128): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 20 2025 03:30:25 server1 maldet(30128): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 20 2025 03:30:25 server1 maldet(30128): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 20 2025 03:30:31 server1 maldet(30128): {scan} file list completed in 6s, found 1735 files... May 20 2025 03:30:31 server1 maldet(30128): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 20 2025 03:30:31 server1 maldet(30128): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1735 files) in progress... May 20 2025 03:31:40 server1 maldet(30128): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1735, malware hits 0, cleaned hits 0, time 75s May 20 2025 03:31:40 server1 maldet(30128): {scan} scan report saved, to view run: maldet --report 250520-0330.30128 May 21 2025 03:36:22 server1 maldet(19899): {update} checking for available updates... May 21 2025 03:36:22 server1 maldet(19899): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 21 2025 03:36:22 server1 maldet(19899): {update} hashing install files and checking against server... May 21 2025 03:36:22 server1 maldet(19899): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 21 2025 03:36:22 server1 maldet(19899): {update} latest version already installed. May 21 2025 03:36:23 server1 maldet(20012): {sigup} performing signature update check... May 21 2025 03:36:23 server1 maldet(20012): {sigup} local signature set is version 20250519762470 May 21 2025 03:36:23 server1 maldet(20012): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 21 2025 03:36:23 server1 maldet(20012): {sigup} latest signature set already installed May 21 2025 03:36:23 server1 maldet(20104): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 21 2025 03:36:23 server1 maldet(20104): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 21 2025 03:36:23 server1 maldet(20104): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 21 2025 03:36:23 server1 maldet(20104): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 21 2025 03:36:23 server1 maldet(20104): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 21 2025 03:36:28 server1 maldet(20104): {scan} file list completed in 5s, found 68 files... May 21 2025 03:36:28 server1 maldet(20104): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 21 2025 03:36:28 server1 maldet(20104): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (68 files) in progress... May 21 2025 03:37:18 server1 maldet(20104): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 68, malware hits 0, cleaned hits 0, time 55s May 21 2025 03:37:18 server1 maldet(20104): {scan} scan report saved, to view run: maldet --report 250521-0336.20104 May 22 2025 03:18:36 server1 maldet(10808): {update} checking for available updates... May 22 2025 03:18:36 server1 maldet(10808): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 22 2025 03:18:36 server1 maldet(10808): {update} hashing install files and checking against server... May 22 2025 03:18:37 server1 maldet(10808): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 22 2025 03:18:37 server1 maldet(10808): {update} latest version already installed. May 22 2025 03:18:37 server1 maldet(10921): {sigup} performing signature update check... May 22 2025 03:18:37 server1 maldet(10921): {sigup} local signature set is version 20250519762470 May 22 2025 03:18:37 server1 maldet(10921): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 22 2025 03:18:37 server1 maldet(10921): {sigup} latest signature set already installed May 22 2025 03:18:37 server1 maldet(11013): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 22 2025 03:18:37 server1 maldet(11013): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 22 2025 03:18:37 server1 maldet(11013): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 22 2025 03:18:37 server1 maldet(11013): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 22 2025 03:18:37 server1 maldet(11013): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 22 2025 03:18:39 server1 maldet(11013): {scan} file list completed in 2s, found 61 files... May 22 2025 03:18:39 server1 maldet(11013): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 22 2025 03:18:39 server1 maldet(11013): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (61 files) in progress... May 22 2025 03:19:35 server1 maldet(11013): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 61, malware hits 0, cleaned hits 0, time 58s May 22 2025 03:19:35 server1 maldet(11013): {scan} scan report saved, to view run: maldet --report 250522-0318.11013 May 23 2025 03:24:00 server1 maldet(4064): {update} checking for available updates... May 23 2025 03:24:02 server1 maldet(4064): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 23 2025 03:24:02 server1 maldet(4064): {update} hashing install files and checking against server... May 23 2025 03:24:04 server1 maldet(4064): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 23 2025 03:24:05 server1 maldet(4064): {update} latest version already installed. May 23 2025 03:24:05 server1 maldet(4182): {sigup} performing signature update check... May 23 2025 03:24:05 server1 maldet(4182): {sigup} local signature set is version 20250519762470 May 23 2025 03:24:08 server1 maldet(4182): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 23 2025 03:24:08 server1 maldet(4182): {sigup} new signature set 202505221736773 available May 23 2025 03:24:08 server1 maldet(4182): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 23 2025 03:24:10 server1 maldet(4182): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 23 2025 03:24:11 server1 maldet(4182): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 23 2025 03:24:11 server1 maldet(4182): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 23 2025 03:24:13 server1 maldet(4182): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 23 2025 03:24:14 server1 maldet(4182): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 23 2025 03:24:14 server1 maldet(4182): {sigup} verified md5sum of maldet-sigpack.tgz May 23 2025 03:24:14 server1 maldet(4182): {sigup} unpacked and installed maldet-sigpack.tgz May 23 2025 03:24:14 server1 maldet(4182): {sigup} verified md5sum of maldet-clean.tgz May 23 2025 03:24:14 server1 maldet(4182): {sigup} unpacked and installed maldet-clean.tgz May 23 2025 03:24:14 server1 maldet(4182): {sigup} signature set update completed May 23 2025 03:24:14 server1 maldet(4182): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 23 2025 03:24:14 server1 maldet(4397): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 23 2025 03:24:14 server1 maldet(4397): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 23 2025 03:24:14 server1 maldet(4397): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 23 2025 03:24:14 server1 maldet(4397): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 23 2025 03:24:14 server1 maldet(4397): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 23 2025 03:24:20 server1 maldet(4397): {scan} file list completed in 6s, found 47 files... May 23 2025 03:24:20 server1 maldet(4397): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 23 2025 03:24:20 server1 maldet(4397): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (47 files) in progress... May 23 2025 03:25:16 server1 maldet(4397): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 47, malware hits 0, cleaned hits 0, time 62s May 23 2025 03:25:16 server1 maldet(4397): {scan} scan report saved, to view run: maldet --report 250523-0324.4397 May 24 2025 03:51:33 server1 maldet(30847): {update} checking for available updates... May 24 2025 03:51:34 server1 maldet(30847): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 24 2025 03:51:34 server1 maldet(30847): {update} hashing install files and checking against server... May 24 2025 03:51:35 server1 maldet(30847): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 24 2025 03:51:35 server1 maldet(30847): {update} latest version already installed. May 24 2025 03:51:35 server1 maldet(30964): {sigup} performing signature update check... May 24 2025 03:51:35 server1 maldet(30964): {sigup} local signature set is version 202505221736773 May 24 2025 03:51:36 server1 maldet(30964): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 24 2025 03:51:36 server1 maldet(30964): {sigup} latest signature set already installed May 24 2025 03:51:36 server1 maldet(31056): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 24 2025 03:51:36 server1 maldet(31056): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 24 2025 03:51:36 server1 maldet(31056): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 24 2025 03:51:36 server1 maldet(31056): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 24 2025 03:51:36 server1 maldet(31056): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 24 2025 03:51:41 server1 maldet(31056): {scan} file list completed in 5s, found 42 files... May 24 2025 03:51:41 server1 maldet(31056): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 24 2025 03:51:41 server1 maldet(31056): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (42 files) in progress... May 24 2025 03:52:20 server1 maldet(31056): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 42, malware hits 0, cleaned hits 0, time 43s May 24 2025 03:52:20 server1 maldet(31056): {scan} scan report saved, to view run: maldet --report 250524-0351.31056 May 25 2025 03:56:26 server1 maldet(4557): {update} checking for available updates... May 25 2025 03:56:27 server1 maldet(4557): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 25 2025 03:56:27 server1 maldet(4557): {update} hashing install files and checking against server... May 25 2025 03:56:28 server1 maldet(4557): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 25 2025 03:56:28 server1 maldet(4557): {update} latest version already installed. May 25 2025 03:56:28 server1 maldet(4670): {sigup} performing signature update check... May 25 2025 03:56:28 server1 maldet(4670): {sigup} local signature set is version 202505221736773 May 25 2025 03:56:29 server1 maldet(4670): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 25 2025 03:56:29 server1 maldet(4670): {sigup} latest signature set already installed May 25 2025 03:56:29 server1 maldet(4762): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 25 2025 03:56:29 server1 maldet(4762): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 25 2025 03:56:29 server1 maldet(4762): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 25 2025 03:56:29 server1 maldet(4762): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 25 2025 03:56:29 server1 maldet(4762): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 25 2025 03:56:32 server1 maldet(4762): {scan} file list completed in 3s, found 56 files... May 25 2025 03:56:32 server1 maldet(4762): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 25 2025 03:56:32 server1 maldet(4762): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (56 files) in progress... May 25 2025 03:57:21 server1 maldet(4762): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 56, malware hits 0, cleaned hits 0, time 52s May 25 2025 03:57:21 server1 maldet(4762): {scan} scan report saved, to view run: maldet --report 250525-0356.4762 May 26 2025 03:53:10 server1 maldet(13013): {update} checking for available updates... May 26 2025 03:53:11 server1 maldet(13013): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 26 2025 03:53:11 server1 maldet(13013): {update} hashing install files and checking against server... May 26 2025 03:53:11 server1 maldet(13013): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 26 2025 03:53:11 server1 maldet(13013): {update} latest version already installed. May 26 2025 03:53:12 server1 maldet(13126): {sigup} performing signature update check... May 26 2025 03:53:12 server1 maldet(13126): {sigup} local signature set is version 202505221736773 May 26 2025 03:53:12 server1 maldet(13126): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 26 2025 03:53:12 server1 maldet(13126): {sigup} new signature set 202505252708832 available May 26 2025 03:53:12 server1 maldet(13126): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 26 2025 03:53:14 server1 maldet(13126): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 26 2025 03:53:15 server1 maldet(13126): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 26 2025 03:53:15 server1 maldet(13126): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 26 2025 03:53:16 server1 maldet(13126): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 26 2025 03:53:17 server1 maldet(13126): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 26 2025 03:53:17 server1 maldet(13126): {sigup} verified md5sum of maldet-sigpack.tgz May 26 2025 03:53:17 server1 maldet(13126): {sigup} unpacked and installed maldet-sigpack.tgz May 26 2025 03:53:17 server1 maldet(13126): {sigup} verified md5sum of maldet-clean.tgz May 26 2025 03:53:17 server1 maldet(13126): {sigup} unpacked and installed maldet-clean.tgz May 26 2025 03:53:17 server1 maldet(13126): {sigup} signature set update completed May 26 2025 03:53:17 server1 maldet(13126): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 26 2025 03:53:17 server1 maldet(13338): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 26 2025 03:53:17 server1 maldet(13338): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 26 2025 03:53:17 server1 maldet(13338): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 26 2025 03:53:17 server1 maldet(13338): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 26 2025 03:53:17 server1 maldet(13338): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 26 2025 03:53:20 server1 maldet(13338): {scan} file list completed in 3s, found 21 files... May 26 2025 03:53:20 server1 maldet(13338): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 26 2025 03:53:20 server1 maldet(13338): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (21 files) in progress... May 26 2025 03:54:22 server1 maldet(13338): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 21, malware hits 0, cleaned hits 0, time 65s May 26 2025 03:54:22 server1 maldet(13338): {scan} scan report saved, to view run: maldet --report 250526-0353.13338 May 27 2025 03:46:12 server1 maldet(31512): {update} checking for available updates... May 27 2025 03:46:13 server1 maldet(31512): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 27 2025 03:46:13 server1 maldet(31512): {update} hashing install files and checking against server... May 27 2025 03:46:14 server1 maldet(31512): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 27 2025 03:46:14 server1 maldet(31512): {update} latest version already installed. May 27 2025 03:46:14 server1 maldet(31625): {sigup} performing signature update check... May 27 2025 03:46:14 server1 maldet(31625): {sigup} local signature set is version 202505252708832 May 27 2025 03:46:15 server1 maldet(31625): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 27 2025 03:46:15 server1 maldet(31625): {sigup} latest signature set already installed May 27 2025 03:46:15 server1 maldet(31717): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 27 2025 03:46:15 server1 maldet(31717): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 27 2025 03:46:15 server1 maldet(31717): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 27 2025 03:46:15 server1 maldet(31717): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 27 2025 03:46:15 server1 maldet(31717): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 27 2025 03:46:18 server1 maldet(31717): {scan} file list completed in 3s, found 22 files... May 27 2025 03:46:18 server1 maldet(31717): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 27 2025 03:46:18 server1 maldet(31717): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (22 files) in progress... May 27 2025 03:47:31 server1 maldet(31717): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 22, malware hits 0, cleaned hits 0, time 76s May 27 2025 03:47:31 server1 maldet(31717): {scan} scan report saved, to view run: maldet --report 250527-0346.31717 May 28 2025 03:20:26 server1 maldet(12714): {update} checking for available updates... May 28 2025 03:20:27 server1 maldet(12714): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 28 2025 03:20:27 server1 maldet(12714): {update} hashing install files and checking against server... May 28 2025 03:20:28 server1 maldet(12714): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 28 2025 03:20:28 server1 maldet(12714): {update} latest version already installed. May 28 2025 03:20:28 server1 maldet(12828): {sigup} performing signature update check... May 28 2025 03:20:28 server1 maldet(12828): {sigup} local signature set is version 202505252708832 May 28 2025 03:20:29 server1 maldet(12828): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 28 2025 03:20:29 server1 maldet(12828): {sigup} latest signature set already installed May 28 2025 03:20:29 server1 maldet(12920): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 28 2025 03:20:29 server1 maldet(12920): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 28 2025 03:20:29 server1 maldet(12920): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 28 2025 03:20:29 server1 maldet(12920): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 28 2025 03:20:29 server1 maldet(12920): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 28 2025 03:20:34 server1 maldet(12920): {scan} file list completed in 5s, found 1430 files... May 28 2025 03:20:34 server1 maldet(12920): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 28 2025 03:20:34 server1 maldet(12920): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1430 files) in progress... May 28 2025 03:21:29 server1 maldet(12920): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1430, malware hits 0, cleaned hits 0, time 60s May 28 2025 03:21:29 server1 maldet(12920): {scan} scan report saved, to view run: maldet --report 250528-0320.12920 May 29 2025 03:56:19 server1 maldet(14235): {update} checking for available updates... May 29 2025 03:56:20 server1 maldet(14235): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 29 2025 03:56:20 server1 maldet(14235): {update} hashing install files and checking against server... May 29 2025 03:56:21 server1 maldet(14235): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 29 2025 03:56:21 server1 maldet(14235): {update} latest version already installed. May 29 2025 03:56:21 server1 maldet(14351): {sigup} performing signature update check... May 29 2025 03:56:21 server1 maldet(14351): {sigup} local signature set is version 202505252708832 May 29 2025 03:56:22 server1 maldet(14351): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 29 2025 03:56:22 server1 maldet(14351): {sigup} new signature set 202505283679777 available May 29 2025 03:56:22 server1 maldet(14351): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 29 2025 03:56:24 server1 maldet(14351): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 29 2025 03:56:25 server1 maldet(14351): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 29 2025 03:56:25 server1 maldet(14351): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 29 2025 03:56:25 server1 maldet(14351): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 29 2025 03:56:26 server1 maldet(14351): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 29 2025 03:56:26 server1 maldet(14351): {sigup} verified md5sum of maldet-sigpack.tgz May 29 2025 03:56:26 server1 maldet(14351): {sigup} unpacked and installed maldet-sigpack.tgz May 29 2025 03:56:27 server1 maldet(14351): {sigup} verified md5sum of maldet-clean.tgz May 29 2025 03:56:27 server1 maldet(14351): {sigup} unpacked and installed maldet-clean.tgz May 29 2025 03:56:27 server1 maldet(14351): {sigup} signature set update completed May 29 2025 03:56:27 server1 maldet(14351): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 29 2025 03:56:27 server1 maldet(14564): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 29 2025 03:56:27 server1 maldet(14564): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 29 2025 03:56:27 server1 maldet(14564): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 29 2025 03:56:27 server1 maldet(14564): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 29 2025 03:56:27 server1 maldet(14564): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 29 2025 03:56:36 server1 maldet(14564): {scan} file list completed in 9s, found 19 files... May 29 2025 03:56:36 server1 maldet(14564): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 29 2025 03:56:36 server1 maldet(14564): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (19 files) in progress... May 29 2025 03:57:32 server1 maldet(14564): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 19, malware hits 0, cleaned hits 0, time 65s May 29 2025 03:57:32 server1 maldet(14564): {scan} scan report saved, to view run: maldet --report 250529-0356.14564 May 30 2025 03:26:59 server1 maldet(26812): {update} checking for available updates... May 30 2025 03:27:00 server1 maldet(26812): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 30 2025 03:27:00 server1 maldet(26812): {update} hashing install files and checking against server... May 30 2025 03:27:02 server1 maldet(26812): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 30 2025 03:27:02 server1 maldet(26812): {update} latest version already installed. May 30 2025 03:27:02 server1 maldet(26933): {sigup} performing signature update check... May 30 2025 03:27:02 server1 maldet(26933): {sigup} local signature set is version 202505283679777 May 30 2025 03:27:03 server1 maldet(26933): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 30 2025 03:27:04 server1 maldet(26933): {sigup} latest signature set already installed May 30 2025 03:27:04 server1 maldet(27025): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 30 2025 03:27:04 server1 maldet(27025): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 30 2025 03:27:04 server1 maldet(27025): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 30 2025 03:27:04 server1 maldet(27025): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 30 2025 03:27:04 server1 maldet(27025): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 30 2025 03:27:05 server1 maldet(27025): {scan} file list completed in 1s, found 43 files... May 30 2025 03:27:05 server1 maldet(27025): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 30 2025 03:27:05 server1 maldet(27025): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (43 files) in progress... May 30 2025 03:27:40 server1 maldet(27025): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 43, malware hits 0, cleaned hits 0, time 35s May 30 2025 03:27:40 server1 maldet(27025): {scan} scan report saved, to view run: maldet --report 250530-0327.27025 May 31 2025 03:29:26 server1 maldet(28725): {update} checking for available updates... May 31 2025 03:29:27 server1 maldet(28725): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 31 2025 03:29:27 server1 maldet(28725): {update} hashing install files and checking against server... May 31 2025 03:29:27 server1 maldet(28725): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 31 2025 03:29:27 server1 maldet(28725): {update} latest version already installed. May 31 2025 03:29:28 server1 maldet(28839): {sigup} performing signature update check... May 31 2025 03:29:28 server1 maldet(28839): {sigup} local signature set is version 202505283679777 May 31 2025 03:29:28 server1 maldet(28839): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 31 2025 03:29:28 server1 maldet(28839): {sigup} latest signature set already installed May 31 2025 03:29:28 server1 maldet(28931): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 31 2025 03:29:28 server1 maldet(28931): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 31 2025 03:29:28 server1 maldet(28931): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 31 2025 03:29:28 server1 maldet(28931): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 31 2025 03:29:28 server1 maldet(28931): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 31 2025 03:29:45 server1 maldet(28931): {scan} file list completed in 17s, found 26 files... May 31 2025 03:29:45 server1 maldet(28931): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 31 2025 03:29:45 server1 maldet(28931): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (26 files) in progress... May 31 2025 03:30:32 server1 maldet(28931): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 26, malware hits 0, cleaned hits 0, time 64s May 31 2025 03:30:32 server1 maldet(28931): {scan} scan report saved, to view run: maldet --report 250531-0329.28931 Jun 01 2025 03:57:51 server1 maldet(21087): {update} checking for available updates... Jun 01 2025 03:57:52 server1 maldet(21087): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 01 2025 03:57:52 server1 maldet(21087): {update} hashing install files and checking against server... Jun 01 2025 03:57:52 server1 maldet(21087): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 01 2025 03:57:52 server1 maldet(21087): {update} latest version already installed. Jun 01 2025 03:57:52 server1 maldet(21201): {sigup} performing signature update check... Jun 01 2025 03:57:52 server1 maldet(21201): {sigup} local signature set is version 202505283679777 Jun 01 2025 03:57:53 server1 maldet(21201): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 01 2025 03:57:53 server1 maldet(21201): {sigup} new signature set 20250531456902 available Jun 01 2025 03:57:53 server1 maldet(21201): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 01 2025 03:57:54 server1 maldet(21201): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 01 2025 03:57:54 server1 maldet(21201): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 01 2025 03:57:54 server1 maldet(21201): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 01 2025 03:57:54 server1 maldet(21201): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 01 2025 03:57:55 server1 maldet(21201): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 01 2025 03:57:55 server1 maldet(21201): {sigup} verified md5sum of maldet-sigpack.tgz Jun 01 2025 03:57:55 server1 maldet(21201): {sigup} unpacked and installed maldet-sigpack.tgz Jun 01 2025 03:57:55 server1 maldet(21201): {sigup} verified md5sum of maldet-clean.tgz Jun 01 2025 03:57:55 server1 maldet(21201): {sigup} unpacked and installed maldet-clean.tgz Jun 01 2025 03:57:55 server1 maldet(21201): {sigup} signature set update completed Jun 01 2025 03:57:55 server1 maldet(21201): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 01 2025 03:57:55 server1 maldet(21411): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 01 2025 03:57:55 server1 maldet(21411): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 01 2025 03:57:55 server1 maldet(21411): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 01 2025 03:57:55 server1 maldet(21411): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 01 2025 03:57:55 server1 maldet(21411): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 01 2025 03:58:13 server1 maldet(21411): {scan} file list completed in 18s, found 36 files... Jun 01 2025 03:58:13 server1 maldet(21411): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 01 2025 03:58:13 server1 maldet(21411): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (36 files) in progress... Jun 01 2025 03:58:50 server1 maldet(21411): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 36, malware hits 0, cleaned hits 0, time 55s Jun 01 2025 03:58:50 server1 maldet(21411): {scan} scan report saved, to view run: maldet --report 250601-0357.21411 Jun 02 2025 03:53:42 server1 maldet(3309): {update} checking for available updates... Jun 02 2025 03:53:42 server1 maldet(3309): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 02 2025 03:53:42 server1 maldet(3309): {update} hashing install files and checking against server... Jun 02 2025 03:53:43 server1 maldet(3309): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 02 2025 03:53:43 server1 maldet(3309): {update} latest version already installed. Jun 02 2025 03:53:43 server1 maldet(3424): {sigup} performing signature update check... Jun 02 2025 03:53:43 server1 maldet(3424): {sigup} local signature set is version 20250531456902 Jun 02 2025 03:53:43 server1 maldet(3424): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 02 2025 03:53:43 server1 maldet(3424): {sigup} new signature set 202506011196154 available Jun 02 2025 03:53:43 server1 maldet(3424): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 02 2025 03:53:44 server1 maldet(3424): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 02 2025 03:53:44 server1 maldet(3424): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 02 2025 03:53:44 server1 maldet(3424): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 02 2025 03:53:44 server1 maldet(3424): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 02 2025 03:53:45 server1 maldet(3424): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 02 2025 03:53:45 server1 maldet(3424): {sigup} verified md5sum of maldet-sigpack.tgz Jun 02 2025 03:53:45 server1 maldet(3424): {sigup} unpacked and installed maldet-sigpack.tgz Jun 02 2025 03:53:45 server1 maldet(3424): {sigup} verified md5sum of maldet-clean.tgz Jun 02 2025 03:53:45 server1 maldet(3424): {sigup} unpacked and installed maldet-clean.tgz Jun 02 2025 03:53:45 server1 maldet(3424): {sigup} signature set update completed Jun 02 2025 03:53:45 server1 maldet(3424): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 02 2025 03:53:45 server1 maldet(3637): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 02 2025 03:53:45 server1 maldet(3637): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 02 2025 03:53:45 server1 maldet(3637): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 02 2025 03:53:45 server1 maldet(3637): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 02 2025 03:53:45 server1 maldet(3637): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 02 2025 03:53:46 server1 maldet(3637): {scan} file list completed in 1s, found 21 files... Jun 02 2025 03:53:46 server1 maldet(3637): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 02 2025 03:53:46 server1 maldet(3637): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (21 files) in progress... Jun 02 2025 03:54:25 server1 maldet(3637): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 21, malware hits 0, cleaned hits 0, time 40s Jun 02 2025 03:54:25 server1 maldet(3637): {scan} scan report saved, to view run: maldet --report 250602-0353.3637 Jun 03 2025 03:46:49 server1 maldet(1784): {update} checking for available updates... Jun 03 2025 03:46:50 server1 maldet(1784): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 03 2025 03:46:50 server1 maldet(1784): {update} hashing install files and checking against server... Jun 03 2025 03:46:50 server1 maldet(1784): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 03 2025 03:46:50 server1 maldet(1784): {update} latest version already installed. Jun 03 2025 03:46:50 server1 maldet(1898): {sigup} performing signature update check... Jun 03 2025 03:46:50 server1 maldet(1898): {sigup} local signature set is version 202506011196154 Jun 03 2025 03:46:51 server1 maldet(1898): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 03 2025 03:46:51 server1 maldet(1898): {sigup} latest signature set already installed Jun 03 2025 03:46:51 server1 maldet(1990): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 03 2025 03:46:51 server1 maldet(1990): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 03 2025 03:46:51 server1 maldet(1990): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 03 2025 03:46:51 server1 maldet(1990): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 03 2025 03:46:51 server1 maldet(1990): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 03 2025 03:46:52 server1 maldet(1990): {scan} file list completed in 1s, found 1698 files... Jun 03 2025 03:46:52 server1 maldet(1990): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 03 2025 03:46:52 server1 maldet(1990): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1698 files) in progress... Jun 03 2025 03:47:51 server1 maldet(1990): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1698, malware hits 0, cleaned hits 0, time 60s Jun 03 2025 03:47:51 server1 maldet(1990): {scan} scan report saved, to view run: maldet --report 250603-0346.1990 Jun 04 2025 03:33:39 server1 maldet(25482): {update} checking for available updates... Jun 04 2025 03:33:40 server1 maldet(25482): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 04 2025 03:33:40 server1 maldet(25482): {update} hashing install files and checking against server... Jun 04 2025 03:33:40 server1 maldet(25482): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 04 2025 03:33:40 server1 maldet(25482): {update} latest version already installed. Jun 04 2025 03:33:40 server1 maldet(25596): {sigup} performing signature update check... Jun 04 2025 03:33:40 server1 maldet(25596): {sigup} local signature set is version 202506011196154 Jun 04 2025 03:33:41 server1 maldet(25596): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 04 2025 03:33:41 server1 maldet(25596): {sigup} latest signature set already installed Jun 04 2025 03:33:41 server1 maldet(25688): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 04 2025 03:33:41 server1 maldet(25688): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 04 2025 03:33:41 server1 maldet(25688): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 04 2025 03:33:41 server1 maldet(25688): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 04 2025 03:33:41 server1 maldet(25688): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 04 2025 03:33:42 server1 maldet(25688): {scan} file list completed in 1s, found 40 files... Jun 04 2025 03:33:42 server1 maldet(25688): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 04 2025 03:33:42 server1 maldet(25688): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (40 files) in progress... Jun 04 2025 03:34:15 server1 maldet(25688): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 40, malware hits 0, cleaned hits 0, time 34s Jun 04 2025 03:34:15 server1 maldet(25688): {scan} scan report saved, to view run: maldet --report 250604-0333.25688 Jun 05 2025 03:29:40 server1 maldet(5060): {update} checking for available updates... Jun 05 2025 03:30:39 server1 maldet(5060): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 05 2025 03:30:39 server1 maldet(5060): {update} hashing install files and checking against server... Jun 05 2025 03:30:39 server1 maldet(5060): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 05 2025 03:30:39 server1 maldet(5060): {update} latest version already installed. Jun 05 2025 03:30:39 server1 maldet(5266): {sigup} performing signature update check... Jun 05 2025 03:30:39 server1 maldet(5266): {sigup} local signature set is version 202506011196154 Jun 05 2025 03:31:43 server1 maldet(5266): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 05 2025 03:31:43 server1 maldet(5266): {sigup} new signature set error code: 525 available Jun 05 2025 03:31:43 server1 maldet(5266): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 05 2025 03:32:22 server1 maldet(5266): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 05 2025 03:33:14 server1 maldet(5266): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 05 2025 03:33:14 server1 maldet(5266): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 05 2025 03:33:58 server1 maldet(5266): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 05 2025 03:34:28 server1 maldet(5266): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 05 2025 03:34:28 server1 maldet(5266): {sigup} unable to verify md5sum of maldet-sigpack.tgz, please try again or contact proj@rfxn.com Jun 05 2025 03:34:28 server1 maldet(5266): {sigup} unable to verify md5sum of maldet-clean.tgz, please try again or contact proj@rfxn.com Jun 05 2025 03:34:28 server1 maldet(5565): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 05 2025 03:34:28 server1 maldet(5565): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 05 2025 03:34:28 server1 maldet(5565): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 05 2025 03:34:28 server1 maldet(5565): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 05 2025 03:34:28 server1 maldet(5565): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 05 2025 03:34:30 server1 maldet(5565): {scan} file list completed in 2s, found 36 files... Jun 05 2025 03:34:30 server1 maldet(5565): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 05 2025 03:34:30 server1 maldet(5565): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (36 files) in progress... Jun 05 2025 03:35:14 server1 maldet(5565): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 36, malware hits 0, cleaned hits 0, time 46s Jun 05 2025 03:35:14 server1 maldet(5565): {scan} scan report saved, to view run: maldet --report 250605-0334.5565 Jun 06 2025 03:47:03 server1 maldet(23798): {update} checking for available updates... Jun 06 2025 03:47:03 server1 maldet(23798): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 06 2025 03:47:03 server1 maldet(23798): {update} hashing install files and checking against server... Jun 06 2025 03:47:03 server1 maldet(23798): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 06 2025 03:47:03 server1 maldet(23798): {update} latest version already installed. Jun 06 2025 03:47:03 server1 maldet(23911): {sigup} performing signature update check... Jun 06 2025 03:47:03 server1 maldet(23911): {sigup} local signature set is version 202506011196154 Jun 06 2025 03:47:04 server1 maldet(23911): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 06 2025 03:47:04 server1 maldet(23911): {sigup} new signature set 202506042164456 available Jun 06 2025 03:47:04 server1 maldet(23911): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 06 2025 03:47:05 server1 maldet(23911): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 06 2025 03:47:05 server1 maldet(23911): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 06 2025 03:47:05 server1 maldet(23911): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 06 2025 03:47:06 server1 maldet(23911): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 06 2025 03:47:06 server1 maldet(23911): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 06 2025 03:47:06 server1 maldet(23911): {sigup} verified md5sum of maldet-sigpack.tgz Jun 06 2025 03:47:06 server1 maldet(23911): {sigup} unpacked and installed maldet-sigpack.tgz Jun 06 2025 03:47:06 server1 maldet(23911): {sigup} verified md5sum of maldet-clean.tgz Jun 06 2025 03:47:06 server1 maldet(23911): {sigup} unpacked and installed maldet-clean.tgz Jun 06 2025 03:47:06 server1 maldet(23911): {sigup} signature set update completed Jun 06 2025 03:47:06 server1 maldet(23911): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 06 2025 03:47:06 server1 maldet(24120): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 06 2025 03:47:06 server1 maldet(24120): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 06 2025 03:47:06 server1 maldet(24120): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 06 2025 03:47:06 server1 maldet(24120): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 06 2025 03:47:06 server1 maldet(24120): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 06 2025 03:47:18 server1 maldet(24120): {scan} file list completed in 12s, found 42 files... Jun 06 2025 03:47:18 server1 maldet(24120): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 06 2025 03:47:18 server1 maldet(24120): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (42 files) in progress... Jun 06 2025 03:47:51 server1 maldet(24120): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 42, malware hits 0, cleaned hits 0, time 45s Jun 06 2025 03:47:51 server1 maldet(24120): {scan} scan report saved, to view run: maldet --report 250606-0347.24120 Jun 06 2025 17:15:43 server1 maldet(839): {mon} could not find monitor mode dependency 'ed' in PATH, please apt/yum/dnf install ed and try again. Jun 07 2025 03:13:10 server1 maldet(17779): {update} checking for available updates... Jun 07 2025 03:13:10 server1 maldet(17779): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 07 2025 03:13:10 server1 maldet(17779): {update} hashing install files and checking against server... Jun 07 2025 03:13:11 server1 maldet(17779): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 07 2025 03:13:11 server1 maldet(17779): {update} latest version already installed. Jun 07 2025 03:13:11 server1 maldet(17893): {sigup} performing signature update check... Jun 07 2025 03:13:11 server1 maldet(17893): {sigup} local signature set is version 202506042164456 Jun 07 2025 03:13:11 server1 maldet(17893): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 07 2025 03:13:11 server1 maldet(17893): {sigup} latest signature set already installed Jun 07 2025 03:13:11 server1 maldet(17986): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 07 2025 03:13:11 server1 maldet(17986): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 07 2025 03:13:12 server1 maldet(17986): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 07 2025 03:13:12 server1 maldet(17986): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 07 2025 03:13:12 server1 maldet(17986): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 07 2025 03:13:15 server1 maldet(17986): {scan} file list completed in 3s, found 66 files... Jun 07 2025 03:13:15 server1 maldet(17986): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 07 2025 03:13:15 server1 maldet(17986): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (66 files) in progress... Jun 07 2025 03:13:49 server1 maldet(17986): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 66, malware hits 0, cleaned hits 0, time 38s Jun 07 2025 03:13:49 server1 maldet(17986): {scan} scan report saved, to view run: maldet --report 250607-0313.17986 Jun 08 2025 03:54:16 server1 maldet(16172): {update} checking for available updates... Jun 08 2025 03:54:16 server1 maldet(16172): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 08 2025 03:54:17 server1 maldet(16172): {update} hashing install files and checking against server... Jun 08 2025 03:54:17 server1 maldet(16172): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 08 2025 03:54:17 server1 maldet(16172): {update} latest version already installed. Jun 08 2025 03:54:17 server1 maldet(16286): {sigup} performing signature update check... Jun 08 2025 03:54:17 server1 maldet(16286): {sigup} local signature set is version 202506042164456 Jun 08 2025 03:54:17 server1 maldet(16286): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 08 2025 03:54:17 server1 maldet(16286): {sigup} new signature set 20250607589111 available Jun 08 2025 03:54:17 server1 maldet(16286): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 08 2025 03:54:18 server1 maldet(16286): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 08 2025 03:54:19 server1 maldet(16286): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 08 2025 03:54:19 server1 maldet(16286): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 08 2025 03:54:19 server1 maldet(16286): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 08 2025 03:54:19 server1 maldet(16286): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 08 2025 03:54:19 server1 maldet(16286): {sigup} verified md5sum of maldet-sigpack.tgz Jun 08 2025 03:54:19 server1 maldet(16286): {sigup} unpacked and installed maldet-sigpack.tgz Jun 08 2025 03:54:19 server1 maldet(16286): {sigup} verified md5sum of maldet-clean.tgz Jun 08 2025 03:54:19 server1 maldet(16286): {sigup} unpacked and installed maldet-clean.tgz Jun 08 2025 03:54:19 server1 maldet(16286): {sigup} signature set update completed Jun 08 2025 03:54:19 server1 maldet(16286): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 08 2025 03:54:20 server1 maldet(16505): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 08 2025 03:54:20 server1 maldet(16505): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 08 2025 03:54:20 server1 maldet(16505): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 08 2025 03:54:20 server1 maldet(16505): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 08 2025 03:54:20 server1 maldet(16505): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 08 2025 03:54:22 server1 maldet(16505): {scan} file list completed in 2s, found 21 files... Jun 08 2025 03:54:22 server1 maldet(16505): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 08 2025 03:54:22 server1 maldet(16505): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (21 files) in progress... Jun 08 2025 03:54:54 server1 maldet(16505): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 21, malware hits 0, cleaned hits 0, time 34s Jun 08 2025 03:54:54 server1 maldet(16505): {scan} scan report saved, to view run: maldet --report 250608-0354.16505 Jun 09 2025 03:26:03 server1 maldet(3454): {update} checking for available updates... Jun 09 2025 03:26:04 server1 maldet(3454): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 09 2025 03:26:04 server1 maldet(3454): {update} hashing install files and checking against server... Jun 09 2025 03:26:04 server1 maldet(3454): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 09 2025 03:26:04 server1 maldet(3454): {update} latest version already installed. Jun 09 2025 03:26:04 server1 maldet(3567): {sigup} performing signature update check... Jun 09 2025 03:26:04 server1 maldet(3567): {sigup} local signature set is version 20250607589111 Jun 09 2025 03:26:04 server1 maldet(3567): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 09 2025 03:26:04 server1 maldet(3567): {sigup} latest signature set already installed Jun 09 2025 03:26:04 server1 maldet(3659): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 09 2025 03:26:05 server1 maldet(3659): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 09 2025 03:26:05 server1 maldet(3659): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 09 2025 03:26:05 server1 maldet(3659): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 09 2025 03:26:05 server1 maldet(3659): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 09 2025 03:26:07 server1 maldet(3659): {scan} file list completed in 2s, found 25 files... Jun 09 2025 03:26:07 server1 maldet(3659): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 09 2025 03:26:07 server1 maldet(3659): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (25 files) in progress... Jun 09 2025 03:26:35 server1 maldet(3659): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 25, malware hits 0, cleaned hits 0, time 31s Jun 09 2025 03:26:35 server1 maldet(3659): {scan} scan report saved, to view run: maldet --report 250609-0326.3659 Jun 10 2025 03:19:44 server1 maldet(7809): {update} checking for available updates... Jun 10 2025 03:19:45 server1 maldet(7809): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 10 2025 03:19:45 server1 maldet(7809): {update} hashing install files and checking against server... Jun 10 2025 03:19:45 server1 maldet(7809): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 10 2025 03:19:45 server1 maldet(7809): {update} latest version already installed. Jun 10 2025 03:19:45 server1 maldet(7932): {sigup} performing signature update check... Jun 10 2025 03:19:46 server1 maldet(7932): {sigup} local signature set is version 20250607589111 Jun 10 2025 03:19:46 server1 maldet(7932): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 10 2025 03:19:46 server1 maldet(7932): {sigup} latest signature set already installed Jun 10 2025 03:19:46 server1 maldet(8028): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 10 2025 03:19:46 server1 maldet(8028): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 10 2025 03:19:46 server1 maldet(8028): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 10 2025 03:19:46 server1 maldet(8028): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 10 2025 03:19:46 server1 maldet(8028): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 10 2025 03:19:48 server1 maldet(8028): {scan} file list completed in 2s, found 21 files... Jun 10 2025 03:19:48 server1 maldet(8028): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 10 2025 03:19:48 server1 maldet(8028): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (21 files) in progress... Jun 10 2025 03:20:22 server1 maldet(8028): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 21, malware hits 0, cleaned hits 0, time 36s Jun 10 2025 03:20:22 server1 maldet(8028): {scan} scan report saved, to view run: maldet --report 250610-0319.8028