| Directory : /home/cxs/ |
|
|
| Current File : //home/cxs/scan-2025-07-11-1752261114.txt |
----------- SCAN REPORT -----------
TimeStamp: Fri, 11 Jul 2025 19:12:06 +0000
(/usr/sbin/cxs --clamdsock /var/run/clamd.scan/clamd.sock --defapache apache --doptions Mv --exploitscan --nofallback --filemax 100000 --noforce --html --ignore /home/cxs/ignore --options mMOLfSGchexdnwZDRru --noprobability --qoptions Mv --report /home/cxs/scan-2025-07-11-1752261114.txt --sizemax 1000000 --ssl --summary --sversionscan --timemax 30 --nounofficial --virusscan --vmrssmax 2000000 --waitscan 0 /home)
Scanning /home:
'/home/absolute/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/absolute]
'/home/absolute/www'
# Symlink to [public_html]
'/home/absolute/public_html/node_modules/.bin/mime'
# Symlink to [../mime/cli.js]
'/home/absolute/public_html/node_modules/.bin/mkdirp'
# Symlink to [../mkdirp/bin/cmd.js]
'/home/absolute/public_html/node_modules/.bin/twigjs'
# Symlink to [../twig/bin/twigjs]
'/home/assagcare/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/assagcare]
'/home/assagcare/www'
# Symlink to [public_html]
'/home/assagcare/.trash/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'
# Universal decode regex match = [universal decoder]
'/home/assagcare/.trash/wp-content/plugins/bluehost-wordpress-plugin/inc/Admin.php'
# Universal decode regex match = [universal decoder]
'/home/assagcare/.trash/wp-content/plugins/bluehost-wordpress-plugin/inc/alt-experience/init.php'
# Universal decode regex match = [universal decoder]
'/home/assagcare/.trash/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'
# Universal decode regex match = [universal decoder]
'/home/assagcare/.trash/wp-content/plugins/instawp-connect/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php'
# Universal decode regex match = [universal decoder]
'/home/assagcare/.trash/wp-content/plugins/instawp-connect/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php'
# Universal decode regex match = [universal decoder]
'/home/assagcare/.trash/wp-content/plugins/pairgiver-common/meta-box/inc/about/about.php'
# Universal decode regex match = [universal decoder]
'/home/assagcare/.trash/wp-content/plugins/siteseo/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php'
# Universal decode regex match = [universal decoder]
'/home/assagcare/.trash/wp-content/plugins/siteseo/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php'
# Universal decode regex match = [universal decoder]
# Scan Timeout (30 secs) while processing:
'/home/assagcare/.trash/wp-content/updraft/backup_2024-10-02-1434_Assagcare_cc55294c9472-plugins2.zip'
# Scan Timeout (30 secs) while processing:
'/home/assagcare/.trash/wp-content/updraft/backup_2024-10-02-1434_Assagcare_cc55294c9472-themes2.zip'
'/home/assagcare/.trash/wp-content/updraft/plugins-old/pairgiver-common/meta-box/inc/about/about.php'
# Universal decode regex match = [universal decoder]
'/home/assagcare/public_html/wp-content/plugins/pairgiver-common/meta-box/inc/about/about.php'
# Universal decode regex match = [universal decoder]
# Scan Timeout (30 secs) while processing:
'/home/assagcare/public_html/wp-content/updraft/backup_2024-10-02-1434_Assagcare_cc55294c9472-plugins2.zip'
# Scan Timeout (30 secs) while processing:
'/home/assagcare/public_html/wp-content/updraft/backup_2024-10-02-1434_Assagcare_cc55294c9472-themes2.zip'
'/home/assagcare/public_html/wp-content/updraft/plugins-old/pairgiver-common/meta-box/inc/about/about.php'
# Universal decode regex match = [universal decoder]
'/home/bethesda/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/bethesda]
'/home/bethesda/www'
# Symlink to [public_html]
'/home/bethesda/.cphorde/meta/latest'
# Symlink to [horde.backup.sql.20220114]
'/home/bethesda/etc/bethesdarecruitment.co.uk/admin.rcube.db.latest'
# Symlink to [admin.rcube.db.1748999533]
'/home/bethesda/etc/bethesdarecruitment.co.uk/funmi.rcube.db.latest'
# Symlink to [funmi.rcube.db.1748999533]
'/home/bethesda/etc/bethesdarecruitment.co.uk/info.rcube.db.latest'
# Symlink to [info.rcube.db.1748999533]
'/home/bethesda/etc/bethesdarecruitment.co.uk/kolawole.rcube.db.latest'
# Symlink to [kolawole.rcube.db.1748999533]
'/home/bethesda/etc/bethesdarecruitment.co.uk/u2us.rcube.db.latest'
# Symlink to [u2us.rcube.db.1748999533]
'/home/bethesda/mail/.admin@bethesdarecruitment_co_uk'
# Symlink to [bethesdarecruitment.co.uk/admin]
'/home/bethesda/mail/.funmi@bethesdarecruitment_co_uk'
# Symlink to [bethesdarecruitment.co.uk/funmi]
'/home/bethesda/mail/.info@bethesdarecruitment_co_uk'
# Symlink to [bethesdarecruitment.co.uk/info]
'/home/bethesda/mail/.kolawole@bethesdarecruitment_co_uk'
# Symlink to [bethesdarecruitment.co.uk/kolawole]
'/home/bethesda/mail/.u2us@bethesdarecruitment_co_uk'
# Symlink to [bethesdarecruitment.co.uk/u2us]
'/home/bethesda/public_html/node_modules/.bin/mime'
# Symlink to [../mime/cli.js]
'/home/bethesda/public_html/node_modules/.bin/mkdirp'
# Symlink to [../mkdirp/bin/cmd.js]
'/home/bethesda/public_html/node_modules/.bin/semver'
# Symlink to [../semver/bin/semver]
'/home/bethesda/public_html/node_modules/.bin/twigjs'
# Symlink to [../twig/bin/twigjs]
'/home/bezaleel/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/bezaleel]
'/home/bezaleel/www'
# Symlink to [public_html]
'/home/bezaleel/.npm/_cacache/content-v2/sha1/2b/32'
# World writeable directory
'/home/bezaleel/etc/bezaleel.rcube.db.latest'
# Symlink to [bezaleel.rcube.db.1748999533]
'/home/bezaleel/public_html/billing/vendor/seld/cli-prompt/res/hiddeninput.exe'
# MS Windows Binary/Executable [application/x-winexec]
'/home/bezaleel/public_html/billing/vendor/symfony/console/Resources/bin/hiddeninput.exe'
# MS Windows Binary/Executable [application/x-winexec]
'/home/bezaleel/public_html/billing/vendor/whmcs/whmcs-foundation/lib/Environment/Ioncube/Log/File.php'
# Regular expression match = [\b0day]
'/home/bezaleel/public_html/node_modules/.bin/mime'
# Symlink to [../mime/cli.js]
'/home/bezaleel/public_html/node_modules/.bin/mkdirp'
# Symlink to [../mkdirp/bin/cmd.js]
'/home/bezaleel/public_html/node_modules/.bin/pixelmatch'
# Symlink to [../pixelmatch/bin/pixelmatch]
'/home/bezaleel/public_html/node_modules/.bin/semver'
# Symlink to [../semver/bin/semver]
'/home/bezaleel/public_html/node_modules/.bin/twigjs'
# Symlink to [../twig/bin/twigjs]
'/home/bezaleel/public_html/node_modules/.bin/uuid'
# Symlink to [../uuid/dist/bin/uuid]
'/home/bezaleel/public_html/truelayer/node_modules/.bin/acorn'
# Symlink to [../acorn/bin/acorn]
'/home/bezaleel/public_html/truelayer/node_modules/.bin/eslint'
# Symlink to [../eslint/bin/eslint.js]
'/home/bezaleel/public_html/truelayer/node_modules/.bin/eslint-config-prettier'
# Symlink to [../eslint-config-prettier/bin/cli.js]
'/home/bezaleel/public_html/truelayer/node_modules/.bin/esparse'
# Symlink to [../esprima/bin/esparse.js]
'/home/bezaleel/public_html/truelayer/node_modules/.bin/esvalidate'
# Symlink to [../esprima/bin/esvalidate.js]
'/home/bezaleel/public_html/truelayer/node_modules/.bin/js-yaml'
# Symlink to [../js-yaml/bin/js-yaml.js]
'/home/bezaleel/public_html/truelayer/node_modules/.bin/mime'
# Symlink to [../mime/cli.js]
'/home/bezaleel/public_html/truelayer/node_modules/.bin/node-which'
# Symlink to [../which/bin/node-which]
'/home/bezaleel/public_html/truelayer/node_modules/.bin/prettier'
# Symlink to [../prettier/bin-prettier.js]
'/home/bezaleel/public_html/truelayer/node_modules/.bin/rimraf'
# Symlink to [../rimraf/bin.js]
'/home/bezaleel/public_html/truelayer/node_modules/.bin/semver'
# Symlink to [../semver/bin/semver.js]
'/home/bezaleel/public_html/truelayer/node_modules/.bin/sshpk-conv'
# Symlink to [../sshpk/bin/sshpk-conv]
'/home/bezaleel/public_html/truelayer/node_modules/.bin/sshpk-sign'
# Symlink to [../sshpk/bin/sshpk-sign]
'/home/bezaleel/public_html/truelayer/node_modules/.bin/sshpk-verify'
# Symlink to [../sshpk/bin/sshpk-verify]
'/home/bezaleel/public_html/truelayer/node_modules/.bin/twigjs'
# Symlink to [../twig/bin/twigjs]
'/home/bezaleel/public_html/truelayer/node_modules/.bin/uuid'
# Symlink to [../uuid/dist/bin/uuid]
'/home/bezaleel/public_html/truelayer/node_modules/jsonwebtoken/node_modules/.bin/semver'
# Symlink to [../semver/bin/semver.js]
'/home/bezaleel/public_html/truelayer/node_modules/request/node_modules/.bin/uuid'
# Symlink to [../uuid/bin/uuid]
'/home/bitola/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/bitola]
'/home/bitola/www'
# Symlink to [public_html]
'/home/bitola/public_html/updated/node_modules/.bin/mime'
# Symlink to [../mime/cli.js]
'/home/bitola/public_html/updated/node_modules/.bin/mkdirp'
# Symlink to [../mkdirp/bin/cmd.js]
'/home/bitola/public_html/updated/node_modules/.bin/pixelmatch'
# Symlink to [../pixelmatch/bin/pixelmatch]
'/home/bitola/public_html/updated/node_modules/.bin/semver'
# Symlink to [../semver/bin/semver]
'/home/bitola/public_html/updated/node_modules/.bin/twigjs'
# Symlink to [../twig/bin/twigjs]
'/home/bitola/public_html/updated/node_modules/.bin/uuid'
# Symlink to [../uuid/dist/bin/uuid]
'/home/braceletsbyheart/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/braceletsbyheart]
'/home/braceletsbyheart/www'
# Symlink to [public_html]
'/home/braceletsbyheart/mail/.admin@braceletsbyheart_com'
# Symlink to [braceletsbyheart.com/admin]
'/home/braceletsbyheart/mail/.sightings@braceletsbyheart_com'
# Symlink to [braceletsbyheart.com/sightings]
'/home/braceletsbyheart/mail/.support@braceletsbyheart_com'
# Symlink to [braceletsbyheart.com/support]
'/home/braceletsbyheart/mail/.unambitious@braceletsbyheart_com'
# Symlink to [braceletsbyheart.com/unambitious]
'/home/bunsoy/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/bunsoy]
'/home/bunsoy/www'
# Symlink to [public_html]
'/home/bunsoy/.cache/node-gyp/10.24.1/include/node/uv.h'
# Suspicious file type [application/x-c]
'/home/bunsoy/.cache/node-gyp/10.24.1/include/node/v8.h'
# Suspicious file type [application/x-c]
'/home/bunsoy/.cphorde/meta/latest'
# Symlink to [horde.backup.sql.20220114]
'/home/bunsoy/.npm/_cacache/content-v2/sha512/06/f1'
# World writeable directory
'/home/bunsoy/.npm/_cacache/content-v2/sha512/49/a2/7742ae255fd4b2776c44a3dbb7a8fc62fce07ee493bf9e024a2bded70e96b50b9f3b1fd11660ee8a0fcf7de430234a29d6bdd1ca46b08e5d5502e5fbc63a'
# (compressed file: package/node.abi108.glibc.node [depth: 1]) Linux Binary/Executable [application/x-sharedlib]
# (compressed file: package/node.abi108.musl.node [depth: 1]) Linux Binary/Executable [application/x-sharedlib]
# (compressed file: package/node.napi.glibc.node [depth: 1]) Linux Binary/Executable [application/x-sharedlib]
# (compressed file: package/node.napi.musl.node [depth: 1]) Linux Binary/Executable [application/x-sharedlib]
'/home/bunsoy/.npm/_cacache/content-v2/sha512/5e/b0/b4273b2a412bcec8cdedd3814c2ceeb3e600ae84f13a938157b8b2b9c5fe7665b76f7057b5c819a8ee67827b0f41f06d9fd13f62bbdb7791f4d845844e80'
# (compressed file: package/node.abi108.node [depth: 1]) MS Windows Binary/Executable [application/x-winexec]
# (compressed file: package/node.napi.node [depth: 1]) MS Windows Binary/Executable [application/x-winexec]
'/home/bunsoy/.npm/_cacache/content-v2/sha512/86/5c/712dd4663f2ab5e900aeb54b4ff139ba44359cc9a2ec46cb1a1d139ab609e43b176578c4e07ad7fd26c76770bf2f2e1ec5572fd137d8b75d1e5d9dbf5c44'
# (compressed file: package/node.abi108.glibc.node [depth: 1]) Linux Binary/Executable [application/x-sharedlib]
# (compressed file: package/node.abi108.musl.node [depth: 1]) Linux Binary/Executable [application/x-sharedlib]
# (compressed file: package/node.napi.glibc.node [depth: 1]) Linux Binary/Executable [application/x-sharedlib]
# (compressed file: package/node.napi.musl.node [depth: 1]) Linux Binary/Executable [application/x-sharedlib]
'/home/bunsoy/.npm/_cacache/content-v2/sha512/d1/87/2f592bfb64e1a5f4e77a639889dd79cfc30f0eed62dca58303c17f8f000fee5cb0edcb0f783c9bfd18b415fe79e9ddc5a50e1328c8a64840baf1df7b16a2'
# (compressed file: package/src/extract.cpp [depth: 1]) Suspicious file type [application/x-c]
'/home/bunsoy/.npm/_cacache/content-v2/sha512/f7/8c/b93c9ad23aa50d7052a63a5ef3df5f457a508b004d2bcff8cf0964be52d74c66fa5ae23ad077e7093d008ba7615eb35c805bf614423fc38ba6154f773723'
# (compressed file: package/node.abi108.glibc.node [depth: 1]) Linux Binary/Executable [application/x-sharedlib]
# (compressed file: package/node.abi108.musl.node [depth: 1]) Linux Binary/Executable [application/x-sharedlib]
# (compressed file: package/node.napi.glibc.node [depth: 1]) Linux Binary/Executable [application/x-sharedlib]
# (compressed file: package/node.napi.musl.node [depth: 1]) Linux Binary/Executable [application/x-sharedlib]
'/home/bunsoy/etc/bunsoy.rcube.db.latest'
# Symlink to [bunsoy.rcube.db.1748999533]
'/home/bunsoy/etc/bunsoyservices.com/admin.rcube.db.latest'
# Symlink to [admin.rcube.db.1682989940]
'/home/bunsoy/node_modules/.bin/download-msgpackr-prebuilds'
# Symlink to [../msgpackr-extract/bin/download-prebuilds.js]
'/home/bunsoy/node_modules/.bin/node-gyp-build-optional-packages'
# Symlink to [../node-gyp-build-optional-packages/bin.js]
'/home/bunsoy/node_modules/.bin/node-gyp-build-optional-packages-optional'
# Symlink to [../node-gyp-build-optional-packages/optional.js]
'/home/bunsoy/node_modules/.bin/node-gyp-build-optional-packages-test'
# Symlink to [../node-gyp-build-optional-packages/build-test.js]
'/home/bunsoy/node_modules/.bin/semver'
# Symlink to [../semver/bin/semver.js]
'/home/bunsoy/node_modules/.bin/uuid'
# Symlink to [../uuid/dist/bin/uuid]
'/home/bunsoy/node_modules/msgpackr-extract/src/extract.cpp'
# Suspicious file type [application/x-c]
'/home/bunsoy/public_html/node_modules/.bin/mime'
# Symlink to [../mime/cli.js]
'/home/bunsoy/public_html/node_modules/.bin/mkdirp'
# Symlink to [../mkdirp/bin/cmd.js]
'/home/bunsoy/public_html/node_modules/.bin/pixelmatch'
# Symlink to [../pixelmatch/bin/pixelmatch]
'/home/bunsoy/public_html/node_modules/.bin/semver'
# Symlink to [../semver/bin/semver]
'/home/bunsoy/public_html/node_modules/.bin/twigjs'
# Symlink to [../twig/bin/twigjs]
'/home/bunsoytrade/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/bunsoytrade]
'/home/bunsoytrade/www'
# Symlink to [public_html]
'/home/bunsoytrade/.cpanel/ea-php-cli/public_html/.ea-php-cli.cache'
# Symlink to [ea-php80]
'/home/bunsoytrade/.cpanel/ea-php-cli/public_html/testing/.ea-php-cli.cache'
# Symlink to [ea-php80]
'/home/bunsoytrade/etc/bunsoytrading.com/admin.rcube.db.latest'
# Symlink to [admin.rcube.db.1748999533]
'/home/bunsoytrade/mail/.admin@bunsoytrading_com'
# Symlink to [bunsoytrading.com/admin]
'/home/bunsoytrade/public_html/wp-content/plugins/code-snippets/code-snippets.php'
# Script version check [OLD] [Code Snippets v3.2.2 < v3.3.0]
'/home/bunsoytrade/public_html/wp-content/plugins/contact-form-7/wp-contact-form-7.php'
# Script version check [OLD] [Contact Form 7 v5.5.3 < v5.7.6]
'/home/bunsoytrade/public_html/wp-content/plugins/google-listings-and-ads/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php'
# Universal decode regex match = [universal decoder]
'/home/bunsoytrade/public_html/wp-content/plugins/google-listings-and-ads/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php'
# Universal decode regex match = [universal decoder]
'/home/bunsoytrade/public_html/wp-content/plugins/nextend-facebook-connect/nextend-facebook-connect.php'
# Script version check [OLD] [Nextend Social Login v3.1.3 < v3.1.8]
'/home/bunsoytrade/public_html/wp-content/plugins/peters-login-redirect/wplogin_redirect.php'
# Script version check [OLD] [LoginWP (Formerly Peter's Login Redirect) v3.0.6.0 < v3.0.8.0]
'/home/bunsoytrade/public_html/wp-content/plugins/stops-core-theme-and-plugin-updates/main.php'
# Script version check [OLD] [Easy Updates Manager v9.0.12 < v9.0.15]
'/home/bunsoytrade/public_html/wp-content/plugins/w3-total-cache/CdnEngine_Ftp.php'
# Regular expression match = [\n(?!\s*(//|\#|\*)).*\.ssh/]
'/home/bunsoytrade/public_html/wp-content/plugins/w3-total-cache/w3-total-cache.php'
# Script version check [OLD] [W3 Total Cache v2.2.1 < v2.3.2]
'/home/bunsoytrade/public_html/wp-content/plugins/woo-checkout-field-editor-pro/checkout-form-designer.php'
# Script version check [OLD] [Checkout Field Editor for WooCommerce v1.8.1 < v1.8.2]
'/home/bunsoytrade/public_html/wp-content/plugins/woocommerce/woocommerce.php'
# Script version check [OLD] [WooCommerce v6.0.0 < v7.7.0]
'/home/bunsoytrade/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'
# Universal decode regex match = [universal decoder]
'/home/bunsoytrade/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'
# Suspicious file type [application/x-c]
'/home/bunsoytrade/public_html/wp-content/plugins/woocommerce-gateway-stripe/woocommerce-gateway-stripe.php'
# Script version check [OLD] [WooCommerce Stripe Gateway v6.0.0 < v7.4.0]
'/home/bunsoytrade/public_html/wp-content/plugins/woocommerce-payments/woocommerce-payments.php'
# Script version check [OLD] [WooCommerce Payments v3.5.0 < v5.9.0]
'/home/bunsoytrade/public_html/wp-content/plugins/woocommerce-paypal-payments/woocommerce-paypal-payments.php'
# Script version check [OLD] [WooCommerce PayPal Payments v2.0.1 < v2.0.4]
'/home/bunsoytrade/public_html/wp-content/plugins/woocommerce-services/woocommerce-services.php'
# Script version check [OLD] [WooCommerce Shipping & Tax v1.25.20 < v2.2.4]
'/home/bunsoytrade/public_html/wp-content/plugins/wp-file-manager/lib/codemirror/mode/clike/index.html'
# Suspicious file type [application/x-c]
'/home/bunsoytrade/public_html/wp-content/plugins/wp-mail-logging/wp-mail-logging.php'
# Script version check [OLD] [WP Mail Logging v1.10.5 < v1.11.0]
'/home/bunsoytrade/public_html/wp-content/plugins/wp-mail-smtp/wp_mail_smtp.php'
# Script version check [OLD] [WP Mail SMTP v3.7.0 < v3.8.0]
'/home/bunsoytrade/public_html/wp-content/plugins/wp-mail-smtp/src/Admin/Area.php'
# Universal decode regex match = [universal decoder]
'/home/bunsoytrade/public_html/wp-content/plugins/wp-mail-smtp/src/Admin/SetupWizard.php'
# Universal decode regex match = [universal decoder]
'/home/bunsoytrade/public_html/wp-content/plugins/wp-mail-smtp/vendor_prefixed/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php'
# Universal decode regex match = [universal decoder]
'/home/bunsoytrade/public_html/wp-content/plugins/wp-mail-smtp/vendor_prefixed/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php'
# Universal decode regex match = [universal decoder]
'/home/bunsoytrade/public_html/wp-content/plugins/wpforms-lite/wpforms.php'
# Script version check [OLD] [WPForms Lite v1.7.8 < v1.8.1.2]
'/home/bunsoytrade/public_html/wp-content/plugins/yith-woocommerce-wishlist/init.php'
# Script version check [OLD] [YITH WooCommerce Wishlist v3.4.0 < v3.21.0]
'/home/bunsoytrade/public_html/wp-includes/version.php'
# Script version check [OLD] [Wordpress v6.1.1 < v6.2.2]
'/home/careaid/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/careaid]
'/home/careaid/www'
# Symlink to [public_html]
'/home/cheft/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/cheft]
'/home/cheft/www'
# Symlink to [public_html]
'/home/cheft/public_html/admin/app/third_party/MX/Controller.php'
# Universal decode regex match = [universal decoder]
'/home/cheft/public_html/admin/system/core/CodeIgniter.php'
# Script version check [OLD] [CodeIgniter v2.2.0 < v4.4.0]
'/home/cheft/public_html/app/modules/landing/controllers/landing.php'
# Universal decode regex match = [universal decoder]
'/home/cheft/public_html/system/core/CodeIgniter.php'
# Script version check [OLD] [CodeIgniter v2.2.0 < v4.4.0]
'/home/ckgroceries/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/ckgroceries]
'/home/ckgroceries/www'
# Symlink to [public_html]
'/home/ckgroceries/public_html/Sitemap.php'
# Universal decode regex match = [universal decoder]
# Decode regex match = [decode regex: 1]
'/home/ckgroceries/public_html/app/Http/Controllers/generalcontroller.php'
# Universal decode regex match = [universal decoder]
'/home/ckgroceries/public_html/app/Http/Controllers/testingcontroller.php'
# Universal decode regex match = [universal decoder]
'/home/ckgroceries/public_html/vendor/symfony/console/Resources/bin/hiddeninput.exe'
# MS Windows Binary/Executable [application/x-winexec]
'/home/ckgroceries/public_html/vendor/symfony/debug/Resources/ext/symfony_debug.c'
# Suspicious file type [application/x-c]
'/home/cmc/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/cmc]
'/home/cmc/www'
# Symlink to [public_html]
'/home/cmc/.cphorde/meta/latest'
# Symlink to [horde.backup.sql.20211026]
'/home/cmc/.npm/_cacache/content-v2/sha512/1e/43/4fdcaefd3e6ab19317e0357fede6bb1f58b34c73cf4a54a0e6d97a23bb4314dd36c6652736ad62d97df8048ad213b0c70fa642ad66600905cc4c5ef51114'
# (compressed file: package/lib/Sysinfo/fastlist.exe [depth: 1]) MS Windows Binary/Executable [application/x-winexec]
'/home/cmc/.npm/_cacache/content-v2/sha512/a9/ab/b47335120747f34a504e42dd1ba3e236bfa47ec6241d8fbf1ed4147f4237e5e4e1d627fbab5e2f3e8a5c357877bee6149e0c8d70af0553803a76c2cb78a0'
# (compressed file: package/fastlist.exe [depth: 1]) MS Windows Binary/Executable [application/x-winexec]
'/home/cmc/.pm2/pub.sock'
# Socket
'/home/cmc/.pm2/rpc.sock'
# Socket
'/home/cmc/etc/cmc.rcube.db.latest'
# Symlink to [cmc.rcube.db.1748999533]
'/home/cmc/etc/c-m-c.live/info.rcube.db.latest'
# Symlink to [info.rcube.db.1748999533]
'/home/cmc/etc/c-m-c.live/no_reply.rcube.db.latest'
# Symlink to [no_reply.rcube.db.1748999533]
'/home/cmc/mail/.info@c-m-c_live'
# Symlink to [c-m-c.live/info]
'/home/cmc/mail/.no__reply@c-m-c_live'
# Symlink to [c-m-c.live/no_reply]
'/home/cmc/public_html/cmc/node_modules/pm2/lib/Sysinfo/fastlist.exe'
# MS Windows Binary/Executable [application/x-winexec]
'/home/cmc/public_html/cmc/node_modules/ps-list/fastlist.exe'
# MS Windows Binary/Executable [application/x-winexec]
'/home/cmcmmsapp/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/cmcmmsapp]
'/home/cmcmmsapp/www'
# Symlink to [public_html]
'/home/cmcmmsapp/.cphorde/meta/latest'
# Symlink to [horde.backup.sql.20220114]
'/home/cmcmmsapp/mail/new'
# Skipped - too many resources: 651606 ( > filemax=100000)
'/home/connectpay/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/connectpay]
'/home/connectpay/www'
# Symlink to [public_html]
'/home/deviceden/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/deviceden]
'/home/deviceden/www'
# Symlink to [public_html]
'/home/deviceden/.cpanel/ea-php-cli/public_html/.ea-php-cli.cache'
# Symlink to [ea-php74]
'/home/deviceden/.cpanel/ea-php-cli/public_html/jetlube/.ea-php-cli.cache'
# Symlink to [ea-php74]
'/home/deviceden/public_html/app/Http/Controllers/generalcontroller.php'
# Universal decode regex match = [universal decoder]
'/home/deviceden/public_html/app/Http/Controllers/testingcontroller.php'
# Universal decode regex match = [universal decoder]
'/home/deviceden/public_html/vendor/symfony/console/Resources/bin/hiddeninput.exe'
# MS Windows Binary/Executable [application/x-winexec]
'/home/devine/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/devine]
'/home/devine/www'
# Symlink to [public_html]
'/home/devine/.cpanel/ea-php-cli/public_html/.ea-php-cli.cache'
# Symlink to [ea-php74]
'/home/devine/.cphorde/meta/latest'
# Symlink to [horde.backup.sql.20220114]
'/home/devine/etc/devinesolicitors.co.uk/admin.rcube.db.latest'
# Symlink to [admin.rcube.db.1748999533]
'/home/devine/etc/devinesolicitors.co.uk/info.rcube.db.latest'
# Symlink to [info.rcube.db.1748999533]
'/home/devine/etc/devinesolicitors.co.uk/seyi.kwushue.rcube.db.latest'
# Symlink to [seyi.kwushue.rcube.db.1643878380]
'/home/devine/mail/.admin@devinesolicitors_co_uk'
# Symlink to [devinesolicitors.co.uk/admin]
'/home/devine/mail/.info@devinesolicitors_co_uk'
# Symlink to [devinesolicitors.co.uk/info]
'/home/devine/public_html/app/Http/Controllers/generalcontroller.php'
# Universal decode regex match = [universal decoder]
'/home/devine/public_html/app/Http/Controllers/invoicecontroller.php'
# Universal decode regex match = [universal decoder]
'/home/devine/public_html/app/Http/Controllers/testcontroller.php'
# Universal decode regex match = [universal decoder]
'/home/devine/public_html/vendor/symfony/console/Resources/bin/hiddeninput.exe'
# MS Windows Binary/Executable [application/x-winexec]
'/home/devine/public_html/vendor/symfony/debug/Resources/ext/symfony_debug.c'
# Suspicious file type [application/x-c]
'/home/dtbanquetingco/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/dtbanquetingco]
'/home/dtbanquetingco/www'
# Symlink to [public_html]
'/home/dtbanquetingco/.cpanel/live-engine-connector-OqJz5RNDpO.sock'
# Socket
'/home/dtbanquetingco/.cpanel/ea-php-cli/public_html/wp-includes/.ea-php-cli.cache'
# Symlink to [ea-php74]
'/home/dtbanquetingco/etc/dtbanquetingco.rcube.db.latest'
# Symlink to [dtbanquetingco.rcube.db.1748999533]
'/home/dtbanquetingco/etc/beta.dtbanqueting.co.uk/admin.rcube.db.latest'
# Symlink to [admin.rcube.db.1748999533]
'/home/dtbanquetingco/mail/.admin@beta_dtbanqueting_co_uk'
# Symlink to [beta.dtbanqueting.co.uk/admin]
'/home/dtbanquetingco/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'
# Universal decode regex match = [universal decoder]
'/home/dtbanquetingco/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'
# Universal decode regex match = [universal decoder]
'/home/dtbanquetingco/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'
# Suspicious file type [application/x-c]
'/home/dtbanquetingco/public_html/wp-content/plugins/woocommerce-payments/includes/admin/class-wc-payments-admin.php'
# Universal decode regex match = [universal decoder]
'/home/dtbanquetingco/public_html/wp-content/plugins/wp-mail-smtp/src/Admin/Area.php'
# Universal decode regex match = [universal decoder]
'/home/dtbanquetingco/public_html/wp-content/plugins/wp-mail-smtp/src/Admin/SetupWizard.php'
# Universal decode regex match = [universal decoder]
'/home/dudubar/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/dudubar]
'/home/dudubar/www'
# Symlink to [public_html]
'/home/dudubar/.trash/admin/system/core/CodeIgniter.php'
# Script version check [OLD] [CodeIgniter v2.2.0 < v4.4.0]
'/home/dudubar/.trash/system/core/CodeIgniter.php'
# Script version check [OLD] [CodeIgniter v2.2.0 < v4.4.0]
'/home/dudubar/public_html/admin/system/core/CodeIgniter.php'
# Script version check [OLD] [CodeIgniter v2.2.0 < v4.4.0]
'/home/dudubar/public_html/bedfordapp/system/core/CodeIgniter.php'
# Script version check [OLD] [CodeIgniter v2.2.0 < v4.4.0]
'/home/dudubar/public_html/lutonapp/system/core/CodeIgniter.php'
# Script version check [OLD] [CodeIgniter v2.2.0 < v4.4.0]
'/home/dudubar/public_html/system/core/CodeIgniter.php'
# Script version check [OLD] [CodeIgniter v2.2.0 < v4.4.0]
'/home/dudubarco/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/dudubarco]
'/home/dudubarco/www'
# Symlink to [public_html]
'/home/ebooking/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/ebooking]
'/home/ebooking/www'
# Symlink to [public_html]
'/home/ebooking/.cpanel/ea-php-cli/public_html/.ea-php-cli.cache'
# Symlink to [ea-php74]
'/home/ebooking/public_html/vendor/symfony/console/Resources/bin/hiddeninput.exe'
# MS Windows Binary/Executable [application/x-winexec]
'/home/ebooking/public_html/vendor/symfony/debug/Resources/ext/symfony_debug.c'
# Suspicious file type [application/x-c]
'/home/emergoldconcepts/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/emergoldconcepts]
'/home/emergoldconcepts/www'
# Symlink to [public_html]
'/home/emergoldconcepts/.cphorde/meta/latest'
# Symlink to [horde.backup.sql.20220114]
'/home/emergoldconcepts/mail/.admin@emergoldconcepts_com'
# Symlink to [emergoldconcepts.com/admin]
'/home/emergoldconcepts/mail/.info@emergoldconcepts_com'
# Symlink to [emergoldconcepts.com/info]
'/home/emergoldconcepts/mail/.sola@emergoldconcepts_com'
# Symlink to [emergoldconcepts.com/sola]
'/home/essentials/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/essentials]
'/home/essentials/www'
# Symlink to [public_html]
'/home/essentials/public_html/node_modules/.bin/mime'
# Symlink to [../mime/cli.js]
'/home/essentials/public_html/node_modules/.bin/mkdirp'
# Symlink to [../mkdirp/bin/cmd.js]
'/home/essentials/public_html/node_modules/.bin/semver'
# Symlink to [../semver/bin/semver]
'/home/essentials/public_html/node_modules/.bin/twigjs'
# Symlink to [../twig/bin/twigjs]
'/home/fansqyyl/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/fansqyyl]
'/home/fansqyyl/www'
# Symlink to [public_html]
'/home/fansqyyl/public_html/node_modules/.bin/mime'
# Symlink to [../mime/cli.js]
'/home/fansqyyl/public_html/node_modules/.bin/mkdirp'
# Symlink to [../mkdirp/bin/cmd.js]
'/home/fansqyyl/public_html/node_modules/.bin/pixelmatch'
# Symlink to [../pixelmatch/bin/pixelmatch]
'/home/fansqyyl/public_html/node_modules/.bin/twigjs'
# Symlink to [../twig/bin/twigjs]
'/home/fidservltd/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/fidservltd]
'/home/fidservltd/www'
# Symlink to [public_html]
'/home/fidservltd/.cpanel/ea-php-cli/public_html/.ea-php-cli.cache'
# Symlink to [ea-php74]
'/home/fidservltd/public_html/vendor/symfony/console/Resources/bin/hiddeninput.exe'
# MS Windows Binary/Executable [application/x-winexec]
'/home/globalmigration/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/globalmigration]
'/home/globalmigration/www'
# Symlink to [public_html]
'/home/globalmigration/.cphorde/meta/latest'
# Symlink to [horde.backup.sql.20220114]
'/home/globalmigration/etc/globalmigrationltd.com/admin.rcube.db.latest'
# Symlink to [admin.rcube.db.1748999533]
'/home/globalmigration/etc/globalmigrationltd.com/funmi.rcube.db.latest'
# Symlink to [funmi.rcube.db.1748999533]
'/home/globalmigration/etc/globalmigrationltd.com/info.rcube.db.latest'
# Symlink to [info.rcube.db.1748999533]
'/home/globalmigration/etc/globalmigrationltd.com/kolawole.rcube.db.latest'
# Symlink to [kolawole.rcube.db.1748999533]
'/home/globalmigration/etc/globalmigrationltd.com/u2us.rcube.db.latest'
# Symlink to [u2us.rcube.db.1748999533]
'/home/globalmigration/mail/.admin@globalmigrationltd_com'
# Symlink to [globalmigrationltd.com/admin]
'/home/globalmigration/mail/.funmi@globalmigrationltd_com'
# Symlink to [globalmigrationltd.com/funmi]
'/home/globalmigration/mail/.info@globalmigrationltd_com'
# Symlink to [globalmigrationltd.com/info]
'/home/globalmigration/mail/.kolawole@globalmigrationltd_com'
# Symlink to [globalmigrationltd.com/kolawole]
'/home/globalmigration/mail/.u2us@globalmigrationltd_com'
# Symlink to [globalmigrationltd.com/u2us]
'/home/globalmigration/public_html/node_modules/.bin/mime'
# Symlink to [../mime/cli.js]
'/home/globalmigration/public_html/node_modules/.bin/mkdirp'
# Symlink to [../mkdirp/bin/cmd.js]
'/home/globalmigration/public_html/node_modules/.bin/pixelmatch'
# Symlink to [../pixelmatch/bin/pixelmatch]
'/home/globalmigration/public_html/node_modules/.bin/semver'
# Symlink to [../semver/bin/semver]
'/home/globalmigration/public_html/node_modules/.bin/twigjs'
# Symlink to [../twig/bin/twigjs]
'/home/goldorchtravels/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/goldorchtravels]
'/home/goldorchtravels/www'
# Symlink to [public_html]
'/home/goldorchtravels/.npm/_cacache/content-v2/sha512/cc/a7'
# World writeable directory
'/home/goldorchtravels/public_html/node_modules/.bin/mime'
# Symlink to [../mime/cli.js]
'/home/goldorchtravels/public_html/node_modules/.bin/mkdirp'
# Symlink to [../mkdirp/bin/cmd.js]
'/home/goldorchtravels/public_html/node_modules/.bin/pixelmatch'
# Symlink to [../pixelmatch/bin/pixelmatch]
'/home/goldorchtravels/public_html/node_modules/.bin/rimraf'
# Symlink to [../rimraf/bin.js]
'/home/goldorchtravels/public_html/node_modules/.bin/semver'
# Symlink to [../semver/bin/semver]
'/home/goldorchtravels/public_html/node_modules/.bin/sshpk-conv'
# Symlink to [../sshpk/bin/sshpk-conv]
'/home/goldorchtravels/public_html/node_modules/.bin/sshpk-sign'
# Symlink to [../sshpk/bin/sshpk-sign]
'/home/goldorchtravels/public_html/node_modules/.bin/sshpk-verify'
# Symlink to [../sshpk/bin/sshpk-verify]
'/home/goldorchtravels/public_html/node_modules/.bin/twigjs'
# Symlink to [../twig/bin/twigjs]
'/home/goldorchtravels/public_html/node_modules/.bin/uuid'
# Symlink to [../uuid/dist/esm/bin/uuid]
'/home/goldorchtravels/public_html/node_modules/request/node_modules/.bin/uuid'
# Symlink to [../uuid/bin/uuid]
'/home/goodlifecoop/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/goodlifecoop]
'/home/goodlifecoop/www'
# Symlink to [public_html]
'/home/goodlifecoop/.cphorde/meta/latest'
# Symlink to [horde.backup.sql.20220114]
'/home/goodlifecoop/.npm/_cacache/content-v2/sha512/69/14/e5f16e9d999e12da1b62d5d5f85ef929cbfc88304d47e6930ad0710ea70d47df78f82007ddcd270fa0f2d86877a1d682f86e269b1b0c6ec8294e33c61455'
# (compressed file: package/lib/Sysinfo/fastlist.exe [depth: 1]) MS Windows Binary/Executable [application/x-winexec]
'/home/goodlifecoop/.npm/_cacache/content-v2/sha512/a9/ab/b47335120747f34a504e42dd1ba3e236bfa47ec6241d8fbf1ed4147f4237e5e4e1d627fbab5e2f3e8a5c357877bee6149e0c8d70af0553803a76c2cb78a0'
# (compressed file: package/fastlist.exe [depth: 1]) MS Windows Binary/Executable [application/x-winexec]
'/home/goodlifecoop/public_html/goodlifecoop/node_modules/.bin/blessed'
# Symlink to [../blessed/bin/tput.js]
'/home/goodlifecoop/public_html/goodlifecoop/node_modules/.bin/escodegen'
# Symlink to [../escodegen/bin/escodegen.js]
'/home/goodlifecoop/public_html/goodlifecoop/node_modules/.bin/esgenerate'
# Symlink to [../escodegen/bin/esgenerate.js]
'/home/goodlifecoop/public_html/goodlifecoop/node_modules/.bin/esparse'
# Symlink to [../esprima/bin/esparse.js]
'/home/goodlifecoop/public_html/goodlifecoop/node_modules/.bin/esvalidate'
# Symlink to [../esprima/bin/esvalidate.js]
'/home/goodlifecoop/public_html/goodlifecoop/node_modules/.bin/json2yaml'
# Symlink to [../yamljs/bin/json2yaml]
'/home/goodlifecoop/public_html/goodlifecoop/node_modules/.bin/pm2'
# Symlink to [../pm2/bin/pm2]
'/home/goodlifecoop/public_html/goodlifecoop/node_modules/.bin/pm2-dev'
# Symlink to [../pm2/bin/pm2-dev]
'/home/goodlifecoop/public_html/goodlifecoop/node_modules/.bin/pm2-docker'
# Symlink to [../pm2/bin/pm2-docker]
'/home/goodlifecoop/public_html/goodlifecoop/node_modules/.bin/pm2-runtime'
# Symlink to [../pm2/bin/pm2-runtime]
'/home/goodlifecoop/public_html/goodlifecoop/node_modules/.bin/shjs'
# Symlink to [../shelljs/bin/shjs]
'/home/goodlifecoop/public_html/goodlifecoop/node_modules/.bin/systeminformation'
# Symlink to [../systeminformation/lib/cli.js]
'/home/goodlifecoop/public_html/goodlifecoop/node_modules/.bin/uuid'
# Symlink to [../uuid/bin/uuid]
'/home/goodlifecoop/public_html/goodlifecoop/node_modules/.bin/yaml2json'
# Symlink to [../yamljs/bin/yaml2json]
'/home/goodlifecoop/public_html/goodlifecoop/node_modules/@pm2/io/node_modules/.bin/semver'
# Symlink to [../semver/bin/semver]
'/home/goodlifecoop/public_html/goodlifecoop/node_modules/bcrypt/lib/binding/bcrypt_lib.node'
# MS Windows Binary/Executable [application/x-winexec]
'/home/goodlifecoop/public_html/goodlifecoop/node_modules/bcrypt/src/bcrypt.cc'
# Suspicious file type [application/x-c]
'/home/goodlifecoop/public_html/goodlifecoop/node_modules/bcrypt/src/blowfish.cc'
# Suspicious file type [application/x-c]
'/home/goodlifecoop/public_html/goodlifecoop/node_modules/escodegen/node_modules/.bin/esparse'
# Symlink to [../esprima/bin/esparse.js]
'/home/goodlifecoop/public_html/goodlifecoop/node_modules/escodegen/node_modules/.bin/esvalidate'
# Symlink to [../esprima/bin/esvalidate.js]
'/home/goodlifecoop/public_html/goodlifecoop/node_modules/pm2/lib/Sysinfo/fastlist.exe'
# MS Windows Binary/Executable [application/x-winexec]
'/home/goodlifecoop/public_html/goodlifecoop/node_modules/ps-list/fastlist.exe'
# MS Windows Binary/Executable [application/x-winexec]
'/home/holaks/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/holaks]
'/home/holaks/www'
# Symlink to [public_html]
'/home/holaks/.cpanel/ea-php-cli/public_html/.ea-php-cli.cache'
# Symlink to [ea-php74]
'/home/holaks/.cpanel/ea-php-cli/public_html/wordpress/.ea-php-cli.cache'
# Symlink to [ea-php74]
'/home/holaks/etc/holaks.rcube.db.latest'
# Symlink to [holaks.rcube.db.1748999532]
'/home/holaks/etc/holakscargo.com/admin.rcube.db.latest'
# Symlink to [admin.rcube.db.1682989940]
'/home/holaks/public_html/node_modules/.bin/mime'
# Symlink to [../mime/cli.js]
'/home/holaks/public_html/node_modules/.bin/mkdirp'
# Symlink to [../mkdirp/bin/cmd.js]
'/home/holaks/public_html/node_modules/.bin/pixelmatch'
# Symlink to [../pixelmatch/bin/pixelmatch]
'/home/holaks/public_html/node_modules/.bin/semver'
# Symlink to [../semver/bin/semver]
'/home/holaks/public_html/node_modules/.bin/twigjs'
# Symlink to [../twig/bin/twigjs]
'/home/hungryh/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/hungryh]
'/home/hungryh/www'
# Symlink to [public_html]
'/home/hungryh/.cpanel/ea-php-cli/.ea-php-cli.cache'
# Symlink to [ea-php74]
'/home/hungryh/.cpanel/ea-php-cli/public_html/rooms/.ea-php-cli.cache'
# Symlink to [ea-php73]
'/home/hungryh/.cpanel/ea-php-cli/public_html/te5ting/.ea-php-cli.cache'
# Symlink to [ea-php82]
# Scan Timeout (30 secs) while processing:
'/home/hungryh/public_html/hotel2(forupload).zip'
'/home/hungryh/public_html/rooms/app/Http/Controllers/testingcontroller.php'
# Universal decode regex match = [universal decoder]
'/home/hungryh/public_html/rooms/vendor/symfony/console/Resources/bin/hiddeninput.exe'
# MS Windows Binary/Executable [application/x-winexec]
'/home/hungryh/public_html/rooms/vendor/symfony/debug/Resources/ext/symfony_debug.c'
# Suspicious file type [application/x-c]
'/home/hungryh/public_html/te5ting/public/restaurantdashboard/assets/vendor_components/jquery-steps-master/nuget/NuGet.exe'
# MS Windows Binary/Executable [application/x-winexec]
'/home/hungryh/public_html/te5ting/public/superadmin/assets/vendor_components/jquery-steps-master/nuget/NuGet.exe'
# MS Windows Binary/Executable [application/x-winexec]
'/home/hungryh/public_html/te5ting/resources/views/general/checkout.blade.php'
# Universal decode regex match = [universal decoder]
'/home/hungryh/public_html/te5ting/storage/framework/views/980b604fd46b883da31850c78968740153681c07.php'
# Universal decode regex match = [universal decoder]
'/home/hungryh/public_html/te5ting/vendor/symfony/console/Resources/bin/hiddeninput.exe'
# MS Windows Binary/Executable [application/x-winexec]
'/home/iconnectpay/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/iconnectpay]
'/home/iconnectpay/www'
# Symlink to [public_html]
'/home/iconnectpay/public_html/node_modules/.bin/mime'
# Symlink to [../mime/cli.js]
'/home/iconnectpay/public_html/node_modules/.bin/mkdirp'
# Symlink to [../mkdirp/bin/cmd.js]
'/home/iconnectpay/public_html/node_modules/.bin/semver'
# Symlink to [../semver/bin/semver]
'/home/iconnectpay/public_html/node_modules/.bin/twigjs'
# Symlink to [../twig/bin/twigjs]
'/home/iconnectpay/public_html/testing/node_modules/.bin/mime'
# Symlink to [../mime/cli.js]
'/home/iconnectpay/public_html/testing/node_modules/.bin/mkdirp'
# Symlink to [../mkdirp/bin/cmd.js]
'/home/iconnectpay/public_html/testing/node_modules/.bin/semver'
# Symlink to [../semver/bin/semver]
'/home/iconnectpay/public_html/testing/node_modules/.bin/twigjs'
# Symlink to [../twig/bin/twigjs]
'/home/jandtfoods/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/jandtfoods]
'/home/jandtfoods/www'
# Symlink to [public_html]
'/home/jandtfoods/.cphorde/meta/latest'
# Symlink to [horde.backup.sql.20220114]
'/home/jandtfoods/etc/jandtfoods.rcube.db.latest'
# Symlink to [jandtfoods.rcube.db.1748999532]
'/home/jandtfoods/etc/jandtfoods.co.uk/admin.rcube.db.latest'
# Symlink to [admin.rcube.db.1748999532]
'/home/jandtfoods/etc/jandtfoods.co.uk/info.rcube.db.latest'
# Symlink to [info.rcube.db.1748999532]
'/home/jandtfoods/etc/jandtfoods.co.uk/sales.rcube.db.latest'
# Symlink to [sales.rcube.db.1748999532]
'/home/jandtfoods/etc/jandtfoods.co.uk/u2us.rcube.db.latest'
# Symlink to [u2us.rcube.db.1748999532]
'/home/jandtfoods/mail/.admin@jandtfoods_co_uk'
# Symlink to [jandtfoods.co.uk/admin]
'/home/jandtfoods/mail/.info@jandtfoods_co_uk'
# Symlink to [jandtfoods.co.uk/info]
'/home/jandtfoods/mail/.sales@jandtfoods_co_uk'
# Symlink to [jandtfoods.co.uk/sales]
'/home/jandtfoods/mail/.u2us@jandtfoods_co_uk'
# Symlink to [jandtfoods.co.uk/u2us]
'/home/jandtfoods/public_html/j-t-foods'
# World writeable directory
'/home/jandtfoods/public_html/j-t-foods/node_modules/.bin/mime'
# Symlink to [../mime/cli.js]
'/home/jandtfoods/public_html/j-t-foods/node_modules/.bin/mkdirp'
# Symlink to [../mkdirp/bin/cmd.js]
'/home/jandtfoods/public_html/j-t-foods/node_modules/.bin/pixelmatch'
# Symlink to [../pixelmatch/bin/pixelmatch]
'/home/jandtfoods/public_html/j-t-foods/node_modules/.bin/semver'
# Symlink to [../semver/bin/semver]
'/home/jandtfoods/public_html/j-t-foods/node_modules/.bin/twigjs'
# Symlink to [../twig/bin/twigjs]
'/home/jandtfoods/public_html/j-t-foods/node_modules/send/node_modules/.bin/mime'
# Symlink to [../mime/cli.js]
'/home/jasman/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/jasman]
'/home/jasman/www'
# Symlink to [public_html]
'/home/jasman/.cphorde/meta/latest'
# Symlink to [horde.backup.sql.20220114]
'/home/jasman/etc/jasmanventures.com/admin.rcube.db.latest'
# Symlink to [admin.rcube.db.1748999533]
'/home/jasman/etc/jasmanventures.com/info.rcube.db.latest'
# Symlink to [info.rcube.db.1748999533]
'/home/jasman/mail/.admin@jasmanventures_com'
# Symlink to [jasmanventures.com/admin]
'/home/jasman/mail/.contact@diy_jasmanventures_com'
# Symlink to [diy.jasmanventures.com/contact]
'/home/jasman/mail/.info@jasmanventures_com'
# Symlink to [jasmanventures.com/info]
'/home/jasman/mail/jasmanventures.com/info/.spam/new/1751934296.M798492P2291900.nc-ph-2432.beatq.tech,S=48543,W=49210'
# ClamAV detected virus = [Heuristics.Phishing.Email.SpoofedDomain]
'/home/jasman/public_html/node_modules/.bin/mime'
# Symlink to [../mime/cli.js]
'/home/jasman/public_html/node_modules/.bin/mkdirp'
# Symlink to [../mkdirp/bin/cmd.js]
'/home/jasman/public_html/node_modules/.bin/pixelmatch'
# Symlink to [../pixelmatch/bin/pixelmatch]
'/home/jasman/public_html/node_modules/.bin/semver'
# Symlink to [../semver/bin/semver]
'/home/jasman/public_html/node_modules/.bin/twigjs'
# Symlink to [../twig/bin/twigjs]
'/home/jegoor/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/jegoor]
'/home/jegoor/www'
# Symlink to [public_html]
'/home/jegoor/.cphorde/meta/latest'
# Symlink to [horde.backup.sql.20220114]
'/home/jegoor/etc/jegoor.com/info.rcube.db.latest'
# Symlink to [info.rcube.db.1748999532]
'/home/jegoor/etc/jegoor.com/sales.rcube.db.latest'
# Symlink to [sales.rcube.db.1748999532]
'/home/jegoor/mail/.info@jegoor_com'
# Symlink to [jegoor.com/info]
'/home/jegoor/mail/.sales@jegoor_com'
# Symlink to [jegoor.com/sales]
# Scan Timeout (30 secs) while processing:
'/home/jegoor/public_html/application.zip'
'/home/jegoor101/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/jegoor101]
'/home/jegoor101/www'
# Symlink to [public_html]
'/home/jegoor101/.cphorde/meta/latest'
# Symlink to [horde.backup.sql.20220114]
'/home/kenandco/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/kenandco]
'/home/kenandco/www'
# Symlink to [public_html]
'/home/kwikkargo/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/kwikkargo]
'/home/kwikkargo/www'
# Symlink to [public_html]
'/home/kwikkargo/public_html/node_modules/.bin/mime'
# Symlink to [../mime/cli.js]
'/home/kwikkargo/public_html/node_modules/.bin/mkdirp'
# Symlink to [../mkdirp/bin/cmd.js]
'/home/kwikkargo/public_html/node_modules/.bin/pixelmatch'
# Symlink to [../pixelmatch/bin/pixelmatch]
'/home/kwikkargo/public_html/node_modules/.bin/semver'
# Symlink to [../semver/bin/semver]
'/home/kwikkargo/public_html/node_modules/.bin/twigjs'
# Symlink to [../twig/bin/twigjs]
'/home/lajorest/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/lajorest]
'/home/lajorest/www'
# Symlink to [public_html]
'/home/lolak/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/lolak]
'/home/lolak/www'
# Symlink to [public_html]
'/home/lolak/.cphorde/meta/latest'
# Symlink to [horde.backup.sql.20220114]
'/home/lolak/.trash/admin/system/core/CodeIgniter.php'
# Script version check [OLD] [CodeIgniter v2.2.0 < v4.4.0]
'/home/lolak/.trash/home/admin/system/core/CodeIgniter.php'
# Script version check [OLD] [CodeIgniter v2.2.0 < v4.4.0]
'/home/lolak/.trash/home/system/core/CodeIgniter.php'
# Script version check [OLD] [CodeIgniter v2.2.0 < v4.4.0]
'/home/lolak/.trash/system/core/CodeIgniter.php'
# Script version check [OLD] [CodeIgniter v2.2.0 < v4.4.0]
'/home/lolak/etc/lolakafrique.uk/info.rcube.db.latest'
# Symlink to [info.rcube.db.1748999533]
'/home/lolak/mail/.info@lolakafrique_uk'
# Symlink to [lolakafrique.uk/info]
'/home/lolak/mail/.malo@lolakafrique_uk'
# Symlink to [lolakafrique.uk/malo]
'/home/lolak/mail/.sales@lolakafrique_uk'
# Symlink to [lolakafrique.uk/sales]
'/home/lolak/public_html/admin/system/core/CodeIgniter.php'
# Script version check [OLD] [CodeIgniter v2.2.0 < v4.4.0]
'/home/lolak/public_html/lickinfingers/modules/landing/controllers/landing.php'
# Universal decode regex match = [universal decoder]
'/home/lolak/public_html/system/core/CodeIgniter.php'
# Script version check [OLD] [CodeIgniter v2.2.0 < v4.4.0]
'/home/mmsapp/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/mmsapp]
'/home/mmsapp/www'
# Symlink to [public_html]
'/home/mmsapp/.cpanel/ea-php-cli/.ea-php-cli.cache'
# Symlink to [ea-php71]
'/home/mmsapp/.cphorde/meta/latest'
# Symlink to [horde.backup.sql.20211026]
# Scan Timeout (30 secs) while processing:
'/home/mmsapp/.trash/org.2/admin/ckeditor/adapters.zip'
'/home/mmsapp/etc/mmsapp.rcube.db.latest'
# Symlink to [mmsapp.rcube.db.1748999532]
'/home/mmsapp/etc/mmsapp.org/cron_updates.rcube.db.latest'
# Symlink to [cron_updates.rcube.db.1748999532]
'/home/mmsapp/etc/mmsapp.org/no_reply.rcube.db.latest'
# Symlink to [no_reply.rcube.db.1748999532]
'/home/mmsapp/etc/mmsapp.org/seatinfo.rcube.db.latest'
# Symlink to [seatinfo.rcube.db.1599004097]
'/home/mmsapp/etc/rccgvhl.mmsapp.org/no_reply.rcube.db.latest'
# Symlink to [no_reply.rcube.db.1655689956]
'/home/mmsapp/mail/.cron__updates@mmsapp_org'
# Symlink to [mmsapp.org/cron_updates]
'/home/mmsapp/mail/.info@mmsapp_org'
# Symlink to [mmsapp.org/info]
'/home/mmsapp/mail/.no__reply@mmsapp_org'
# Symlink to [mmsapp.org/no_reply]
'/home/mmsapp/mail/.support@mmsapp_org'
# Symlink to [mmsapp.org/support]
'/home/mmsapp/mail/cur'
# Skipped - too many resources: 2515235 ( > filemax=100000)
'/home/mmsapp/mail/mmsapp.org/cron_updates/.Trash/tmp'
# Skipped - too many resources: 262146 ( > filemax=100000)
'/home/mmsapp/public_ftp/incoming'
# World writeable directory
# Scan Timeout (30 secs) while processing:
'/home/mmsapp/public_html/rccgtmp/bible.pdf'
'/home/mmsapp/public_html/rccgtmp/application'
# World writeable directory
'/home/mmsapp/public_html/rccgtmp/assets/jPlayer/artwork'
# World writeable directory
'/home/mmsapp/public_html/rccgtmp/assets/jPlayer/dist'
# World writeable directory
'/home/mmsapp/public_html/rccgtmp/assets/jPlayer/dist/skin'
# World writeable directory
'/home/mmsapp/public_html/rccgtmp/assets/jPlayer/dist/skin/blue.monday'
# World writeable directory
'/home/mmsapp/public_html/rccgtmp/assets/jPlayer/dist/skin/blue.monday/css'
# World writeable directory
'/home/mmsapp/public_html/rccgtmp/assets/jPlayer/dist/skin/blue.monday/image'
# World writeable directory
'/home/mmsapp/public_html/rccgtmp/assets/jPlayer/dist/skin/blue.monday/mustache'
# World writeable directory
'/home/mmsapp/public_html/rccgtmp/assets/jPlayer/dist/skin/pink.flag'
# World writeable directory
'/home/mmsapp/public_html/rccgtmp/assets/jPlayer/dist/skin/pink.flag/css'
# World writeable directory
'/home/mmsapp/public_html/rccgtmp/assets/jPlayer/dist/skin/pink.flag/image'
# World writeable directory
'/home/mmsapp/public_html/rccgtmp/assets/jPlayer/dist/skin/pink.flag/mustache'
# World writeable directory
'/home/mmsapp/public_html/rccgtmp/assets/jPlayer/examples'
# World writeable directory
'/home/mmsapp/public_html/rccgtmp/assets/jPlayer/examples/blue.monday'
# World writeable directory
'/home/mmsapp/public_html/rccgtmp/assets/jPlayer/examples/other'
# World writeable directory
'/home/mmsapp/public_html/rccgtmp/assets/jPlayer/examples/pink.flag'
# World writeable directory
'/home/mmsapp/public_html/rccgtmp/assets/jPlayer/lib/circle-player'
# World writeable directory
'/home/mmsapp/public_html/rccgtmp/assets/jPlayer/lib/circle-player/skin'
# World writeable directory
'/home/mmsapp/public_html/rccgtmp/assets/jPlayer/src'
# World writeable directory
'/home/mmsapp/public_html/rccgtmp/assets/jPlayer/src/actionscript'
# World writeable directory
'/home/mmsapp/public_html/rccgtmp/assets/jPlayer/src/actionscript/happyworm'
# World writeable directory
'/home/mmsapp/public_html/rccgtmp/assets/jPlayer/src/actionscript/happyworm/jPlayer'
# World writeable directory
'/home/mmsapp/public_html/rccgtmp/assets/jPlayer/src/javascript'
# World writeable directory
'/home/mmsapp/public_html/rccgtmp/assets/jPlayer/src/skin'
# World writeable directory
'/home/mmsapp/public_html/rccgtmp/assets/jPlayer/src/skin/blue.monday'
# World writeable directory
'/home/mmsapp/public_html/rccgtmp/assets/jPlayer/src/skin/blue.monday/image'
# World writeable directory
'/home/mmsapp/public_html/rccgtmp/assets/jPlayer/src/skin/blue.monday/mustache'
# World writeable directory
'/home/mmsapp/public_html/rccgtmp/assets/jPlayer/src/skin/blue.monday/scss'
# World writeable directory
'/home/mmsapp/public_html/rccgtmp/assets/jPlayer/src/skin/pink.flag'
# World writeable directory
'/home/mmsapp/public_html/rccgtmp/assets/jPlayer/src/skin/pink.flag/image'
# World writeable directory
'/home/mmsapp/public_html/rccgtmp/assets/jPlayer/src/skin/pink.flag/mustache'
# World writeable directory
'/home/mmsapp/public_html/rccgtmp/assets/jPlayer/src/skin/pink.flag/scss'
# World writeable directory
'/home/mmsapp/public_html/rccgtmp/system/core/CodeIgniter.php'
# Script version check [OLD] [CodeIgniter v2.2.0 < v4.4.0]
# Scan Timeout (30 secs) while processing:
'/home/mmsapp/public_html/rccgvhl/bible.pdf'
# Scan Timeout (30 secs) while processing:
'/home/mmsapp/public_html/rccgvhl/ckeditor.zip'
'/home/mmsapp/public_html/rccgvhl/application'
# World writeable directory
# Scan Timeout (30 secs) while processing:
'/home/mmsapp/public_html/rccgvhl/application/views/new/bible.pdf'
'/home/mmsapp/public_html/rccgvhl/assets/jPlayer/artwork'
# World writeable directory
'/home/mmsapp/public_html/rccgvhl/assets/jPlayer/dist'
# World writeable directory
'/home/mmsapp/public_html/rccgvhl/assets/jPlayer/dist/skin'
# World writeable directory
'/home/mmsapp/public_html/rccgvhl/assets/jPlayer/dist/skin/blue.monday'
# World writeable directory
'/home/mmsapp/public_html/rccgvhl/assets/jPlayer/dist/skin/blue.monday/css'
# World writeable directory
'/home/mmsapp/public_html/rccgvhl/assets/jPlayer/dist/skin/blue.monday/image'
# World writeable directory
'/home/mmsapp/public_html/rccgvhl/assets/jPlayer/dist/skin/blue.monday/mustache'
# World writeable directory
'/home/mmsapp/public_html/rccgvhl/assets/jPlayer/dist/skin/pink.flag'
# World writeable directory
'/home/mmsapp/public_html/rccgvhl/assets/jPlayer/dist/skin/pink.flag/css'
# World writeable directory
'/home/mmsapp/public_html/rccgvhl/assets/jPlayer/dist/skin/pink.flag/image'
# World writeable directory
'/home/mmsapp/public_html/rccgvhl/assets/jPlayer/dist/skin/pink.flag/mustache'
# World writeable directory
'/home/mmsapp/public_html/rccgvhl/assets/jPlayer/examples'
# World writeable directory
'/home/mmsapp/public_html/rccgvhl/assets/jPlayer/examples/blue.monday'
# World writeable directory
'/home/mmsapp/public_html/rccgvhl/assets/jPlayer/examples/other'
# World writeable directory
'/home/mmsapp/public_html/rccgvhl/assets/jPlayer/examples/pink.flag'
# World writeable directory
'/home/mmsapp/public_html/rccgvhl/assets/jPlayer/lib/circle-player'
# World writeable directory
'/home/mmsapp/public_html/rccgvhl/assets/jPlayer/lib/circle-player/skin'
# World writeable directory
'/home/mmsapp/public_html/rccgvhl/assets/jPlayer/src'
# World writeable directory
'/home/mmsapp/public_html/rccgvhl/assets/jPlayer/src/actionscript'
# World writeable directory
'/home/mmsapp/public_html/rccgvhl/assets/jPlayer/src/actionscript/happyworm'
# World writeable directory
'/home/mmsapp/public_html/rccgvhl/assets/jPlayer/src/actionscript/happyworm/jPlayer'
# World writeable directory
'/home/mmsapp/public_html/rccgvhl/assets/jPlayer/src/javascript'
# World writeable directory
'/home/mmsapp/public_html/rccgvhl/assets/jPlayer/src/skin'
# World writeable directory
'/home/mmsapp/public_html/rccgvhl/assets/jPlayer/src/skin/blue.monday'
# World writeable directory
'/home/mmsapp/public_html/rccgvhl/assets/jPlayer/src/skin/blue.monday/image'
# World writeable directory
'/home/mmsapp/public_html/rccgvhl/assets/jPlayer/src/skin/blue.monday/mustache'
# World writeable directory
'/home/mmsapp/public_html/rccgvhl/assets/jPlayer/src/skin/blue.monday/scss'
# World writeable directory
'/home/mmsapp/public_html/rccgvhl/assets/jPlayer/src/skin/pink.flag'
# World writeable directory
'/home/mmsapp/public_html/rccgvhl/assets/jPlayer/src/skin/pink.flag/image'
# World writeable directory
'/home/mmsapp/public_html/rccgvhl/assets/jPlayer/src/skin/pink.flag/mustache'
# World writeable directory
'/home/mmsapp/public_html/rccgvhl/assets/jPlayer/src/skin/pink.flag/scss'
# World writeable directory
# Scan Timeout (30 secs) while processing:
'/home/mmsapp/public_html/rccgvhl/assets_f/wordlog/f8b8113d991a2c62019df2bd69a55599.pptx'
'/home/mmsapp/public_html/rccgvhl/system/core/CodeIgniter.php'
# Script version check [OLD] [CodeIgniter v2.2.0 < v4.4.0]
'/home/mmsapp/public_html/rccgvhldemo/vendor/bin/php-parse'
# Symlink to [../nikic/php-parser/bin/php-parse]
'/home/mmsapp/public_html/rccgvhldemo/vendor/bin/phpunit'
# Symlink to [../phpunit/phpunit/phpunit]
'/home/mmsapp/public_html/rccgvhldemo/vendor/bin/psysh'
# Symlink to [../psy/psysh/bin/psysh]
'/home/mmsapp/public_html/rccgvhldemo/vendor/bin/var-dump-server'
# Symlink to [../symfony/var-dumper/Resources/bin/var-dump-server]
'/home/mmsapp/public_html/rccgvhldemo/vendor/symfony/console/Resources/bin/hiddeninput.exe'
# MS Windows Binary/Executable [application/x-winexec]
'/home/mmsapp/var/cpanel/styled/current_style'
# Symlink to [/usr/local/cpanel/base/frontend/paper_lantern/styled/glass]
'/home/nigerianstudents/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/nigerianstudents]
'/home/nigerianstudents/www'
# Symlink to [public_html]
'/home/nigerianstudents/.cpanel/ea-php-cli/public_html/.ea-php-cli.cache'
# Symlink to [ea-php74]
'/home/nigerianstudents/.cpanel/ea-php-cli/public_html/mkoabiolacentre/.ea-php-cli.cache'
# Symlink to [ea-php74]
'/home/nigerianstudents/.cpanel/ea-php-cli/public_html/nigerianfestivaluk.org/.ea-php-cli.cache'
# Symlink to [ea-php74]
'/home/nigerianstudents/.cpanel/ea-php-cli/public_html/nigerianfestivaluk.org/wp-includes/.ea-php-cli.cache'
# Symlink to [ea-php81]
'/home/nigerianstudents/.cpanel/ea-php-cli/public_html/nigerianstudentsunionuk/.ea-php-cli.cache'
# Symlink to [ea-php74]
'/home/nigerianstudents/.cpanel/ea-php-cli/public_html/nyido/.ea-php-cli.cache'
# Symlink to [ea-php74]
'/home/nigerianstudents/.cpanel/ea-php-cli/public_html/wp-content/.ea-php-cli.cache'
# Symlink to [ea-php81]
'/home/nigerianstudents/.cpanel/ea-php-cli/public_html/wp-includes/.ea-php-cli.cache'
# Symlink to [ea-php80]
'/home/nigerianstudents/.cphorde/meta/latest'
# Symlink to [horde.backup.sql.20211026]
'/home/nigerianstudents/etc/mkoabiolacentre.org/admin.rcube.db.latest'
# Symlink to [admin.rcube.db.1748999532]
'/home/nigerianstudents/etc/mkoabiolacentre.org/rongrant.rcube.db.latest'
# Symlink to [rongrant.rcube.db.1655689963]
'/home/nigerianstudents/etc/mkoabiolacentre.org/updates.rcube.db.latest'
# Symlink to [updates.rcube.db.1748999532]
'/home/nigerianstudents/etc/nigerianfestivaluk.org/admin.rcube.db.latest'
# Symlink to [admin.rcube.db.1748999532]
'/home/nigerianstudents/etc/nigerianfestivaluk.org/info.rcube.db.latest'
# Symlink to [info.rcube.db.1748999532]
'/home/nigerianstudents/etc/nigerianfestivaluk.org/naoe.ecsiolsljb.rcube.db.latest'
# Symlink to [naoe.ecsiolsljb.rcube.db.1729213941]
'/home/nigerianstudents/etc/nigerianstudentsunionuk.org/admin.rcube.db.latest'
# Symlink to [admin.rcube.db.1748999532]
'/home/nigerianstudents/etc/nigerianstudentsunionuk.org/info.rcube.db.latest'
# Symlink to [info.rcube.db.1748999532]
'/home/nigerianstudents/etc/nigerianstudentsunionuk.org/rongrant.rcube.db.latest'
# Symlink to [rongrant.rcube.db.1655689963]
'/home/nigerianstudents/etc/nyido.org/admin.rcube.db.latest'
# Symlink to [admin.rcube.db.1748999532]
'/home/nigerianstudents/etc/nyido.org/rently.rcube.db.latest'
# Symlink to [rently.rcube.db.1748999532]
'/home/nigerianstudents/mail/.admin@mkoabiolacentre_org'
# Symlink to [mkoabiolacentre.org/admin]
'/home/nigerianstudents/mail/.admin@nigerianfestivaluk_org'
# Symlink to [nigerianfestivaluk.org/admin]
'/home/nigerianstudents/mail/.admin@nigerianstudentsunionuk_org'
# Symlink to [nigerianstudentsunionuk.org/admin]
'/home/nigerianstudents/mail/.admin@nyido_org'
# Symlink to [nyido.org/admin]
'/home/nigerianstudents/mail/.caodrs@mkoabiolacentre_org'
# Symlink to [mkoabiolacentre.org/caodrs]
'/home/nigerianstudents/mail/.dev@nyido_nigerianstudentsunionuk_org'
# Symlink to [nyido.nigerianstudentsunionuk.org/dev]
'/home/nigerianstudents/mail/.e_anmhanfgynn@nigerianstudentsunionuk_org'
# Symlink to [nigerianstudentsunionuk.org/e.anmhanfgynn]
'/home/nigerianstudents/mail/.haagj@mkoabiolacentre_nigerianstudentsunionuk_org'
# Symlink to [mkoabiolacentre.nigerianstudentsunionuk.org/haagj]
'/home/nigerianstudents/mail/.ht8dye@nigerianstudentsunionuk_org'
# Symlink to [nigerianstudentsunionuk.org/ht8dye]
'/home/nigerianstudents/mail/.info@mkoabiolacentre_org'
# Symlink to [mkoabiolacentre.org/info]
'/home/nigerianstudents/mail/.info@nigerianfestivaluk_org'
# Symlink to [nigerianfestivaluk.org/info]
'/home/nigerianstudents/mail/.info@nigerianstudentsunionuk_org'
# Symlink to [nigerianstudentsunionuk.org/info]
'/home/nigerianstudents/mail/.nony3r@mkoabiolacentre_nigerianstudentsunionuk_org'
# Symlink to [mkoabiolacentre.nigerianstudentsunionuk.org/nony3r]
'/home/nigerianstudents/mail/.office@nyido_org'
# Symlink to [nyido.org/office]
'/home/nigerianstudents/mail/.rently@nyido_org'
# Symlink to [nyido.org/rently]
'/home/nigerianstudents/mail/.sponsorship@nigerianfestivaluk_org'
# Symlink to [nigerianfestivaluk.org/sponsorship]
'/home/nigerianstudents/mail/.sponsorship@nigerianstudentsunionuk_org'
# Symlink to [nigerianstudentsunionuk.org/sponsorship]
'/home/nigerianstudents/mail/.updates@mkoabiolacentre_org'
# Symlink to [mkoabiolacentre.org/updates]
'/home/nigerianstudents/mail/.yl6cu6@mkoabiolacentre_org'
# Symlink to [mkoabiolacentre.org/yl6cu6]
'/home/nigerianstudents/var/cpanel/styled/current_style'
# Symlink to [/usr/local/cpanel/base/frontend/paper_lantern/styled/basic]
'/home/pass11plus/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/pass11plus]
'/home/pass11plus/www'
# Symlink to [public_html]
'/home/pass11plus/.cpanel/ea-php-cli/public_html/.ea-php-cli.cache'
# Symlink to [ea-php74]
'/home/pass11plus/.cpanel/ea-php-cli/public_html/mcqs/.ea-php-cli.cache'
# Symlink to [ea-php74]
'/home/pass11plus/public_html/vendor/symfony/console/Resources/bin/hiddeninput.exe'
# MS Windows Binary/Executable [application/x-winexec]
'/home/pass11plus/public_html/vendor/symfony/debug/Resources/ext/symfony_debug.c'
# Suspicious file type [application/x-c]
'/home/pollingunits/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/pollingunits]
'/home/pollingunits/www'
# Symlink to [public_html]
'/home/pollingunits/.cpanel/ea-php-cli/.ea-php-cli.cache'
# Symlink to [ea-php81]
'/home/pollingunits/.cpanel/ea-php-cli/public_html/.ea-php-cli.cache'
# Symlink to [ea-php74]
'/home/primhomesco/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/primhomesco]
'/home/primhomesco/www'
# Symlink to [public_html]
'/home/primhomesco/public_html/node_modules/.bin/mime'
# Symlink to [../mime/cli.js]
'/home/primhomesco/public_html/node_modules/.bin/mkdirp'
# Symlink to [../mkdirp/bin/cmd.js]
'/home/primhomesco/public_html/node_modules/.bin/pixelmatch'
# Symlink to [../pixelmatch/bin/pixelmatch]
'/home/primhomesco/public_html/node_modules/.bin/twigjs'
# Symlink to [../twig/bin/twigjs]
'/home/profadmanager/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/profadmanager]
'/home/profadmanager/www'
# Symlink to [public_html]
'/home/profadmanager/.cpanel/ea-php-cli/public_html/.ea-php-cli.cache'
# Symlink to [ea-php71]
'/home/profadmanager/.cpanel/ea-php-cli/public_html/care/.ea-php-cli.cache'
# Symlink to [ea-php71]
'/home/profadmanager/.cphorde/meta/latest'
# Symlink to [horde.backup.sql.20220114]
'/home/profadmanager/mail/.info@profadmanager_com'
# Symlink to [profadmanager.com/info]
'/home/profadmanager/public_ftp/incoming'
# World writeable directory
'/home/profadmanager/public_html/care/vendor/bin/php-parse'
# Symlink to [../nikic/php-parser/bin/php-parse]
'/home/profadmanager/public_html/care/vendor/bin/phpunit'
# Symlink to [../phpunit/phpunit/phpunit]
'/home/profadmanager/public_html/care/vendor/bin/psysh'
# Symlink to [../psy/psysh/bin/psysh]
'/home/profadmanager/public_html/care/vendor/bin/var-dump-server'
# Symlink to [../symfony/var-dumper/Resources/bin/var-dump-server]
'/home/profadmanager/public_html/care/vendor/symfony/console/Resources/bin/hiddeninput.exe'
# MS Windows Binary/Executable [application/x-winexec]
'/home/profadmanager/public_html/profad_node/profadc/node_modules/.bin/mime'
# Symlink to [../mime/cli.js]
'/home/profadmanager/public_html/profad_node/profadc/node_modules/.bin/semver'
# Symlink to [../semver/bin/semver]
'/home/profadmanager/public_html/profad_node/profadc/node_modules/.bin/sshpk-conv'
# Symlink to [../sshpk/bin/sshpk-conv]
'/home/profadmanager/public_html/profad_node/profadc/node_modules/.bin/sshpk-sign'
# Symlink to [../sshpk/bin/sshpk-sign]
'/home/profadmanager/public_html/profad_node/profadc/node_modules/.bin/sshpk-verify'
# Symlink to [../sshpk/bin/sshpk-verify]
'/home/profadmanager/public_html/profad_node/profadc/node_modules/.bin/uuid'
# Symlink to [../uuid/bin/uuid]
'/home/profadmanager/public_html/profad_node/profadcare/node_modules/.bin/mime'
# Symlink to [../mime/cli.js]
'/home/profadmanager/public_html/profad_node/profadcare/node_modules/.bin/mkdirp'
# Symlink to [../mkdirp/bin/cmd.js]
'/home/profadmanager/public_html/profad_node/profadcare/node_modules/.bin/semver'
# Symlink to [../semver/bin/semver]
'/home/profadmanager/public_html/profad_node/profadcare/node_modules/.bin/sshpk-conv'
# Symlink to [../sshpk/bin/sshpk-conv]
'/home/profadmanager/public_html/profad_node/profadcare/node_modules/.bin/sshpk-sign'
# Symlink to [../sshpk/bin/sshpk-sign]
'/home/profadmanager/public_html/profad_node/profadcare/node_modules/.bin/sshpk-verify'
# Symlink to [../sshpk/bin/sshpk-verify]
'/home/profadmanager/public_html/profad_node/profadcare/node_modules/.bin/uuid'
# Symlink to [../uuid/bin/uuid]
'/home/profadmanager/public_html/profad_node/profadcare1/node_modules/.bin/mime'
# Symlink to [../mime/cli.js]
'/home/profadmanager/public_html/profad_node/profadcare1/node_modules/.bin/semver'
# Symlink to [../semver/bin/semver]
'/home/profadmanager/public_html/profad_node/profadcare1/node_modules/.bin/sshpk-conv'
# Symlink to [../sshpk/bin/sshpk-conv]
'/home/profadmanager/public_html/profad_node/profadcare1/node_modules/.bin/sshpk-sign'
# Symlink to [../sshpk/bin/sshpk-sign]
'/home/profadmanager/public_html/profad_node/profadcare1/node_modules/.bin/sshpk-verify'
# Symlink to [../sshpk/bin/sshpk-verify]
'/home/profadmanager/public_html/profad_node/profadcare1/node_modules/.bin/uuid'
# Symlink to [../uuid/bin/uuid]
'/home/profadmanager/public_html/profad_node/profadcarep/node_modules/.bin/mime'
# Symlink to [../mime/cli.js]
'/home/profadmanager/public_html/profad_node/profadcarep/node_modules/.bin/mkdirp'
# Symlink to [../mkdirp/bin/cmd.js]
'/home/profadmanager/public_html/profad_node/profadcarep/node_modules/.bin/pixelmatch'
# Symlink to [../pixelmatch/bin/pixelmatch]
'/home/profadmanager/public_html/profad_node/profadcarep/node_modules/.bin/randomstring'
# Symlink to [../randomstring/bin/randomstring]
'/home/profadmanager/public_html/profad_node/profadcarep/node_modules/.bin/semver'
# Symlink to [../semver/bin/semver]
'/home/proudlyafric/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/proudlyafric]
'/home/proudlyafric/www'
# Symlink to [public_html]
'/home/proudlyafric/public_html/admin/system/core/CodeIgniter.php'
# Script version check [OLD] [CodeIgniter v2.2.0 < v4.4.0]
'/home/proudlyafric/public_html/lickinfingers/modules/landing/controllers/landing.php'
# Universal decode regex match = [universal decoder]
'/home/proudlyafric/public_html/system/core/CodeIgniter.php'
# Script version check [OLD] [CodeIgniter v2.2.0 < v4.4.0]
'/home/proudlyafrican/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/proudlyafrican]
'/home/proudlyafrican/netstat'
# Linux Binary/Executable [application/x-executable]
'/home/proudlyafrican/www'
# Symlink to [public_html]
'/home/proudlyafrican/.cpanel/ea-php-cli/public_html/.ea-php-cli.cache'
# Symlink to [ea-php74]
'/home/proudlyafrican/public_html/app/Http/Controllers/generalcontroller.php'
# Universal decode regex match = [universal decoder]
'/home/proudlyafrican/public_html/app/Http/Controllers/testingcontroller.php'
# Universal decode regex match = [universal decoder]
'/home/proudlyafrican/public_html/vendor/symfony/console/Resources/bin/hiddeninput.exe'
# MS Windows Binary/Executable [application/x-winexec]
'/home/proudlyafrican/public_html/vendor/symfony/debug/Resources/ext/symfony_debug.c'
# Suspicious file type [application/x-c]
'/home/raycargo/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/raycargo]
'/home/raycargo/www'
# Symlink to [public_html]
'/home/raycargo/.cphorde/meta/latest'
# Symlink to [horde.backup.sql.20220114]
'/home/raycargo/etc/raycargo.co.uk/admin.rcube.db.latest'
# Symlink to [admin.rcube.db.1748999533]
'/home/raycargo/etc/raycargo.co.uk/info.rcube.db.latest'
# Symlink to [info.rcube.db.1748999533]
'/home/raycargo/etc/raycargo.co.uk/rahmon.rcube.db.latest'
# Symlink to [rahmon.rcube.db.1748999533]
'/home/raycargo/mail/.admin@raycargo_co_uk'
# Symlink to [raycargo.co.uk/admin]
'/home/raycargo/mail/.info@raycargo_co_uk'
# Symlink to [raycargo.co.uk/info]
'/home/raycargo/mail/.rahmon@raycargo_co_uk'
# Symlink to [raycargo.co.uk/rahmon]
'/home/raycargo/public_html/node_modules/.bin/mime'
# Symlink to [../mime/cli.js]
'/home/raycargo/public_html/node_modules/.bin/mkdirp'
# Symlink to [../mkdirp/bin/cmd.js]
'/home/raycargo/public_html/node_modules/.bin/pixelmatch'
# Symlink to [../pixelmatch/bin/pixelmatch]
'/home/raycargo/public_html/node_modules/.bin/semver'
# Symlink to [../semver/bin/semver]
'/home/raycargo/public_html/node_modules/.bin/twigjs'
# Symlink to [../twig/bin/twigjs]
'/home/rccgemr2/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/rccgemr2]
'/home/rccgemr2/www'
# Symlink to [public_html]
'/home/rccgemr2/.cpanel/ea-php-cli/.ea-php-cli.cache'
# Symlink to [ea-php74]
'/home/rccgemr2/.cpanel/ea-php-cli/public_html/rccg2backend/.ea-php-cli.cache'
# Symlink to [ea-php71]
'/home/rccgemr2/.cphorde/meta/latest'
# Symlink to [horde.backup.sql.20220114]
'/home/rccgemr2/.npm/_cacache/content-v2/sha512/03/52/2fe2837e21e97a10fbfbeff1dd75712b2f66be819e2e05e654cbe6bc3b7e421584d786003c3202c2581b70a4665d0af4ef43d77e6d0c57fd00b7e860cfa5'
# (compressed file: package/src/binding.cpp [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/create_string.cpp [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/custom_function_bridge.cpp [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/custom_importer_bridge.cpp [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/libsass/contrib/plugin.cpp [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/libsass/docs/api-context-example.md [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/libsass/docs/api-doc.md [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/libsass/docs/api-function-example.md [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/libsass/docs/api-importer-example.md [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/libsass/docs/api-value-example.md [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/libsass/docs/custom-functions-internal.md [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/libsass/src/ast_fwd_decl.cpp [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/libsass/src/ast.cpp [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/libsass/src/backtrace.cpp [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/libsass/src/base64vlq.cpp [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/libsass/src/bind.cpp [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/libsass/src/c99func.c [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/libsass/src/cencode.c [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/libsass/src/check_nesting.cpp [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/libsass/src/color_maps.cpp [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/libsass/src/constants.cpp [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/libsass/src/context.cpp [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/libsass/src/cssize.cpp [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/libsass/src/emitter.cpp [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/libsass/src/environment.cpp [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/libsass/src/error_handling.cpp [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/libsass/src/eval.cpp [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/libsass/src/expand.cpp [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/libsass/src/extend.cpp [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/libsass/src/file.cpp [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/libsass/src/functions.cpp [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/libsass/src/inspect.cpp [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/libsass/src/json.cpp [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/libsass/src/lexer.cpp [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/libsass/src/listize.cpp [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/libsass/src/memory/SharedPtr.cpp [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/libsass/src/node.cpp [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/libsass/src/operators.cpp [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/libsass/src/output.cpp [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/libsass/src/parser.cpp [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/libsass/src/plugins.cpp [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/libsass/src/position.cpp [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/libsass/src/prelexer.cpp [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/libsass/src/remove_placeholders.cpp [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/libsass/src/sass_context.cpp [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/libsass/src/sass_functions.cpp [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/libsass/src/sass_util.cpp [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/libsass/src/sass_values.cpp [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/libsass/src/sass.cpp [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/libsass/src/sass2scss.cpp [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/libsass/src/source_map.cpp [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/libsass/src/subset_map.cpp [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/libsass/src/to_c.cpp [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/libsass/src/to_value.cpp [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/libsass/src/units.cpp [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/libsass/src/utf8_string.cpp [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/libsass/src/util.cpp [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/libsass/src/values.cpp [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/libsass/test/test_node.cpp [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/libsass/test/test_paths.cpp [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/libsass/test/test_selector_difference.cpp [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/libsass/test/test_specificity.cpp [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/libsass/test/test_subset_map.cpp [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/libsass/test/test_superselector.cpp [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/libsass/test/test_unification.cpp [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/sass_context_wrapper.cpp [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/sass_types/boolean.cpp [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/sass_types/color.cpp [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/sass_types/error.cpp [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/sass_types/factory.cpp [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/sass_types/list.cpp [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/sass_types/map.cpp [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/sass_types/null.cpp [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/sass_types/number.cpp [depth: 1]) Suspicious file type [application/x-c]
# (compressed file: package/src/sass_types/string.cpp [depth: 1]) Suspicious file type [application/x-c]
'/home/rccgemr2/.npm/_cacache/content-v2/sha512/14/21/2143fe2b135cd8bfdad85c9c3f9ac46ab279a58dee631cfea1b9678167bd388d44f2d36739019c96ba3a4c4756b1ea6570f4dc8931fb8ad8230359521f80'
# (compressed file: fixtures/the-chumbler [depth: 3]) Symlink to [/a/b/c/d/the-chumbler]
# (compressed file: fixtures/a/b/c/y [depth: 3]) Symlink to [../../x]
'/tmp/cxs_yggwOSvrttIgiuDF5uPue.tar'
# (compressed file: 200LLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLL [depth: 1]) Symlink to [200ccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc]
# Clamd Error for [SCAN /tmp/cxs_oEuEOLTFo7EYP2msXx]: /tmp/cxs_oEuEOLTFo7EYP2msXx: File path check failure: No such file or directory. ERROR
'/home/rccgemr2/.npm/_cacache/content-v2/sha512/5d/b5/631ccb2cb34822354929fed57fdde10065ef22d5f6532f398f2aa8c4d51188016393885e43d35e1fe91fa0e77640ab420addc3eb25716fa84f1e42384561'
# (compressed file: package/fallbacks/linux/xsel [depth: 1]) Linux Binary/Executable [application/x-executable]
# (compressed file: package/fallbacks/windows/clipboard_i686.exe [depth: 1]) MS Windows Binary/Executable [application/x-winexec]
# (compressed file: package/fallbacks/windows/clipboard_x86_64.exe [depth: 1]) MS Windows Binary/Executable [application/x-winexec]
'/home/rccgemr2/.npm/node-sass/4.12.0/linux-x64-64_binding.node'
# Linux Binary/Executable [application/x-sharedlib]
'/home/rccgemr2/etc/rccgemr2payments.org/info.rcube.db.latest'
# Symlink to [info.rcube.db.1748999533]
'/home/rccgemr2/mail/.info@rccgemr2payments_org'
# Symlink to [rccgemr2payments.org/info]
'/home/rccgemr2/public_html/rccg2backend/vendor/bin/generate-defuse-key'
# Symlink to [../defuse/php-encryption/bin/generate-defuse-key]
'/home/rccgemr2/public_html/rccg2backend/vendor/bin/php-parse'
# Symlink to [../nikic/php-parser/bin/php-parse]
'/home/rccgemr2/public_html/rccg2backend/vendor/bin/phpunit'
# Symlink to [../phpunit/phpunit/phpunit]
'/home/rccgemr2/public_html/rccg2backend/vendor/bin/psysh'
# Symlink to [../psy/psysh/bin/psysh]
'/home/rccgemr2/public_html/rccg2backend/vendor/bin/var-dump-server'
# Symlink to [../symfony/var-dumper/Resources/bin/var-dump-server]
'/home/rccgemr2/public_html/rccg2backend/vendor/symfony/console/Resources/bin/hiddeninput.exe'
# MS Windows Binary/Executable [application/x-winexec]
'/home/rccgtmp/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/rccgtmp]
'/home/rccgtmp/www'
# Symlink to [public_html]
'/home/rccgtmp/.cpanel/ea-php-cli/public_html/rccgthemastersplace.org/.ea-php-cli.cache'
# Symlink to [ea-php71]
'/home/rccgtmp/.cphorde/meta/latest'
# Symlink to [horde.backup.sql.20220114]
'/home/rccgtmp/.trash/rccg-the-masters-place_archive/node_modules/.bin/mime'
# Symlink to [../mime/cli.js]
'/home/rccgtmp/.trash/rccg-the-masters-place_archive/node_modules/.bin/mkdirp'
# Symlink to [../mkdirp/bin/cmd.js]
'/home/rccgtmp/.trash/rccg-the-masters-place_archive/node_modules/.bin/twigjs'
# Symlink to [../twig/bin/twigjs]
'/home/rccgtmp/etc/rccgthemastersplace.com/info.rcube.db.latest'
# Symlink to [info.rcube.db.1610066892]
'/home/rccgtmp/etc/rccgthemastersplace.org/accounts.rcube.db.latest'
# Symlink to [accounts.rcube.db.1655689952]
'/home/rccgtmp/etc/rccgthemastersplace.org/admin.rcube.db.latest'
# Symlink to [admin.rcube.db.1655689952]
'/home/rccgtmp/etc/rccgthemastersplace.org/info.rcube.db.latest'
# Symlink to [info.rcube.db.1655689952]
'/home/rccgtmp/etc/rccgthemastersplace.org/media.rcube.db.latest'
# Symlink to [media.rcube.db.1655689952]
'/home/rccgtmp/etc/rccgthemastersplace.org/pastorrotimi.rcube.db.latest'
# Symlink to [pastorrotimi.rcube.db.1610066892]
'/home/rccgtmp/etc/rccgthemastersplace.org/picpfctprovince1.rcube.db.latest'
# Symlink to [picpfctprovince1.rcube.db.1655689952]
'/home/rccgtmp/etc/rccgthemastersplace.org/seniorpastor.rcube.db.latest'
# Symlink to [seniorpastor.rcube.db.1655689952]
'/home/rccgtmp/mail/.accounts@rccgthemastersplace_org'
# Symlink to [rccgthemastersplace.org/accounts]
'/home/rccgtmp/mail/.admin@rccgthemastersplace_org'
# Symlink to [rccgthemastersplace.org/admin]
'/home/rccgtmp/mail/.dev@rccgthemastersplace_com'
# Symlink to [rccgthemastersplace.com/dev]
'/home/rccgtmp/mail/.info@rccgthemastersplace_org'
# Symlink to [rccgthemastersplace.org/info]
'/home/rccgtmp/mail/.media@rccgthemastersplace_org'
# Symlink to [rccgthemastersplace.org/media]
'/home/rccgtmp/mail/.picpfctprovince1@rccgthemastersplace_org'
# Symlink to [rccgthemastersplace.org/picpfctprovince1]
'/home/rccgtmp/mail/.seniorpastor@rccgthemastersplace_org'
# Symlink to [rccgthemastersplace.org/seniorpastor]
'/home/rccgtmp/public_ftp/incoming'
# World writeable directory
'/home/rccguknational/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/rccguknational]
'/home/rccguknational/www'
# Symlink to [public_html]
'/home/rccguknational/.cpanel/ea-php-cli/public_html/.ea-php-cli.cache'
# Symlink to [ea-php74]
'/home/rccguknational/.softaculous/installations.php'
# Universal decode regex match = [universal decoder]
'/home/rccguknational/.trash/.tmb'
# World writeable directory
'/home/rccguknational/etc/rccguknational.rcube.db.latest'
# Symlink to [rccguknational.rcube.db.1748999532]
'/home/rccguknational/public_html/.tmb'
# World writeable directory
'/home/rccguknational/public_html/wp-content/plugins/login-customizer/vendor/codeinwp/themeisle-sdk/class-themeisle-sdk-widget-dashboard-blog.php'
# Universal decode regex match = [universal decoder]
'/home/rccguknational/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'
# Universal decode regex match = [universal decoder]
'/home/rccguknational/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'
# Universal decode regex match = [universal decoder]
'/home/rccguknational/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'
# Suspicious file type [application/x-c]
'/home/rccguknational/public_html/wp-content/plugins/wp-file-manager/lib/codemirror/mode/clike/index.html'
# Suspicious file type [application/x-c]
'/home/rccguknational/public_html/wp-content/plugins/wp-mail-smtp/src/Admin/Area.php'
# Universal decode regex match = [universal decoder]
'/home/rccguknational/public_html/wp-content/plugins/wp-mail-smtp/src/Admin/SetupWizard.php'
# Universal decode regex match = [universal decoder]
'/home/rccguknational/public_html/wp-content/uploads/js_composer'
# World writeable directory
'/home/rgmglobal/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/rgmglobal]
'/home/rgmglobal/www'
# Symlink to [public_html]
'/home/rgmglobal/etc/rgmgloballogistics.com/admin.rcube.db.latest'
# Symlink to [admin.rcube.db.1748999533]
'/home/rgmglobal/etc/rgmgloballogistics.com/info.rcube.db.latest'
# Symlink to [info.rcube.db.1748999533]
'/home/rgmglobal/mail/.admin@rgmgloballogistics_com'
# Symlink to [rgmgloballogistics.com/admin]
'/home/rgmglobal/mail/.info@rgmgloballogistics_com'
# Symlink to [rgmgloballogistics.com/info]
'/home/rgmglobal/public_html/node_modules/.bin/mime'
# Symlink to [../mime/cli.js]
'/home/rgmglobal/public_html/node_modules/.bin/mkdirp'
# Symlink to [../mkdirp/bin/cmd.js]
'/home/rgmglobal/public_html/node_modules/.bin/pixelmatch'
# Symlink to [../pixelmatch/bin/pixelmatch]
'/home/rgmglobal/public_html/node_modules/.bin/semver'
# Symlink to [../semver/bin/semver]
'/home/rgmglobal/public_html/node_modules/.bin/twigjs'
# Symlink to [../twig/bin/twigjs]
'/home/saladandmoreco/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/saladandmoreco]
'/home/saladandmoreco/www'
# Symlink to [public_html]
'/home/shepherd/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/shepherd]
'/home/shepherd/www'
# Symlink to [public_html]
'/home/shepherd/.cphorde/meta/latest'
# Symlink to [horde.backup.sql.20220114]
'/home/shepherd/.npm/_cacache/content-v2/sha512/9d/ec'
# World writeable directory
'/home/shepherd/mail/.admin@shepherdfreight_co_uk'
# Symlink to [shepherdfreight.co.uk/admin]
'/home/shepherd/mail/.info@shepherdfreight_co_uk'
# Symlink to [shepherdfreight.co.uk/info]
'/home/shepherd/public_html/node_modules/.bin/mime'
# Symlink to [../mime/cli.js]
'/home/shepherd/public_html/node_modules/.bin/mkdirp'
# Symlink to [../mkdirp/bin/cmd.js]
'/home/shepherd/public_html/node_modules/.bin/pixelmatch'
# Symlink to [../pixelmatch/bin/pixelmatch]
'/home/shepherd/public_html/node_modules/.bin/semver'
# Symlink to [../semver/bin/semver]
'/home/shepherd/public_html/node_modules/.bin/twigjs'
# Symlink to [../twig/bin/twigjs]
'/home/speedmove/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/speedmove]
'/home/speedmove/www'
# Symlink to [public_html]
'/home/speedmove/.cphorde/meta/latest'
# Symlink to [horde.backup.sql.20220114]
'/home/speedmove/etc/speedmoveproperty.co.uk/admin.rcube.db.latest'
# Symlink to [admin.rcube.db.1643878380]
'/home/speedmove/mail/new'
# Skipped - too many resources: 143798 ( > filemax=100000)
'/home/speedmove/public_html/Sitemap.php'
# Universal decode regex match = [universal decoder]
# Decode regex match = [decode regex: 1]
'/home/speedmove/public_html/app/Http/Controllers/generalcontroller.php'
# Universal decode regex match = [universal decoder]
'/home/speedmove/public_html/app/Http/Controllers/invoicecontroller.php'
# Universal decode regex match = [universal decoder]
'/home/speedmove/public_html/app/Http/Controllers/tenantcontroller.php'
# Universal decode regex match = [universal decoder]
'/home/speedmove/public_html/vendor/symfony/console/Resources/bin/hiddeninput.exe'
# MS Windows Binary/Executable [application/x-winexec]
'/home/speedmove/public_html/vendor/symfony/debug/Resources/ext/symfony_debug.c'
# Suspicious file type [application/x-c]
'/home/speednin/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/speednin]
'/home/speednin/www'
# Symlink to [public_html]
'/home/starpos/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/starpos]
'/home/starpos/www'
# Symlink to [public_html]
'/home/starpos/etc/starposgh.com/info.rcube.db.latest'
# Symlink to [info.rcube.db.1748999533]
'/home/starpos/mail/.info@starposgh_com'
# Symlink to [starposgh.com/info]
'/home/starpos/public_html/node_modules/.bin/mime'
# Symlink to [../mime/cli.js]
'/home/starpos/public_html/node_modules/.bin/mkdirp'
# Symlink to [../mkdirp/bin/cmd.js]
'/home/starpos/public_html/node_modules/.bin/pixelmatch'
# Symlink to [../pixelmatch/bin/pixelmatch]
'/home/starpos/public_html/node_modules/.bin/twigjs'
# Symlink to [../twig/bin/twigjs]
'/home/thedotingcarers/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/thedotingcarers]
'/home/thedotingcarers/www'
# Symlink to [public_html]
'/home/thedotingcarers/.npm/_cacache/content-v2/sha512/00/23/a194e3445dd0935702a27812102d28b6b5067c78a8a785cafd2696525002fc432d1a8c8811b6c2f11bf9703ce5b72442aa3f2c3f51a1e64d6854ce93f890'
# (compressed file: package/src/fastlist.exe [depth: 1]) MS Windows Binary/Executable [application/x-winexec]
'/home/thedotingcarers/.npm/_cacache/content-v2/sha512/0b/93/1ceab767b1a2438cedd4a465bf0904c7b4229a62549c653972e0922ef7b271a3fa1d0a21f42139c35d224f4ceac42a4ff271267400e8139a40ed90eb2f20'
# (compressed file: package/c/interface.c [depth: 1]) Suspicious file type [application/x-c]
'/home/thedotingcarers/etc/thedotingcarers.rcube.db.latest'
# Symlink to [thedotingcarers.rcube.db.1748999532]
'/home/thedotingcarers/public_html/node_modules/.bin/blessed'
# Symlink to [../blessed/bin/tput.js]
'/home/thedotingcarers/public_html/node_modules/.bin/escodegen'
# Symlink to [../escodegen/bin/escodegen.js]
'/home/thedotingcarers/public_html/node_modules/.bin/esgenerate'
# Symlink to [../escodegen/bin/esgenerate.js]
'/home/thedotingcarers/public_html/node_modules/.bin/esparse'
# Symlink to [../esprima/bin/esparse.js]
'/home/thedotingcarers/public_html/node_modules/.bin/esvalidate'
# Symlink to [../esprima/bin/esvalidate.js]
'/home/thedotingcarers/public_html/node_modules/.bin/json2yaml'
# Symlink to [../yamljs/bin/json2yaml]
'/home/thedotingcarers/public_html/node_modules/.bin/mime'
# Symlink to [../mime/cli.js]
'/home/thedotingcarers/public_html/node_modules/.bin/mkdirp'
# Symlink to [../mkdirp/bin/cmd.js]
'/home/thedotingcarers/public_html/node_modules/.bin/needle'
# Symlink to [../needle/bin/needle]
'/home/thedotingcarers/public_html/node_modules/.bin/pixelmatch'
# Symlink to [../pixelmatch/bin/pixelmatch]
'/home/thedotingcarers/public_html/node_modules/.bin/pm2'
# Symlink to [../pm2/bin/pm2]
'/home/thedotingcarers/public_html/node_modules/.bin/pm2-dev'
# Symlink to [../pm2/bin/pm2-dev]
'/home/thedotingcarers/public_html/node_modules/.bin/pm2-docker'
# Symlink to [../pm2/bin/pm2-docker]
'/home/thedotingcarers/public_html/node_modules/.bin/pm2-runtime'
# Symlink to [../pm2/bin/pm2-runtime]
'/home/thedotingcarers/public_html/node_modules/.bin/resolve'
# Symlink to [../resolve/bin/resolve]
'/home/thedotingcarers/public_html/node_modules/.bin/semver'
# Symlink to [../semver/bin/semver]
'/home/thedotingcarers/public_html/node_modules/.bin/systeminformation'
# Symlink to [../systeminformation/lib/cli.js]
'/home/thedotingcarers/public_html/node_modules/.bin/twigjs'
# Symlink to [../twig/bin/twigjs]
'/home/thedotingcarers/public_html/node_modules/.bin/uuid'
# Symlink to [../uuid/bin/uuid]
'/home/thedotingcarers/public_html/node_modules/.bin/yaml2json'
# Symlink to [../yamljs/bin/yaml2json]
'/home/thedotingcarers/public_html/node_modules/@pm2/agent/node_modules/.bin/semver'
# Symlink to [../semver/bin/semver.js]
'/home/thedotingcarers/public_html/node_modules/@pm2/io/node_modules/.bin/semver'
# Symlink to [../semver/bin/semver.js]
'/home/thedotingcarers/public_html/node_modules/@tootallnate/quickjs-emscripten/c/interface.c'
# Suspicious file type [application/x-c]
'/home/thedotingcarers/public_html/node_modules/pm2/node_modules/.bin/mkdirp'
# Symlink to [../mkdirp/bin/cmd.js]
'/home/thedotingcarers/public_html/node_modules/pm2/node_modules/.bin/semver'
# Symlink to [../semver/bin/semver.js]
'/home/thedotingcarers/public_html/node_modules/pm2-sysmonit/src/fastlist.exe'
# MS Windows Binary/Executable [application/x-winexec]
'/home/thestemcell/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/thestemcell]
'/home/thestemcell/www'
# Symlink to [public_html]
'/home/thestemcell/.cphorde/meta/latest'
# Symlink to [horde.backup.sql.20211026]
# Scan Timeout (30 secs) while processing:
'/home/thestemcell/.trash/admin/ckeditor/adapters.zip'
'/home/thestemcell/.trash/admin/system/core/CodeIgniter.php'
# Script version check [OLD] [CodeIgniter v2.2.0 < v4.4.0]
'/home/thestemcell/.trash/admin/testing/system/core/CodeIgniter.php'
# Script version check [OLD] [CodeIgniter v2.2.0 < v4.4.0]
'/home/thestemcell/.trash/stem-cell/admin/system/core/CodeIgniter.php'
# Script version check [OLD] [CodeIgniter v2.2.0 < v4.4.0]
'/home/thestemcell/.trash/stem-cell/system/core/CodeIgniter.php'
# Script version check [OLD] [CodeIgniter v2.2.0 < v4.4.0]
'/home/thestemcell/.trash/system/core/CodeIgniter.php'
# Script version check [OLD] [CodeIgniter v2.2.0 < v4.4.0]
'/home/thestemcell/etc/thestemcellsolutions.com/info.rcube.db.latest'
# Symlink to [info.rcube.db.1748999532]
'/home/thestemcell/mail/.info@thestemcellsolutions_com'
# Symlink to [thestemcellsolutions.com/info]
'/home/thestemcell/mail/.sales@thestemcellsolutions_com'
# Symlink to [thestemcellsolutions.com/sales]
'/home/thestemcell/mail/.u2us@thestemcellsolutions_com'
# Symlink to [thestemcellsolutions.com/u2us]
'/home/thestemcell/public_html/admin/system/core/CodeIgniter.php'
# Script version check [OLD] [CodeIgniter v2.2.0 < v4.4.0]
'/home/thestemcell/public_html/system/core/CodeIgniter.php'
# Script version check [OLD] [CodeIgniter v2.2.0 < v4.4.0]
'/home/tmpmmsapp/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/tmpmmsapp]
'/home/tmpmmsapp/www'
# Symlink to [public_html]
'/home/tmpmmsapp/.cphorde/meta/latest'
# Symlink to [horde.backup.sql.20211026]
# Scan Timeout (30 secs) while processing:
'/home/tmpmmsapp/.trash/application/views/new/bible.pdf'
'/home/tmpmmsapp/etc/tmpmmsapp.rcube.db.latest'
# Symlink to [tmpmmsapp.rcube.db.1748999532]
'/home/tmpmmsapp/mail/cur'
# Skipped - too many resources: 632200 ( > filemax=100000)
'/home/tmpmmsapp/mail/new'
# Skipped - too many resources: 1649323 ( > filemax=100000)
'/home/tmpmmsapp/public_html/application'
# World writeable directory
'/home/tmpmmsapp/public_html/applicationold'
# World writeable directory
# Scan Timeout (30 secs) while processing:
'/home/tmpmmsapp/public_html/applicationold/views/new/bible.pdf'
# Scan Timeout (30 secs) while processing:
'/home/tmpmmsapp/public_html/assets_f/wordlog/f8b8113d991a2c62019df2bd69a55599.pptx'
'/home/tmpmmsapp/public_html/s/core/CodeIgniter.php'
# Script version check [OLD] [CodeIgniter v2.2.0 < v4.4.0]
'/home/tmpmmsapp/public_html/system/core/CodeIgniter.php'
# Script version check [OLD] [CodeIgniter v2.2.0 < v4.4.0]
'/home/toolsch/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/toolsch]
'/home/toolsch/www'
# Symlink to [public_html]
'/home/toolsch/certificates.toolchesthq.com/.tmb'
# World writeable directory
'/home/toolsch/etc/khanoye.com/sales.rcube.db.latest'
# Symlink to [sales.rcube.db.1748999533]
'/home/toolsch/etc/yesnowheel.pro/info.rcube.db.latest'
# Symlink to [info.rcube.db.1748999533]
'/home/toolsch/mail/.admin@certificates_toolchesthq_com'
# Symlink to [certificates.toolchesthq.com/admin]
'/home/toolsch/mail/.admin@yesnowheel_pro'
# Symlink to [yesnowheel.pro/admin]
'/home/toolsch/mail/.info@khanoye_com'
# Symlink to [khanoye.com/info]
'/home/toolsch/mail/.info@yesnowheel_pro'
# Symlink to [yesnowheel.pro/info]
'/home/toolsch/mail/.sales@khanoye_com'
# Symlink to [khanoye.com/sales]
'/home/toolsch/public_html/demo/index.php'
# Universal decode regex match = [universal decoder]
'/home/toolsch/public_html/node_modules/.bin/mime'
# Symlink to [../mime/cli.js]
'/home/toolsch/public_html/node_modules/.bin/mkdirp'
# Symlink to [../mkdirp/bin/cmd.js]
'/home/toolsch/public_html/node_modules/.bin/pixelmatch'
# Symlink to [../pixelmatch/bin/pixelmatch]
'/home/toolsch/public_html/node_modules/.bin/twigjs'
# Symlink to [../twig/bin/twigjs]
'/home/toolsch/yesnowheel.pro/wp-content/plugins/cookie-notice/includes/settings.php'
# Universal decode regex match = [universal decoder]
'/home/toolsch/yesnowheel.pro/wp-content/plugins/shortcodes-ultimate/admin/class-shortcodes-ultimate-admin-top-level.php'
# Universal decode regex match = [universal decoder]
'/home/toolsch/yesnowheel.pro/wp-content/plugins/wp-file-manager/lib/codemirror/mode/clike/index.html'
# Suspicious file type [application/x-c]
'/home/tophygiene/.accesshash'
# Symlink to [/home/tophygiene/public_html/.accesshash]
'/home/tophygiene/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/tophygiene]
'/home/tophygiene/www'
# Symlink to [public_html]
'/home/tophygiene/.cpanel/ea-php-cli/.ea-php-cli.cache'
# Symlink to [ea-php81]
'/home/tophygiene/.cpanel/ea-php-cli/public_html/.ea-php-cli.cache'
# Symlink to [ea-php71]
'/home/tophygiene/.cpanel/ea-php-cli/public_html/wp-admin/.ea-php-cli.cache'
# Symlink to [ea-php74]
'/home/tophygiene/.cphorde/meta/latest'
# Symlink to [horde.backup.sql.20220127]
'/home/tophygiene/etc/tophygiene.co.uk/info.rcube.db.latest'
# Symlink to [info.rcube.db.1748999533]
'/home/tophygiene/etc/tophygiene.co.uk/pbls.rcube.db.latest'
# Symlink to [pbls.rcube.db.1748999533]
'/home/tophygiene/etc/tophygiene.co.uk/sales.rcube.db.latest'
# Symlink to [sales.rcube.db.1748999533]
'/home/tophygiene/mail/.info@tophygiene_co_uk'
# Symlink to [tophygiene.co.uk/info]
'/home/tophygiene/mail/.pbls@tophygiene_co_uk'
# Symlink to [tophygiene.co.uk/pbls]
'/home/tophygiene/mail/.sales@tophygiene_co_uk'
# Symlink to [tophygiene.co.uk/sales]
'/home/tophygiene/public_ftp/incoming'
# World writeable directory
# Scan Timeout (30 secs) while processing:
'/home/tophygiene/public_html/wordpress-6.2.2.zip'
'/home/tophygiene/public_html/.tmb'
# World writeable directory
'/home/tophygiene/public_html/wordpress/wp-content/plugins/wp-file-manager/lib/codemirror/mode/clike/index.html'
# Suspicious file type [application/x-c]
'/home/tophygiene/public_html/wp-content/plugins/classic-editor/classic-editor.php'
# Script version check [OLD] [Classic Editor v1.5 < v1.6.3]
'/home/tophygiene/public_html/wp-content/plugins/contact-form-7/wp-contact-form-7.php'
# Script version check [OLD] [Contact Form 7 v5.2.1 < v5.7.6]
'/home/tophygiene/public_html/wp-content/plugins/cookie-law-info/cookie-law-info.php'
# Script version check [OLD] [GDPR Cookie Consent v1.8.9 < v3.0.9]
'/home/tophygiene/public_html/wp-content/plugins/custom-css-js/custom-css-js.php'
# Script version check [OLD] [Simple Custom CSS and JS v3.32.3 < v3.43]
'/home/tophygiene/public_html/wp-content/plugins/instagram-feed/instagram-feed.php'
# Script version check [OLD] [Smash Balloon Instagram Feed v2.4.5 < v6.1.4]
'/home/tophygiene/public_html/wp-content/plugins/woo-gutenberg-products-block/woocommerce-gutenberg-products-block.php'
# Script version check [OLD] [WooCommerce Blocks v3.1.0 < v10.2.0]
'/home/tophygiene/public_html/wp-content/plugins/woocommerce/woocommerce.php'
# Script version check [OLD] [WooCommerce v3.6.3 < v7.7.0]
'/home/tophygiene/public_html/wp-content/plugins/wordpress-importer/wordpress-importer.php'
# Script version check [OLD] [WordPress Importer v0.7 < v0.8.1]
'/home/tophygiene/public_html/wp-content/plugins/wordpress-seo/wp-seo.php'
# Script version check [OLD] [Yoast SEO v14.7 < v20.7]
'/home/tophygiene/public_html/wp-content/plugins/wp-file-manager/lib/codemirror/mode/clike/index.html'
# Suspicious file type [application/x-c]
'/home/totalfreight/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/totalfreight]
'/home/totalfreight/www'
# Symlink to [public_html]
'/home/totalfreight/.cpanel/ea-php-cli/public_html/pos/.ea-php-cli.cache'
# Symlink to [ea-php71]
'/home/totalfreight/.cphorde/meta/latest'
# Symlink to [horde.backup.sql.20220127]
'/home/totalfreight/.trash/pos.1/vendor/symfony/console/Resources/bin/hiddeninput.exe'
# MS Windows Binary/Executable [application/x-winexec]
'/home/totalfreight/etc/totalfreight.rcube.db.latest'
# Symlink to [totalfreight.rcube.db.1748999533]
'/home/totalfreight/etc/totalfreightservices.co.uk/admin.rcube.db.latest'
# Symlink to [admin.rcube.db.1729213940]
# Scan Timeout (30 secs) while processing:
'/home/totalfreight/public_html/installment.zip'
'/home/totalfreight/public_html/node_modules/.bin/mime'
# Symlink to [../mime/cli.js]
'/home/totalfreight/public_html/node_modules/.bin/mkdirp'
# Symlink to [../mkdirp/bin/cmd.js]
'/home/totalfreight/public_html/node_modules/.bin/pixelmatch'
# Symlink to [../pixelmatch/bin/pixelmatch]
'/home/totalfreight/public_html/node_modules/.bin/semver'
# Symlink to [../semver/bin/semver]
'/home/totalfreight/public_html/node_modules/.bin/twigjs'
# Symlink to [../twig/bin/twigjs]
'/home/trinityempire/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/trinityempire]
'/home/trinityempire/www'
# Symlink to [public_html]
'/home/trinityempire/.cphorde/meta/latest'
# Symlink to [horde.backup.sql.20220127]
'/home/trinityempire/.npm/_cacache/content-v2/sha512/ae/9d'
# World writeable directory
'/home/trinityempire/.trash/ENT CU[MRWEEBEE]/.htaccess'
# Regular expression match = [\b0day]
'/home/trinityempire/.trash/ENT CU[MRWEEBEE]/Logs/.htaccess'
# Regular expression match = [\b0day]
'/home/trinityempire/.trash/ENT CU[MRWEEBEE]/login/.htaccess'
# Regular expression match = [\b0day]
'/home/trinityempire/.trash/ENT CU[MRWEEBEE]/login/Bots/.htaccess'
# Regular expression match = [\b0day]
'/home/trinityempire/.trash/ENT CU[MRWEEBEE]/login/Bots/Anti/.htaccess'
# Regular expression match = [\b0day]
'/home/trinityempire/.trash/ENT CU[MRWEEBEE]/login/Bots/Anti/out/.htaccess'
# Regular expression match = [\b0day]
'/home/trinityempire/.trash/ENT CU[MRWEEBEE]/login/Bots/Anti/out/Crawler/.htaccess'
# Regular expression match = [\b0day]
'/home/trinityempire/.trash/ENT CU[MRWEEBEE]/login/Bots/Anti/out/Crawler/raw/.htaccess'
# Regular expression match = [\b0day]
'/home/trinityempire/.trash/ENT CU[MRWEEBEE]/login/Bots/Anti/out/Crawler/src/.htaccess'
# Regular expression match = [\b0day]
'/home/trinityempire/.trash/ENT CU[MRWEEBEE]/login/Bots/Anti/out/Crawler/src/Fixtures/.htaccess'
# Regular expression match = [\b0day]
'/home/trinityempire/.trash/ENT CU[MRWEEBEE]/login/Bots/Anti/out/Crawler/src/Fixtures/SpamReferrers.php'
# Regular expression match = [\b0day]
'/home/trinityempire/.trash/ENT CU[MRWEEBEE]/login/Bots/bot/.htaccess'
# Regular expression match = [\b0day]
'/home/trinityempire/.trash/ENT CU[MRWEEBEE]/login/Bots/bot/CrawlerDetect/Fixtures/SpamReferrers.php'
# Regular expression match = [\b0day]
'/home/trinityempire/.trash/ENT CU[MRWEEBEE]/login/ses/.htaccess'
# Regular expression match = [\b0day]
'/home/trinityempire/.trash/ENT CU[MRWEEBEE]/login/ses/process/.htaccess'
# Regular expression match = [\b0day]
'/home/trinityempire/.trash/ENT CU[MRWEEBEE]/settings/.htaccess'
# Regular expression match = [\b0day]
'/home/trinityempire/.trash/SUNCOAST CREDIT UNION/.htaccess'
# Regular expression match = [\b0day]
'/home/trinityempire/.trash/SUNCOAST CREDIT UNION/Logs/.htaccess'
# Regular expression match = [\b0day]
'/home/trinityempire/.trash/SUNCOAST CREDIT UNION/servr/.htaccess'
# Regular expression match = [\b0day]
'/home/trinityempire/.trash/SUNCOAST CREDIT UNION/servr/Bots/.htaccess'
# Regular expression match = [\b0day]
'/home/trinityempire/.trash/SUNCOAST CREDIT UNION/servr/Bots/Anti/.htaccess'
# Regular expression match = [\b0day]
'/home/trinityempire/.trash/SUNCOAST CREDIT UNION/servr/Bots/Anti/out/.htaccess'
# Regular expression match = [\b0day]
'/home/trinityempire/.trash/SUNCOAST CREDIT UNION/servr/Bots/Anti/out/Crawler/.htaccess'
# Regular expression match = [\b0day]
'/home/trinityempire/.trash/SUNCOAST CREDIT UNION/servr/Bots/Anti/out/Crawler/raw/.htaccess'
# Regular expression match = [\b0day]
'/home/trinityempire/.trash/SUNCOAST CREDIT UNION/servr/Bots/Anti/out/Crawler/src/.htaccess'
# Regular expression match = [\b0day]
'/home/trinityempire/.trash/SUNCOAST CREDIT UNION/servr/Bots/Anti/out/Crawler/src/Fixtures/.htaccess'
# Regular expression match = [\b0day]
'/home/trinityempire/.trash/SUNCOAST CREDIT UNION/servr/Bots/Anti/out/Crawler/src/Fixtures/SpamReferrers.php'
# Regular expression match = [\b0day]
'/home/trinityempire/.trash/SUNCOAST CREDIT UNION/servr/Bots/bot/.htaccess'
# Regular expression match = [\b0day]
'/home/trinityempire/.trash/SUNCOAST CREDIT UNION/servr/Bots/bot/CrawlerDetect/Fixtures/SpamReferrers.php'
# Regular expression match = [\b0day]
'/home/trinityempire/.trash/SUNCOAST CREDIT UNION/servr/auth/.htaccess'
# Regular expression match = [\b0day]
'/home/trinityempire/.trash/SUNCOAST CREDIT UNION/servr/auth/process/.htaccess'
# Regular expression match = [\b0day]
'/home/trinityempire/.trash/SUNCOAST CREDIT UNION/settings/.htaccess'
# Regular expression match = [\b0day]
'/home/trinityempire/.trash/SUNCOAST-CU/.htaccess'
# Regular expression match = [\b0day]
'/home/trinityempire/.trash/SUNCOAST-CU/Logs/.htaccess'
# Regular expression match = [\b0day]
'/home/trinityempire/.trash/SUNCOAST-CU/servr/.htaccess'
# Regular expression match = [\b0day]
'/home/trinityempire/.trash/SUNCOAST-CU/servr/Bots/.htaccess'
# Regular expression match = [\b0day]
'/home/trinityempire/.trash/SUNCOAST-CU/servr/Bots/Anti/.htaccess'
# Regular expression match = [\b0day]
'/home/trinityempire/.trash/SUNCOAST-CU/servr/Bots/Anti/out/.htaccess'
# Regular expression match = [\b0day]
'/home/trinityempire/.trash/SUNCOAST-CU/servr/Bots/Anti/out/Crawler/.htaccess'
# Regular expression match = [\b0day]
'/home/trinityempire/.trash/SUNCOAST-CU/servr/Bots/Anti/out/Crawler/raw/.htaccess'
# Regular expression match = [\b0day]
'/home/trinityempire/.trash/SUNCOAST-CU/servr/Bots/Anti/out/Crawler/src/.htaccess'
# Regular expression match = [\b0day]
'/home/trinityempire/.trash/SUNCOAST-CU/servr/Bots/Anti/out/Crawler/src/Fixtures/.htaccess'
# Regular expression match = [\b0day]
'/home/trinityempire/.trash/SUNCOAST-CU/servr/Bots/Anti/out/Crawler/src/Fixtures/SpamReferrers.php'
# Regular expression match = [\b0day]
'/home/trinityempire/.trash/SUNCOAST-CU/servr/Bots/bot/.htaccess'
# Regular expression match = [\b0day]
'/home/trinityempire/.trash/SUNCOAST-CU/servr/Bots/bot/CrawlerDetect/Fixtures/SpamReferrers.php'
# Regular expression match = [\b0day]
'/home/trinityempire/.trash/SUNCOAST-CU/servr/auth/.htaccess'
# Regular expression match = [\b0day]
'/home/trinityempire/.trash/SUNCOAST-CU/servr/auth/process/.htaccess'
# Regular expression match = [\b0day]
'/home/trinityempire/.trash/SUNCOAST-CU/settings/.htaccess'
# Regular expression match = [\b0day]
'/home/trinityempire/etc/trinityempire.rcube.db.latest'
# Symlink to [trinityempire.rcube.db.1748999532]
'/home/trinityempire/etc/trinityempiretravels.com/admin.rcube.db.latest'
# Symlink to [admin.rcube.db.1649641987]
'/home/trinityempire/etc/trinityempiretravels.com/kolawole.rcube.db.latest'
# Symlink to [kolawole.rcube.db.1649641987]
'/home/trinityempire/public_html/node_modules/.bin/mime'
# Symlink to [../mime/cli.js]
'/home/trinityempire/public_html/node_modules/.bin/mkdirp'
# Symlink to [../mkdirp/bin/cmd.js]
'/home/trinityempire/public_html/node_modules/.bin/pixelmatch'
# Symlink to [../pixelmatch/bin/pixelmatch]
'/home/trinityempire/public_html/node_modules/.bin/semver'
# Symlink to [../semver/bin/semver]
'/home/trinityempire/public_html/node_modules/.bin/twigjs'
# Symlink to [../twig/bin/twigjs]
'/home/trinityempire/var/cpanel/styled/current_style'
# Symlink to [/usr/local/cpanel/base/frontend/paper_lantern/styled/basic]
'/home/trunafoods/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/trunafoods]
'/home/trunafoods/www'
# Symlink to [public_html]
'/home/trunafoods/.cphorde/meta/latest'
# Symlink to [horde.backup.sql.20220127]
# Scan Timeout (30 secs) while processing:
'/home/trunafoods/.trash/adapters.zip'
'/home/trunafoods/.trash/admin/system/core/CodeIgniter.php'
# Script version check [OLD] [CodeIgniter v2.2.0 < v4.4.0]
'/home/trunafoods/.trash/system/core/CodeIgniter.php'
# Script version check [OLD] [CodeIgniter v2.2.0 < v4.4.0]
'/home/trunafoods/.trash/testing/system/core/CodeIgniter.php'
# Script version check [OLD] [CodeIgniter v2.2.0 < v4.4.0]
'/home/trunafoods/etc/trunafoods.co.uk/admin.rcube.db.latest'
# Symlink to [admin.rcube.db.1748999532]
'/home/trunafoods/etc/trunafoods.co.uk/info.rcube.db.latest'
# Symlink to [info.rcube.db.1748999532]
'/home/trunafoods/etc/trunafoods.co.uk/julius.rcube.db.latest'
# Symlink to [julius.rcube.db.1748999532]
'/home/trunafoods/etc/trunafoods.co.uk/u2us.rcube.db.latest'
# Symlink to [u2us.rcube.db.1748999532]
'/home/trunafoods/mail/.admin@trunafoods_co_uk'
# Symlink to [trunafoods.co.uk/admin]
'/home/trunafoods/mail/.info@trunafoods_co_uk'
# Symlink to [trunafoods.co.uk/info]
'/home/trunafoods/mail/.julius@trunafoods_co_uk'
# Symlink to [trunafoods.co.uk/julius]
'/home/trunafoods/mail/.u2us@trunafoods_co_uk'
# Symlink to [trunafoods.co.uk/u2us]
'/home/trunafoods/public_html/admin/conf.php'
# Symlink to [/home/trunafoods/public_html/admin/conf.php]
'/home/trunafoods/public_html/admin/system/core/CodeIgniter.php'
# Script version check [OLD] [CodeIgniter v2.2.0 < v4.4.0]
'/home/trunafoods/public_html/system/core/CodeIgniter.php'
# Script version check [OLD] [CodeIgniter v2.2.0 < v4.4.0]
'/home/tutormanager/access-logs'
# Symlink to [/usr/local/apache/domlogs/tutormanager]
'/home/tutormanager/www'
# Symlink to [public_html]
'/home/tutormanager/.cphorde/meta/latest'
# Symlink to [horde.backup.sql.20220127]
'/home/tutormanager/.trash/PhpStorm-8.0.1.exe'
# MS Windows Binary/Executable [application/x-winexec]
'/home/tutormanager/.trash/_create_tutor.php.zip'
# (compressed file: PhpStorm-8.0.1.exe [depth: 1]) MS Windows Binary/Executable [application/x-winexec]
'/home/tutormanager/mail/.admin@tutormanager_co_uk'
# Symlink to [tutormanager.co.uk/admin]
'/home/tutormanager/public_ftp/incoming'
# World writeable directory
# Scan Timeout (30 secs) while processing:
'/home/tutormanager/public_html/tms.zip'
'/home/tutormanager/public_html/bezaleeltutors/app/Http/Controllers/generalcontroller.php'
# Universal decode regex match = [universal decoder]
'/home/tutormanager/public_html/bezaleeltutors/app/Http/Controllers/invoicecontroller.php'
# Universal decode regex match = [universal decoder]
'/home/tutormanager/public_html/bezaleeltutors/vendor/symfony/console/Resources/bin/hiddeninput.exe'
# MS Windows Binary/Executable [application/x-winexec]
'/home/tutormanager/public_html/bezaleeltutors/vendor/symfony/debug/Resources/ext/symfony_debug.c'
# Suspicious file type [application/x-c]
'/home/tutormanager/public_html/demo/system/core/CodeIgniter.php'
# Script version check [OLD] [CodeIgniter v2.2.0 < v4.4.0]
'/home/tutormanager/public_html/lms/app/Http/Controllers/generalcontroller.php'
# Universal decode regex match = [universal decoder]
'/home/tutormanager/public_html/lms/app/Http/Controllers/invoicecontroller.php'
# Universal decode regex match = [universal decoder]
'/home/tutormanager/public_html/lms/vendor/symfony/console/Resources/bin/hiddeninput.exe'
# MS Windows Binary/Executable [application/x-winexec]
'/home/tutormanager/public_html/lms/vendor/symfony/debug/Resources/ext/symfony_debug.c'
# Suspicious file type [application/x-c]
'/home/tutormanager/public_html/system/core/CodeIgniter.php'
# Script version check [OLD] [CodeIgniter v2.2.0 < v4.4.0]
'/home/tutormanager/public_html/tms_upd_forAndroid/system/core/CodeIgniter.php'
# Script version check [OLD] [CodeIgniter v2.2.0 < v4.4.0]
'/home/tutormanager/var/cpanel/styled/current_style'
# Symlink to [/usr/local/cpanel/base/frontend/paper_lantern/styled/glass]
'/home/unikfoods/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/unikfoods]
'/home/unikfoods/www'
# Symlink to [public_html]
'/home/unikfoods/etc/unikfoods.rcube.db.latest'
# Symlink to [unikfoods.rcube.db.1748999533]
'/home/unikfoods/etc/unikfoods.co.uk/u2us.rcube.db.latest'
# Symlink to [u2us.rcube.db.1748999533]
'/home/unikfoods/mail/.u2us@unikfoods_co_uk'
# Symlink to [unikfoods.co.uk/u2us]
'/home/unikfoods/public_html/node_modules/.bin/mime'
# Symlink to [../mime/cli.js]
'/home/unikfoods/public_html/node_modules/.bin/mkdirp'
# Symlink to [../mkdirp/bin/cmd.js]
'/home/unikfoods/public_html/node_modules/.bin/semver'
# Symlink to [../semver/bin/semver]
'/home/unikfoods/public_html/node_modules/.bin/twigjs'
# Symlink to [../twig/bin/twigjs]
'/home/unikfoods/public_html/node_modules/forwarded'
# World writeable directory
'/home/unikfoods/public_html/public/images/reviewimages/0abb071bfd175f36ac46template.php'
# Universal decode regex match = [universal decoder]
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P1791]]
'/home/unikfoods/public_html/public/images/reviewimages/0e9d9866e5f34dc05900template.php'
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P1791]]
'/home/unikfoods/public_html/public/images/reviewimages/336980e6435895d76798template.php'
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P1791]]
'/home/unikfoods/public_html/public/images/reviewimages/55e4a5b9e7758c8e7e18template.php'
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P1791]]
'/home/unikfoods/public_html/public/images/reviewimages/6a96f5c502c6cffcb43atemplate.php'
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P1791]]
'/home/unikfoods/public_html/public/images/reviewimages/705265abb3b6feb3240ftemplate.php'
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P1791]]
'/home/unikfoods/public_html/public/images/reviewimages/731d2d71604ec09fa435template.php'
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P1791]]
'/home/unikfoods/public_html/public/images/reviewimages/7f4afac88a8a76f607c4template.php'
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P1791]]
'/home/unikfoods/public_html/public/images/reviewimages/8de02d6c184360e01cd3template.php'
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P1791]]
'/home/unikfoods/public_html/public/images/reviewimages/8ef7b289a03477d94cb9template.php'
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P1791]]
'/home/unikfoods/public_html/public/images/reviewimages/944f29e5cdd24a85f0f9template.php'
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P1791]]
'/home/unikfoods/public_html/public/images/reviewimages/963f29ed1c24a0fd7fc9template.php'
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P1791]]
'/home/unikfoods/public_html/public/images/reviewimages/992599b34eb33167f857template.php'
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P1791]]
'/home/unikfoods/public_html/public/images/reviewimages/99350aabb7ffbe6f937ctemplate.php'
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P1791]]
'/home/unikfoods/public_html/public/images/reviewimages/b2394b81fc13d696b311template.php'
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P1791]]
'/home/unikfoods/public_html/public/images/reviewimages/b7f472c1fb7913b05740template.php'
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P1791]]
'/home/unikfoods/public_html/public/images/reviewimages/ddc23a94119f0729f59ftemplate.php'
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P1791]]
'/home/unikfoods/public_html/public/images/reviewimages/e589c4f64e00bb8657a7template.php'
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P1791]]
'/home/unikfoods/public_html/public/images/reviewimages/e8c6fbe04bdf68fe5b3atemplate.php'
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P1791]]
'/home/unikfoods/public_html/public/images/reviewimages/e8cffa627961f488cc21template.php'
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P1791]]
'/home/unikfoods/public_html/public/images/reviewimages/edc5274b8e3cf69efeedtemplate.php'
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P1791]]
'/home/unikfoods/public_html/public/images/reviewimages/ee2f86cf6b6769e5c87btemplate.php'
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P1791]]
'/home/unikfoods/public_html/public/images/reviewimages/fa056986739ce19d5b53template.php'
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P1791]]
'/home/unikfoods/public_html/public/images/reviewimages/fdf25e3244687b55fcd3template.php'
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P1791]]
----------- SCAN SUMMARY -----------
Scanned directories: 224245
Scanned files: 1773023
Ignored items: 9842
Suspicious matches: 1048
Viruses found: 1
Fingerprint matches: 24
Data scanned: 190328.63 MB
Scan peak memory: 981468 kB
Scan time/item: 0.028 sec
Scan time: 56377.365 sec
Anons79 File Manager Version 1.0, Coded By Anons79
Email: [email protected]
Anons79 Mini Shell