![]() Server : Apache System : Linux server2.corals.io 4.18.0-348.2.1.el8_5.x86_64 #1 SMP Mon Nov 15 09:17:08 EST 2021 x86_64 User : corals ( 1002) PHP Version : 7.4.33 Disable Function : exec,passthru,shell_exec,system Directory : /usr/local/maldetect.bk1361510/ |
Feb 27 2025 03:21:05 server2 maldet(2215492): {sigup} performing signature update check... Feb 27 2025 03:21:06 server2 maldet(2215492): {sigup} local signature set is version 20250225482944 Feb 27 2025 03:21:27 server2 maldet(2215492): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 27 2025 03:21:27 server2 maldet(2215492): {sigup} latest signature set already installed Feb 27 2025 03:21:27 server2 maldet(2214896): {update} completed update v1.6.6 1591f0 => v1.6.6 359d25, running signature updates... Feb 27 2025 03:21:28 server2 maldet(2215686): {sigup} performing signature update check... Feb 27 2025 03:21:28 server2 maldet(2215686): {sigup} local signature set is version 20250225482944 Feb 27 2025 03:22:15 server2 maldet(2215686): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 27 2025 03:22:15 server2 maldet(2215686): {sigup} latest signature set already installed Feb 27 2025 03:22:15 server2 maldet(2214896): {update} update and config import completed Feb 27 2025 03:22:15 server2 maldet(2215846): {sigup} performing signature update check... Feb 27 2025 03:22:15 server2 maldet(2215846): {sigup} local signature set is version 20250225482944 Feb 27 2025 03:22:15 server2 maldet(2215846): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 27 2025 03:22:16 server2 maldet(2215846): {sigup} latest signature set already installed Feb 27 2025 03:22:16 server2 maldet(2215934): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 27 2025 03:23:05 server2 maldet(2215934): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 27 2025 03:23:05 server2 maldet(2215934): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Feb 27 2025 03:23:05 server2 maldet(2215934): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 27 2025 03:23:05 server2 maldet(2215934): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 27 2025 03:23:43 server2 maldet(2215934): {scan} file list completed in 38s, found 1529 files... Feb 27 2025 03:23:43 server2 maldet(2215934): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 27 2025 03:23:43 server2 maldet(2215934): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1529 files) in progress... Feb 27 2025 03:24:32 server2 maldet(2215934): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1529, malware hits 0, cleaned hits 0, time 136s Feb 27 2025 03:24:32 server2 maldet(2215934): {scan} scan report saved, to view run: maldet --report 250227-0322.2215934 Feb 28 2025 03:36:27 server2 maldet(2424664): {update} checking for available updates... Feb 28 2025 03:36:47 server2 maldet(2424664): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 28 2025 03:36:47 server2 maldet(2424664): {update} hashing install files and checking against server... Feb 28 2025 03:37:12 server2 maldet(2424664): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 28 2025 03:37:12 server2 maldet(2424664): {update} latest version already installed. Feb 28 2025 03:37:13 server2 maldet(2424837): {sigup} performing signature update check... Feb 28 2025 03:37:13 server2 maldet(2424837): {sigup} local signature set is version 20250225482944 Feb 28 2025 03:39:04 server2 maldet(2424837): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 28 2025 03:39:04 server2 maldet(2424837): {sigup} new signature set 202502281171132 available Feb 28 2025 03:39:04 server2 maldet(2424837): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 28 2025 03:39:34 server2 maldet(2424837): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 28 2025 03:39:34 server2 maldet(2424837): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Feb 28 2025 03:39:34 server2 maldet(2424837): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 28 2025 03:39:57 server2 maldet(2424837): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 28 2025 03:40:20 server2 maldet(2424837): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Feb 28 2025 03:40:20 server2 maldet(2424837): {sigup} verified md5sum of maldet-sigpack.tgz Feb 28 2025 03:40:20 server2 maldet(2424837): {sigup} unpacked and installed maldet-sigpack.tgz Feb 28 2025 03:40:20 server2 maldet(2424837): {sigup} verified md5sum of maldet-clean.tgz Feb 28 2025 03:40:20 server2 maldet(2424837): {sigup} unpacked and installed maldet-clean.tgz Feb 28 2025 03:40:20 server2 maldet(2424837): {sigup} signature set update completed Feb 28 2025 03:40:20 server2 maldet(2424837): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 28 2025 03:40:21 server2 maldet(2425448): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 28 2025 03:40:22 server2 maldet(2425448): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 28 2025 03:40:22 server2 maldet(2425448): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Feb 28 2025 03:40:22 server2 maldet(2425448): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 28 2025 03:40:22 server2 maldet(2425448): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 28 2025 03:41:11 server2 maldet(2425448): {scan} file list completed in 49s, found 516 files... Feb 28 2025 03:41:11 server2 maldet(2425448): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 28 2025 03:41:11 server2 maldet(2425448): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (516 files) in progress... Feb 28 2025 03:42:00 server2 maldet(2425448): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 516, malware hits 0, cleaned hits 0, time 99s Feb 28 2025 03:42:00 server2 maldet(2425448): {scan} scan report saved, to view run: maldet --report 250228-0340.2425448 Mar 01 2025 03:47:32 server2 maldet(2643388): {update} checking for available updates... Mar 01 2025 03:47:54 server2 maldet(2643388): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 01 2025 03:47:54 server2 maldet(2643388): {update} hashing install files and checking against server... Mar 01 2025 03:48:18 server2 maldet(2643388): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 01 2025 03:48:18 server2 maldet(2643388): {update} latest version already installed. Mar 01 2025 03:48:18 server2 maldet(2643573): {sigup} performing signature update check... Mar 01 2025 03:48:18 server2 maldet(2643573): {sigup} local signature set is version 202502281171132 Mar 01 2025 03:48:50 server2 maldet(2643573): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 01 2025 03:48:50 server2 maldet(2643573): {sigup} new signature set 202503011812952 available Mar 01 2025 03:48:50 server2 maldet(2643573): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 01 2025 03:49:12 server2 maldet(2643573): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 01 2025 03:49:36 server2 maldet(2643573): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 01 2025 03:49:36 server2 maldet(2643573): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 01 2025 03:49:59 server2 maldet(2643573): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 01 2025 03:50:26 server2 maldet(2643573): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 01 2025 03:50:26 server2 maldet(2643573): {sigup} verified md5sum of maldet-sigpack.tgz Mar 01 2025 03:50:26 server2 maldet(2643573): {sigup} unpacked and installed maldet-sigpack.tgz Mar 01 2025 03:50:26 server2 maldet(2643573): {sigup} verified md5sum of maldet-clean.tgz Mar 01 2025 03:50:26 server2 maldet(2643573): {sigup} unpacked and installed maldet-clean.tgz Mar 01 2025 03:50:26 server2 maldet(2643573): {sigup} signature set update completed Mar 01 2025 03:50:26 server2 maldet(2643573): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 01 2025 03:50:27 server2 maldet(2644192): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 01 2025 03:50:28 server2 maldet(2644192): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 01 2025 03:50:28 server2 maldet(2644192): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 01 2025 03:50:28 server2 maldet(2644192): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 01 2025 03:50:29 server2 maldet(2644192): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 01 2025 03:51:39 server2 maldet(2644192): {scan} file list completed in 70s, found 624 files... Mar 01 2025 03:51:39 server2 maldet(2644192): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 01 2025 03:51:39 server2 maldet(2644192): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (624 files) in progress... Mar 01 2025 03:52:24 server2 maldet(2644192): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 624, malware hits 0, cleaned hits 0, time 117s Mar 01 2025 03:52:24 server2 maldet(2644192): {scan} scan report saved, to view run: maldet --report 250301-0350.2644192 Mar 02 2025 03:40:48 server2 maldet(2855351): {update} checking for available updates... Mar 02 2025 03:40:48 server2 maldet(2855351): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 02 2025 03:40:48 server2 maldet(2855351): {update} hashing install files and checking against server... Mar 02 2025 03:40:48 server2 maldet(2855351): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 02 2025 03:40:48 server2 maldet(2855351): {update} latest version already installed. Mar 02 2025 03:40:48 server2 maldet(2855461): {sigup} performing signature update check... Mar 02 2025 03:40:48 server2 maldet(2855461): {sigup} local signature set is version 202503011812952 Mar 02 2025 03:40:48 server2 maldet(2855461): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 02 2025 03:40:48 server2 maldet(2855461): {sigup} latest signature set already installed Mar 02 2025 03:40:49 server2 maldet(2855549): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 02 2025 03:40:53 server2 maldet(2855549): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 02 2025 03:40:53 server2 maldet(2855549): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 02 2025 03:40:53 server2 maldet(2855549): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 02 2025 03:40:53 server2 maldet(2855549): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 02 2025 03:41:37 server2 maldet(2855549): {scan} file list completed in 44s, found 723 files... Mar 02 2025 03:41:37 server2 maldet(2855549): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 02 2025 03:41:37 server2 maldet(2855549): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (723 files) in progress... Mar 02 2025 03:42:12 server2 maldet(2855549): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 723, malware hits 0, cleaned hits 0, time 83s Mar 02 2025 03:42:12 server2 maldet(2855549): {scan} scan report saved, to view run: maldet --report 250302-0340.2855549 Mar 03 2025 03:22:47 server2 maldet(3060952): {update} checking for available updates... Mar 03 2025 03:22:48 server2 maldet(3060952): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 03 2025 03:22:48 server2 maldet(3060952): {update} hashing install files and checking against server... Mar 03 2025 03:22:48 server2 maldet(3060952): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 03 2025 03:22:48 server2 maldet(3060952): {update} latest version already installed. Mar 03 2025 03:22:48 server2 maldet(3061061): {sigup} performing signature update check... Mar 03 2025 03:22:48 server2 maldet(3061061): {sigup} local signature set is version 202503011812952 Mar 03 2025 03:22:48 server2 maldet(3061061): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 03 2025 03:22:48 server2 maldet(3061061): {sigup} latest signature set already installed Mar 03 2025 03:22:48 server2 maldet(3061151): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 03 2025 03:22:49 server2 maldet(3061151): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 03 2025 03:22:49 server2 maldet(3061151): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 03 2025 03:22:49 server2 maldet(3061151): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 03 2025 03:22:49 server2 maldet(3061151): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 03 2025 03:23:18 server2 maldet(3061151): {scan} file list completed in 29s, found 597 files... Mar 03 2025 03:23:18 server2 maldet(3061151): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 03 2025 03:23:18 server2 maldet(3061151): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (597 files) in progress... Mar 03 2025 03:23:41 server2 maldet(3061151): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 597, malware hits 0, cleaned hits 0, time 52s Mar 03 2025 03:23:41 server2 maldet(3061151): {scan} scan report saved, to view run: maldet --report 250303-0322.3061151 Mar 04 2025 03:28:21 server2 maldet(3279820): {update} checking for available updates... Mar 04 2025 03:28:21 server2 maldet(3279820): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 04 2025 03:28:21 server2 maldet(3279820): {update} hashing install files and checking against server... Mar 04 2025 03:28:21 server2 maldet(3279820): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 04 2025 03:28:21 server2 maldet(3279820): {update} latest version already installed. Mar 04 2025 03:28:21 server2 maldet(3279929): {sigup} performing signature update check... Mar 04 2025 03:28:21 server2 maldet(3279929): {sigup} local signature set is version 202503011812952 Mar 04 2025 03:28:21 server2 maldet(3279929): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 04 2025 03:28:21 server2 maldet(3279929): {sigup} latest signature set already installed Mar 04 2025 03:28:21 server2 maldet(3280019): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 04 2025 03:28:23 server2 maldet(3280019): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 04 2025 03:28:23 server2 maldet(3280019): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 04 2025 03:28:23 server2 maldet(3280019): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 04 2025 03:28:23 server2 maldet(3280019): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 04 2025 03:29:00 server2 maldet(3280019): {scan} file list completed in 37s, found 2925 files... Mar 04 2025 03:29:00 server2 maldet(3280019): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 04 2025 03:29:00 server2 maldet(3280019): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2925 files) in progress... Mar 04 2025 03:30:42 server2 maldet(3280019): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2925, malware hits 0, cleaned hits 0, time 141s Mar 04 2025 03:30:42 server2 maldet(3280019): {scan} scan report saved, to view run: maldet --report 250304-0328.3280019 Mar 05 2025 03:48:31 server2 maldet(3488124): {update} checking for available updates... Mar 05 2025 03:48:31 server2 maldet(3488124): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 05 2025 03:48:32 server2 maldet(3488124): {update} hashing install files and checking against server... Mar 05 2025 03:48:32 server2 maldet(3488124): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 05 2025 03:48:32 server2 maldet(3488124): {update} latest version already installed. Mar 05 2025 03:48:32 server2 maldet(3488233): {sigup} performing signature update check... Mar 05 2025 03:48:32 server2 maldet(3488233): {sigup} local signature set is version 202503011812952 Mar 05 2025 03:48:32 server2 maldet(3488233): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 05 2025 03:48:32 server2 maldet(3488233): {sigup} new signature set 20250304486819 available Mar 05 2025 03:48:32 server2 maldet(3488233): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 05 2025 03:48:32 server2 maldet(3488233): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 05 2025 03:48:32 server2 maldet(3488233): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 05 2025 03:48:32 server2 maldet(3488233): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 05 2025 03:48:33 server2 maldet(3488233): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 05 2025 03:48:33 server2 maldet(3488233): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 05 2025 03:48:33 server2 maldet(3488233): {sigup} verified md5sum of maldet-sigpack.tgz Mar 05 2025 03:48:33 server2 maldet(3488233): {sigup} unpacked and installed maldet-sigpack.tgz Mar 05 2025 03:48:33 server2 maldet(3488233): {sigup} verified md5sum of maldet-clean.tgz Mar 05 2025 03:48:33 server2 maldet(3488233): {sigup} unpacked and installed maldet-clean.tgz Mar 05 2025 03:48:33 server2 maldet(3488233): {sigup} signature set update completed Mar 05 2025 03:48:33 server2 maldet(3488233): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 05 2025 03:48:33 server2 maldet(3488435): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 05 2025 03:48:35 server2 maldet(3488435): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 05 2025 03:48:35 server2 maldet(3488435): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 05 2025 03:48:35 server2 maldet(3488435): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 05 2025 03:48:35 server2 maldet(3488435): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 05 2025 03:49:13 server2 maldet(3488435): {scan} file list completed in 38s, found 439 files... Mar 05 2025 03:49:13 server2 maldet(3488435): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 05 2025 03:49:13 server2 maldet(3488435): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (439 files) in progress... Mar 05 2025 03:50:28 server2 maldet(3488435): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 439, malware hits 0, cleaned hits 0, time 115s Mar 05 2025 03:50:28 server2 maldet(3488435): {scan} scan report saved, to view run: maldet --report 250305-0348.3488435 Mar 06 2025 03:22:02 server2 maldet(3696598): {update} checking for available updates... Mar 06 2025 03:22:02 server2 maldet(3696598): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 06 2025 03:22:02 server2 maldet(3696598): {update} hashing install files and checking against server... Mar 06 2025 03:22:15 server2 maldet(3696598): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 06 2025 03:22:15 server2 maldet(3696598): {update} latest version already installed. Mar 06 2025 03:22:15 server2 maldet(3696760): {sigup} performing signature update check... Mar 06 2025 03:22:15 server2 maldet(3696760): {sigup} local signature set is version 20250304486819 Mar 06 2025 03:22:27 server2 maldet(3696760): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 06 2025 03:22:27 server2 maldet(3696760): {sigup} latest signature set already installed Mar 06 2025 03:22:28 server2 maldet(3696855): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 06 2025 03:22:29 server2 maldet(3696855): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 06 2025 03:22:29 server2 maldet(3696855): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 06 2025 03:22:29 server2 maldet(3696855): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 06 2025 03:22:29 server2 maldet(3696855): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 06 2025 03:23:04 server2 maldet(3696855): {scan} file list completed in 35s, found 1510 files... Mar 06 2025 03:23:04 server2 maldet(3696855): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 06 2025 03:23:04 server2 maldet(3696855): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1510 files) in progress... Mar 06 2025 03:23:50 server2 maldet(3696855): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1510, malware hits 0, cleaned hits 0, time 82s Mar 06 2025 03:23:50 server2 maldet(3696855): {scan} scan report saved, to view run: maldet --report 250306-0322.3696855 Mar 07 2025 03:26:57 server2 maldet(3948177): {update} checking for available updates... Mar 07 2025 03:26:57 server2 maldet(3948177): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 07 2025 03:26:58 server2 maldet(3948177): {update} hashing install files and checking against server... Mar 07 2025 03:27:40 server2 maldet(3948177): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 07 2025 03:27:40 server2 maldet(3948177): {update} latest version already installed. Mar 07 2025 03:27:41 server2 maldet(3948372): {sigup} performing signature update check... Mar 07 2025 03:27:41 server2 maldet(3948372): {sigup} local signature set is version 20250304486819 Mar 07 2025 03:28:02 server2 maldet(3948372): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 07 2025 03:28:02 server2 maldet(3948372): {sigup} new signature set 202503071159774 available Mar 07 2025 03:28:02 server2 maldet(3948372): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 07 2025 03:28:21 server2 maldet(3948372): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 07 2025 03:28:51 server2 maldet(3948372): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 07 2025 03:28:51 server2 maldet(3948372): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 07 2025 03:29:39 server2 maldet(3948372): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 07 2025 03:30:06 server2 maldet(3948372): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 07 2025 03:30:06 server2 maldet(3948372): {sigup} verified md5sum of maldet-sigpack.tgz Mar 07 2025 03:30:07 server2 maldet(3948372): {sigup} unpacked and installed maldet-sigpack.tgz Mar 07 2025 03:30:07 server2 maldet(3948372): {sigup} verified md5sum of maldet-clean.tgz Mar 07 2025 03:30:07 server2 maldet(3948372): {sigup} unpacked and installed maldet-clean.tgz Mar 07 2025 03:30:07 server2 maldet(3948372): {sigup} signature set update completed Mar 07 2025 03:30:07 server2 maldet(3948372): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 07 2025 03:30:07 server2 maldet(3948854): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 07 2025 03:30:09 server2 maldet(3948854): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 07 2025 03:30:09 server2 maldet(3948854): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 07 2025 03:30:09 server2 maldet(3948854): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 07 2025 03:30:09 server2 maldet(3948854): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 07 2025 03:30:57 server2 maldet(3948854): {scan} file list completed in 47s, found 905 files... Mar 07 2025 03:30:57 server2 maldet(3948854): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 07 2025 03:30:57 server2 maldet(3948854): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (905 files) in progress... Mar 07 2025 03:31:57 server2 maldet(3948854): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 905, malware hits 0, cleaned hits 0, time 110s Mar 07 2025 03:31:57 server2 maldet(3948854): {scan} scan report saved, to view run: maldet --report 250307-0330.3948854 Mar 08 2025 03:36:14 server2 maldet(4151927): {update} checking for available updates... Mar 08 2025 03:36:14 server2 maldet(4151927): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 08 2025 03:36:14 server2 maldet(4151927): {update} hashing install files and checking against server... Mar 08 2025 03:36:14 server2 maldet(4151927): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 08 2025 03:36:14 server2 maldet(4151927): {update} latest version already installed. Mar 08 2025 03:36:14 server2 maldet(4152036): {sigup} performing signature update check... Mar 08 2025 03:36:14 server2 maldet(4152036): {sigup} local signature set is version 202503071159774 Mar 08 2025 03:36:15 server2 maldet(4152036): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 08 2025 03:36:15 server2 maldet(4152036): {sigup} latest signature set already installed Mar 08 2025 03:36:15 server2 maldet(4152124): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 08 2025 03:36:17 server2 maldet(4152124): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 08 2025 03:36:17 server2 maldet(4152124): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 08 2025 03:36:17 server2 maldet(4152124): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 08 2025 03:36:17 server2 maldet(4152124): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 08 2025 03:36:52 server2 maldet(4152124): {scan} file list completed in 35s, found 586 files... Mar 08 2025 03:36:52 server2 maldet(4152124): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 08 2025 03:36:52 server2 maldet(4152124): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (586 files) in progress... Mar 08 2025 03:37:22 server2 maldet(4152124): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 586, malware hits 0, cleaned hits 0, time 67s Mar 08 2025 03:37:22 server2 maldet(4152124): {scan} scan report saved, to view run: maldet --report 250308-0336.4152124 Mar 09 2025 03:38:36 server2 maldet(151180): {update} checking for available updates... Mar 09 2025 03:38:36 server2 maldet(151180): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 09 2025 03:38:36 server2 maldet(151180): {update} hashing install files and checking against server... Mar 09 2025 03:38:36 server2 maldet(151180): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 09 2025 03:38:36 server2 maldet(151180): {update} latest version already installed. Mar 09 2025 03:38:36 server2 maldet(151289): {sigup} performing signature update check... Mar 09 2025 03:38:36 server2 maldet(151289): {sigup} local signature set is version 202503071159774 Mar 09 2025 03:38:36 server2 maldet(151289): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 09 2025 03:38:36 server2 maldet(151289): {sigup} latest signature set already installed Mar 09 2025 03:38:37 server2 maldet(151377): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 09 2025 03:38:38 server2 maldet(151377): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 09 2025 03:38:38 server2 maldet(151377): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 09 2025 03:38:38 server2 maldet(151377): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 09 2025 03:38:38 server2 maldet(151377): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 09 2025 03:39:20 server2 maldet(151377): {scan} file list completed in 42s, found 1190 files... Mar 09 2025 03:39:20 server2 maldet(151377): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 09 2025 03:39:20 server2 maldet(151377): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1190 files) in progress... Mar 09 2025 03:40:55 server2 maldet(151377): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1190, malware hits 0, cleaned hits 0, time 138s Mar 09 2025 03:40:55 server2 maldet(151377): {scan} scan report saved, to view run: maldet --report 250309-0338.151377 Mar 10 2025 03:42:45 server2 maldet(367241): {update} checking for available updates... Mar 10 2025 03:42:46 server2 maldet(367241): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 10 2025 03:42:46 server2 maldet(367241): {update} hashing install files and checking against server... Mar 10 2025 03:42:46 server2 maldet(367241): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 10 2025 03:42:46 server2 maldet(367241): {update} latest version already installed. Mar 10 2025 03:42:46 server2 maldet(367350): {sigup} performing signature update check... Mar 10 2025 03:42:46 server2 maldet(367350): {sigup} local signature set is version 202503071159774 Mar 10 2025 03:42:46 server2 maldet(367350): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 10 2025 03:42:47 server2 maldet(367350): {sigup} latest signature set already installed Mar 10 2025 03:42:47 server2 maldet(367438): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 10 2025 03:42:49 server2 maldet(367438): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 10 2025 03:42:49 server2 maldet(367438): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 10 2025 03:42:49 server2 maldet(367438): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 10 2025 03:42:49 server2 maldet(367438): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 10 2025 03:43:29 server2 maldet(367438): {scan} file list completed in 40s, found 480 files... Mar 10 2025 03:43:29 server2 maldet(367438): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 10 2025 03:43:29 server2 maldet(367438): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (480 files) in progress... Mar 10 2025 03:43:50 server2 maldet(367438): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 480, malware hits 0, cleaned hits 0, time 63s Mar 10 2025 03:43:50 server2 maldet(367438): {scan} scan report saved, to view run: maldet --report 250310-0342.367438 Mar 11 2025 03:50:55 server2 maldet(571081): {update} checking for available updates... Mar 11 2025 03:50:55 server2 maldet(571081): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 11 2025 03:50:55 server2 maldet(571081): {update} hashing install files and checking against server... Mar 11 2025 03:50:55 server2 maldet(571081): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 11 2025 03:50:55 server2 maldet(571081): {update} latest version already installed. Mar 11 2025 03:50:55 server2 maldet(571190): {sigup} performing signature update check... Mar 11 2025 03:50:55 server2 maldet(571190): {sigup} local signature set is version 202503071159774 Mar 11 2025 03:50:56 server2 maldet(571190): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 11 2025 03:50:56 server2 maldet(571190): {sigup} latest signature set already installed Mar 11 2025 03:50:56 server2 maldet(571278): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 11 2025 03:50:57 server2 maldet(571278): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 11 2025 03:50:57 server2 maldet(571278): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 11 2025 03:50:57 server2 maldet(571278): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 11 2025 03:50:57 server2 maldet(571278): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 11 2025 03:51:32 server2 maldet(571278): {scan} file list completed in 35s, found 2066 files... Mar 11 2025 03:51:32 server2 maldet(571278): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 11 2025 03:51:32 server2 maldet(571278): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2066 files) in progress... Mar 11 2025 03:52:35 server2 maldet(571278): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2066, malware hits 0, cleaned hits 0, time 99s Mar 11 2025 03:52:35 server2 maldet(571278): {scan} scan report saved, to view run: maldet --report 250311-0350.571278 Mar 12 2025 03:47:19 server2 maldet(792778): {update} checking for available updates... Mar 12 2025 03:47:19 server2 maldet(792778): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 12 2025 03:47:19 server2 maldet(792778): {update} hashing install files and checking against server... Mar 12 2025 03:47:19 server2 maldet(792778): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 12 2025 03:47:19 server2 maldet(792778): {update} latest version already installed. Mar 12 2025 03:47:19 server2 maldet(792887): {sigup} performing signature update check... Mar 12 2025 03:47:19 server2 maldet(792887): {sigup} local signature set is version 202503071159774 Mar 12 2025 03:47:19 server2 maldet(792887): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 12 2025 03:47:19 server2 maldet(792887): {sigup} latest signature set already installed Mar 12 2025 03:47:20 server2 maldet(792975): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 12 2025 03:47:21 server2 maldet(792975): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 12 2025 03:47:21 server2 maldet(792975): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 12 2025 03:47:21 server2 maldet(792975): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 12 2025 03:47:21 server2 maldet(792975): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 12 2025 03:48:04 server2 maldet(792975): {scan} file list completed in 43s, found 753 files... Mar 12 2025 03:48:04 server2 maldet(792975): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 12 2025 03:48:04 server2 maldet(792975): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (753 files) in progress... Mar 12 2025 03:48:55 server2 maldet(792975): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 753, malware hits 0, cleaned hits 0, time 95s Mar 12 2025 03:48:55 server2 maldet(792975): {scan} scan report saved, to view run: maldet --report 250312-0347.792975 Mar 13 2025 03:18:14 server2 maldet(1001331): {update} checking for available updates... Mar 13 2025 03:20:15 server2 maldet(1001331): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 13 2025 03:20:15 server2 maldet(1001331): {update} hashing install files and checking against server... Mar 13 2025 03:20:15 server2 maldet(1001331): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 13 2025 03:20:15 server2 maldet(1001331): {update} latest version already installed. Mar 13 2025 03:20:15 server2 maldet(1001781): {sigup} performing signature update check... Mar 13 2025 03:20:15 server2 maldet(1001781): {sigup} local signature set is version 202503071159774 Mar 13 2025 03:21:27 server2 maldet(1001781): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 13 2025 03:21:27 server2 maldet(1001781): {sigup} new signature set 20250313525494 available Mar 13 2025 03:21:27 server2 maldet(1001781): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 13 2025 03:22:01 server2 maldet(1001781): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 13 2025 03:23:50 server2 maldet(1001781): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 13 2025 03:23:50 server2 maldet(1001781): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 13 2025 03:23:50 server2 maldet(1001781): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 13 2025 03:24:30 server2 maldet(1001781): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 13 2025 03:24:30 server2 maldet(1001781): {sigup} unable to verify md5sum of maldet-sigpack.tgz, please try again or contact [email protected] Mar 13 2025 03:24:30 server2 maldet(1001781): {sigup} unable to verify md5sum of maldet-clean.tgz, please try again or contact [email protected] Mar 13 2025 03:24:30 server2 maldet(1002278): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 13 2025 03:24:31 server2 maldet(1002278): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 13 2025 03:24:31 server2 maldet(1002278): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 13 2025 03:24:31 server2 maldet(1002278): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 13 2025 03:24:31 server2 maldet(1002278): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 13 2025 03:25:09 server2 maldet(1002278): {scan} file list completed in 38s, found 1478 files... Mar 13 2025 03:25:09 server2 maldet(1002278): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 13 2025 03:25:09 server2 maldet(1002278): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1478 files) in progress... Mar 13 2025 03:26:05 server2 maldet(1002278): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1478, malware hits 0, cleaned hits 0, time 95s Mar 13 2025 03:26:05 server2 maldet(1002278): {scan} scan report saved, to view run: maldet --report 250313-0324.1002278 Mar 14 2025 03:54:17 server2 maldet(1219359): {update} checking for available updates... Mar 14 2025 03:54:18 server2 maldet(1219359): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 14 2025 03:54:18 server2 maldet(1219359): {update} hashing install files and checking against server... Mar 14 2025 03:54:18 server2 maldet(1219359): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 14 2025 03:54:18 server2 maldet(1219359): {update} latest version already installed. Mar 14 2025 03:54:18 server2 maldet(1219468): {sigup} performing signature update check... Mar 14 2025 03:54:18 server2 maldet(1219468): {sigup} local signature set is version 202503071159774 Mar 14 2025 03:54:18 server2 maldet(1219468): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 14 2025 03:54:18 server2 maldet(1219468): {sigup} new signature set 20250313525494 available Mar 14 2025 03:54:18 server2 maldet(1219468): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 14 2025 03:54:18 server2 maldet(1219468): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 14 2025 03:54:18 server2 maldet(1219468): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 14 2025 03:54:18 server2 maldet(1219468): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 14 2025 03:54:18 server2 maldet(1219468): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 14 2025 03:54:19 server2 maldet(1219468): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 14 2025 03:54:19 server2 maldet(1219468): {sigup} verified md5sum of maldet-sigpack.tgz Mar 14 2025 03:54:19 server2 maldet(1219468): {sigup} unpacked and installed maldet-sigpack.tgz Mar 14 2025 03:54:19 server2 maldet(1219468): {sigup} verified md5sum of maldet-clean.tgz Mar 14 2025 03:54:19 server2 maldet(1219468): {sigup} unpacked and installed maldet-clean.tgz Mar 14 2025 03:54:19 server2 maldet(1219468): {sigup} signature set update completed Mar 14 2025 03:54:19 server2 maldet(1219468): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 14 2025 03:54:19 server2 maldet(1219670): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 14 2025 03:54:20 server2 maldet(1219670): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 14 2025 03:54:20 server2 maldet(1219670): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 14 2025 03:54:20 server2 maldet(1219670): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 14 2025 03:54:20 server2 maldet(1219670): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 14 2025 03:55:03 server2 maldet(1219670): {scan} file list completed in 43s, found 2809 files... Mar 14 2025 03:55:04 server2 maldet(1219670): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 14 2025 03:55:04 server2 maldet(1219670): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2809 files) in progress... Mar 14 2025 03:57:38 server2 maldet(1219670): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2809, malware hits 0, cleaned hits 0, time 199s Mar 14 2025 03:57:38 server2 maldet(1219670): {scan} scan report saved, to view run: maldet --report 250314-0354.1219670 Mar 15 2025 03:18:20 server2 maldet(1427332): {update} checking for available updates... Mar 15 2025 03:18:20 server2 maldet(1427332): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 15 2025 03:18:20 server2 maldet(1427332): {update} hashing install files and checking against server... Mar 15 2025 03:18:20 server2 maldet(1427332): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 15 2025 03:18:20 server2 maldet(1427332): {update} latest version already installed. Mar 15 2025 03:18:20 server2 maldet(1427443): {sigup} performing signature update check... Mar 15 2025 03:18:20 server2 maldet(1427443): {sigup} local signature set is version 20250313525494 Mar 15 2025 03:18:20 server2 maldet(1427443): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 15 2025 03:18:20 server2 maldet(1427443): {sigup} latest signature set already installed Mar 15 2025 03:18:20 server2 maldet(1427531): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 15 2025 03:18:21 server2 maldet(1427531): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 15 2025 03:18:21 server2 maldet(1427531): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 15 2025 03:18:21 server2 maldet(1427531): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 15 2025 03:18:21 server2 maldet(1427531): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 15 2025 03:18:49 server2 maldet(1427531): {scan} file list completed in 28s, found 633 files... Mar 15 2025 03:18:50 server2 maldet(1427531): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 15 2025 03:18:50 server2 maldet(1427531): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (633 files) in progress... Mar 15 2025 03:19:22 server2 maldet(1427531): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 633, malware hits 0, cleaned hits 0, time 62s Mar 15 2025 03:19:22 server2 maldet(1427531): {scan} scan report saved, to view run: maldet --report 250315-0318.1427531 Mar 16 2025 03:15:17 server2 maldet(1632862): {update} checking for available updates... Mar 16 2025 03:16:28 server2 maldet(1632862): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 16 2025 03:16:28 server2 maldet(1632862): {update} hashing install files and checking against server... Mar 16 2025 03:18:29 server2 maldet(1632862): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 16 2025 03:18:29 server2 maldet(1632862): {update} latest version already installed. Mar 16 2025 03:18:29 server2 maldet(1633319): {sigup} performing signature update check... Mar 16 2025 03:18:29 server2 maldet(1633319): {sigup} local signature set is version 20250313525494 Mar 16 2025 03:18:59 server2 maldet(1633319): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 16 2025 03:18:59 server2 maldet(1633319): {sigup} new signature set 20250316483998 available Mar 16 2025 03:18:59 server2 maldet(1633319): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 16 2025 03:19:34 server2 maldet(1633319): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 16 2025 03:21:29 server2 maldet(1633319): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 16 2025 03:21:29 server2 maldet(1633319): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 16 2025 03:21:56 server2 maldet(1633319): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 16 2025 03:24:01 server2 maldet(1633319): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 16 2025 03:24:01 server2 maldet(1633319): {sigup} verified md5sum of maldet-sigpack.tgz Mar 16 2025 03:24:02 server2 maldet(1633319): {sigup} unpacked and installed maldet-sigpack.tgz Mar 16 2025 03:24:02 server2 maldet(1633319): {sigup} verified md5sum of maldet-clean.tgz Mar 16 2025 03:24:02 server2 maldet(1633319): {sigup} unpacked and installed maldet-clean.tgz Mar 16 2025 03:24:02 server2 maldet(1633319): {sigup} signature set update completed Mar 16 2025 03:24:02 server2 maldet(1633319): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 16 2025 03:24:02 server2 maldet(1634188): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 16 2025 03:24:09 server2 maldet(1634188): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 16 2025 03:24:09 server2 maldet(1634188): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 16 2025 03:24:09 server2 maldet(1634188): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 16 2025 03:24:09 server2 maldet(1634188): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 16 2025 03:25:18 server2 maldet(1634188): {scan} file list completed in 69s, found 1321 files... Mar 16 2025 03:25:18 server2 maldet(1634188): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 16 2025 03:25:19 server2 maldet(1634188): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1321 files) in progress... Mar 16 2025 03:27:22 server2 maldet(1634188): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1321, malware hits 0, cleaned hits 0, time 200s Mar 16 2025 03:27:22 server2 maldet(1634188): {scan} scan report saved, to view run: maldet --report 250316-0324.1634188 Mar 17 2025 03:45:45 server2 maldet(1855878): {update} checking for available updates... Mar 17 2025 03:45:45 server2 maldet(1855878): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 17 2025 03:45:45 server2 maldet(1855878): {update} hashing install files and checking against server... Mar 17 2025 03:45:46 server2 maldet(1855878): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 17 2025 03:45:46 server2 maldet(1855878): {update} latest version already installed. Mar 17 2025 03:45:46 server2 maldet(1855987): {sigup} performing signature update check... Mar 17 2025 03:45:46 server2 maldet(1855987): {sigup} local signature set is version 20250316483998 Mar 17 2025 03:45:46 server2 maldet(1855987): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 17 2025 03:45:46 server2 maldet(1855987): {sigup} latest signature set already installed Mar 17 2025 03:45:46 server2 maldet(1856075): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 17 2025 03:45:48 server2 maldet(1856075): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 17 2025 03:45:48 server2 maldet(1856075): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 17 2025 03:45:48 server2 maldet(1856075): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 17 2025 03:45:48 server2 maldet(1856075): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 17 2025 03:46:30 server2 maldet(1856075): {scan} file list completed in 42s, found 692 files... Mar 17 2025 03:46:30 server2 maldet(1856075): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 17 2025 03:46:30 server2 maldet(1856075): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (692 files) in progress... Mar 17 2025 03:47:10 server2 maldet(1856075): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 692, malware hits 0, cleaned hits 0, time 84s Mar 17 2025 03:47:10 server2 maldet(1856075): {scan} scan report saved, to view run: maldet --report 250317-0345.1856075 Mar 18 2025 03:21:51 server2 maldet(2062563): {update} checking for available updates... Mar 18 2025 03:21:51 server2 maldet(2062563): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 18 2025 03:21:51 server2 maldet(2062563): {update} hashing install files and checking against server... Mar 18 2025 03:21:51 server2 maldet(2062563): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 18 2025 03:21:51 server2 maldet(2062563): {update} latest version already installed. Mar 18 2025 03:21:51 server2 maldet(2062672): {sigup} performing signature update check... Mar 18 2025 03:21:51 server2 maldet(2062672): {sigup} local signature set is version 20250316483998 Mar 18 2025 03:21:51 server2 maldet(2062672): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 18 2025 03:21:51 server2 maldet(2062672): {sigup} latest signature set already installed Mar 18 2025 03:21:51 server2 maldet(2062761): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 18 2025 03:21:53 server2 maldet(2062761): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 18 2025 03:21:53 server2 maldet(2062761): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 18 2025 03:21:53 server2 maldet(2062761): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 18 2025 03:21:53 server2 maldet(2062761): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 18 2025 03:22:30 server2 maldet(2062761): {scan} file list completed in 37s, found 3200 files... Mar 18 2025 03:22:30 server2 maldet(2062761): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 18 2025 03:22:30 server2 maldet(2062761): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (3200 files) in progress... Mar 18 2025 03:24:54 server2 maldet(2062761): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 3200, malware hits 0, cleaned hits 0, time 183s Mar 18 2025 03:24:54 server2 maldet(2062761): {scan} scan report saved, to view run: maldet --report 250318-0321.2062761 Mar 19 2025 03:31:58 server2 maldet(2280959): {update} checking for available updates... Mar 19 2025 03:32:22 server2 maldet(2280959): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 19 2025 03:32:22 server2 maldet(2280959): {update} hashing install files and checking against server... Mar 19 2025 03:32:45 server2 maldet(2280959): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 19 2025 03:32:45 server2 maldet(2280959): {update} latest version already installed. Mar 19 2025 03:32:45 server2 maldet(2281173): {sigup} performing signature update check... Mar 19 2025 03:32:45 server2 maldet(2281173): {sigup} local signature set is version 20250316483998 Mar 19 2025 03:32:45 server2 maldet(2281173): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 19 2025 03:32:45 server2 maldet(2281173): {sigup} new signature set 20250319514026 available Mar 19 2025 03:32:45 server2 maldet(2281173): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 19 2025 03:33:11 server2 maldet(2281173): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 19 2025 03:33:34 server2 maldet(2281173): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 19 2025 03:33:34 server2 maldet(2281173): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 19 2025 03:34:43 server2 maldet(2281173): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 19 2025 03:35:27 server2 maldet(2281173): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 19 2025 03:35:27 server2 maldet(2281173): {sigup} verified md5sum of maldet-sigpack.tgz Mar 19 2025 03:35:28 server2 maldet(2281173): {sigup} unpacked and installed maldet-sigpack.tgz Mar 19 2025 03:35:28 server2 maldet(2281173): {sigup} verified md5sum of maldet-clean.tgz Mar 19 2025 03:35:28 server2 maldet(2281173): {sigup} unpacked and installed maldet-clean.tgz Mar 19 2025 03:35:28 server2 maldet(2281173): {sigup} signature set update completed Mar 19 2025 03:35:28 server2 maldet(2281173): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 19 2025 03:35:28 server2 maldet(2281844): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 19 2025 03:35:30 server2 maldet(2281844): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 19 2025 03:35:30 server2 maldet(2281844): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 19 2025 03:35:30 server2 maldet(2281844): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 19 2025 03:35:30 server2 maldet(2281844): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 19 2025 03:36:22 server2 maldet(2281844): {scan} file list completed in 52s, found 629 files... Mar 19 2025 03:36:22 server2 maldet(2281844): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 19 2025 03:36:22 server2 maldet(2281844): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (629 files) in progress... Mar 19 2025 03:37:32 server2 maldet(2281844): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 629, malware hits 0, cleaned hits 0, time 124s Mar 19 2025 03:37:32 server2 maldet(2281844): {scan} scan report saved, to view run: maldet --report 250319-0335.2281844 Mar 20 2025 03:58:31 server2 maldet(2501586): {update} checking for available updates... Mar 20 2025 03:58:31 server2 maldet(2501586): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 20 2025 03:58:32 server2 maldet(2501586): {update} hashing install files and checking against server... Mar 20 2025 03:58:32 server2 maldet(2501586): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 20 2025 03:58:32 server2 maldet(2501586): {update} latest version already installed. Mar 20 2025 03:58:32 server2 maldet(2501696): {sigup} performing signature update check... Mar 20 2025 03:58:32 server2 maldet(2501696): {sigup} local signature set is version 20250319514026 Mar 20 2025 03:58:32 server2 maldet(2501696): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 20 2025 03:58:32 server2 maldet(2501696): {sigup} latest signature set already installed Mar 20 2025 03:58:32 server2 maldet(2501785): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 20 2025 03:58:34 server2 maldet(2501785): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 20 2025 03:58:34 server2 maldet(2501785): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 20 2025 03:58:34 server2 maldet(2501785): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 20 2025 03:58:34 server2 maldet(2501785): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 20 2025 03:59:18 server2 maldet(2501785): {scan} file list completed in 44s, found 859 files... Mar 20 2025 03:59:18 server2 maldet(2501785): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 20 2025 03:59:18 server2 maldet(2501785): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (859 files) in progress... Mar 20 2025 03:59:48 server2 maldet(2501785): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 859, malware hits 0, cleaned hits 0, time 76s Mar 20 2025 03:59:48 server2 maldet(2501785): {scan} scan report saved, to view run: maldet --report 250320-0358.2501785 Mar 21 2025 03:39:03 server2 maldet(2724801): {update} checking for available updates... Mar 21 2025 03:39:03 server2 maldet(2724801): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 21 2025 03:39:03 server2 maldet(2724801): {update} hashing install files and checking against server... Mar 21 2025 03:39:03 server2 maldet(2724801): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 21 2025 03:39:03 server2 maldet(2724801): {update} latest version already installed. Mar 21 2025 03:39:03 server2 maldet(2724916): {sigup} performing signature update check... Mar 21 2025 03:39:03 server2 maldet(2724916): {sigup} local signature set is version 20250319514026 Mar 21 2025 03:39:04 server2 maldet(2724916): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 21 2025 03:39:04 server2 maldet(2724916): {sigup} latest signature set already installed Mar 21 2025 03:39:04 server2 maldet(2725004): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 21 2025 03:39:05 server2 maldet(2725004): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 21 2025 03:39:05 server2 maldet(2725004): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 21 2025 03:39:05 server2 maldet(2725004): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 21 2025 03:39:05 server2 maldet(2725004): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 21 2025 03:39:40 server2 maldet(2725004): {scan} file list completed in 35s, found 614 files... Mar 21 2025 03:39:40 server2 maldet(2725004): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 21 2025 03:39:40 server2 maldet(2725004): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (614 files) in progress... Mar 21 2025 03:40:11 server2 maldet(2725004): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 614, malware hits 0, cleaned hits 0, time 67s Mar 21 2025 03:40:11 server2 maldet(2725004): {scan} scan report saved, to view run: maldet --report 250321-0339.2725004 Mar 22 2025 03:47:10 server2 maldet(2932424): {update} checking for available updates... Mar 22 2025 03:47:23 server2 maldet(2932424): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 22 2025 03:47:23 server2 maldet(2932424): {update} hashing install files and checking against server... Mar 22 2025 03:47:37 server2 maldet(2932424): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 22 2025 03:47:37 server2 maldet(2932424): {update} latest version already installed. Mar 22 2025 03:47:37 server2 maldet(2932582): {sigup} performing signature update check... Mar 22 2025 03:47:37 server2 maldet(2932582): {sigup} local signature set is version 20250319514026 Mar 22 2025 03:47:52 server2 maldet(2932582): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 22 2025 03:47:52 server2 maldet(2932582): {sigup} new signature set 202503221188379 available Mar 22 2025 03:47:52 server2 maldet(2932582): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 22 2025 03:48:07 server2 maldet(2932582): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 22 2025 03:48:24 server2 maldet(2932582): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 22 2025 03:48:24 server2 maldet(2932582): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 22 2025 03:48:40 server2 maldet(2932582): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 22 2025 03:48:54 server2 maldet(2932582): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 22 2025 03:48:54 server2 maldet(2932582): {sigup} verified md5sum of maldet-sigpack.tgz Mar 22 2025 03:48:54 server2 maldet(2932582): {sigup} unpacked and installed maldet-sigpack.tgz Mar 22 2025 03:48:54 server2 maldet(2932582): {sigup} verified md5sum of maldet-clean.tgz Mar 22 2025 03:48:55 server2 maldet(2932582): {sigup} unpacked and installed maldet-clean.tgz Mar 22 2025 03:48:55 server2 maldet(2932582): {sigup} signature set update completed Mar 22 2025 03:48:55 server2 maldet(2932582): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 22 2025 03:48:55 server2 maldet(2933042): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 22 2025 03:48:56 server2 maldet(2933042): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 22 2025 03:48:56 server2 maldet(2933042): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 22 2025 03:48:56 server2 maldet(2933042): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 22 2025 03:48:56 server2 maldet(2933042): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 22 2025 03:49:37 server2 maldet(2933042): {scan} file list completed in 41s, found 577 files... Mar 22 2025 03:49:37 server2 maldet(2933042): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 22 2025 03:49:37 server2 maldet(2933042): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (577 files) in progress... Mar 22 2025 03:50:37 server2 maldet(2933042): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 577, malware hits 0, cleaned hits 0, time 102s Mar 22 2025 03:50:37 server2 maldet(2933042): {scan} scan report saved, to view run: maldet --report 250322-0348.2933042 Mar 23 2025 03:42:53 server2 maldet(3160861): {update} checking for available updates... Mar 23 2025 03:42:53 server2 maldet(3160861): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 23 2025 03:42:53 server2 maldet(3160861): {update} hashing install files and checking against server... Mar 23 2025 03:42:54 server2 maldet(3160861): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 23 2025 03:42:54 server2 maldet(3160861): {update} latest version already installed. Mar 23 2025 03:42:54 server2 maldet(3160971): {sigup} performing signature update check... Mar 23 2025 03:42:54 server2 maldet(3160971): {sigup} local signature set is version 202503221188379 Mar 23 2025 03:42:54 server2 maldet(3160971): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 23 2025 03:42:54 server2 maldet(3160971): {sigup} latest signature set already installed Mar 23 2025 03:42:54 server2 maldet(3161059): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 23 2025 03:42:57 server2 maldet(3161059): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 23 2025 03:42:57 server2 maldet(3161059): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 23 2025 03:42:57 server2 maldet(3161059): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 23 2025 03:42:57 server2 maldet(3161059): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 23 2025 03:43:36 server2 maldet(3161059): {scan} file list completed in 39s, found 728 files... Mar 23 2025 03:43:36 server2 maldet(3161059): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 23 2025 03:43:36 server2 maldet(3161059): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (728 files) in progress... Mar 23 2025 03:44:13 server2 maldet(3161059): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 728, malware hits 0, cleaned hits 0, time 79s Mar 23 2025 03:44:13 server2 maldet(3161059): {scan} scan report saved, to view run: maldet --report 250323-0342.3161059 Mar 24 2025 03:28:07 server2 maldet(3377450): {update} checking for available updates... Mar 24 2025 03:28:07 server2 maldet(3377450): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 24 2025 03:28:07 server2 maldet(3377450): {update} hashing install files and checking against server... Mar 24 2025 03:28:07 server2 maldet(3377450): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 24 2025 03:28:07 server2 maldet(3377450): {update} latest version already installed. Mar 24 2025 03:28:07 server2 maldet(3377559): {sigup} performing signature update check... Mar 24 2025 03:28:07 server2 maldet(3377559): {sigup} local signature set is version 202503221188379 Mar 24 2025 03:28:07 server2 maldet(3377559): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 24 2025 03:28:07 server2 maldet(3377559): {sigup} latest signature set already installed Mar 24 2025 03:28:08 server2 maldet(3377647): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 24 2025 03:28:10 server2 maldet(3377647): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 24 2025 03:28:10 server2 maldet(3377647): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 24 2025 03:28:10 server2 maldet(3377647): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 24 2025 03:28:10 server2 maldet(3377647): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 24 2025 03:28:43 server2 maldet(3377647): {scan} file list completed in 33s, found 2465 files... Mar 24 2025 03:28:43 server2 maldet(3377647): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 24 2025 03:28:43 server2 maldet(3377647): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2465 files) in progress... Mar 24 2025 03:30:25 server2 maldet(3377647): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2465, malware hits 0, cleaned hits 0, time 137s Mar 24 2025 03:30:25 server2 maldet(3377647): {scan} scan report saved, to view run: maldet --report 250324-0328.3377647 Mar 25 2025 03:34:11 server2 maldet(3594446): {update} checking for available updates... Mar 25 2025 03:34:38 server2 maldet(3594446): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 25 2025 03:34:38 server2 maldet(3594446): {update} hashing install files and checking against server... Mar 25 2025 03:35:11 server2 maldet(3594446): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 25 2025 03:35:11 server2 maldet(3594446): {update} latest version already installed. Mar 25 2025 03:35:12 server2 maldet(3594851): {sigup} performing signature update check... Mar 25 2025 03:35:12 server2 maldet(3594851): {sigup} local signature set is version 202503221188379 Mar 25 2025 03:35:36 server2 maldet(3594851): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 25 2025 03:35:36 server2 maldet(3594851): {sigup} new signature set 202503251862979 available Mar 25 2025 03:35:36 server2 maldet(3594851): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 25 2025 03:36:03 server2 maldet(3594851): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 25 2025 03:36:55 server2 maldet(3594851): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 25 2025 03:36:55 server2 maldet(3594851): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 25 2025 03:37:20 server2 maldet(3594851): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 25 2025 03:37:50 server2 maldet(3594851): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 25 2025 03:37:50 server2 maldet(3594851): {sigup} verified md5sum of maldet-sigpack.tgz Mar 25 2025 03:37:51 server2 maldet(3594851): {sigup} unpacked and installed maldet-sigpack.tgz Mar 25 2025 03:37:51 server2 maldet(3594851): {sigup} verified md5sum of maldet-clean.tgz Mar 25 2025 03:37:51 server2 maldet(3594851): {sigup} unpacked and installed maldet-clean.tgz Mar 25 2025 03:37:51 server2 maldet(3594851): {sigup} signature set update completed Mar 25 2025 03:37:51 server2 maldet(3594851): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 25 2025 03:37:51 server2 maldet(3595366): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 25 2025 03:37:53 server2 maldet(3595366): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 25 2025 03:37:53 server2 maldet(3595366): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 25 2025 03:37:53 server2 maldet(3595366): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 25 2025 03:37:53 server2 maldet(3595366): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 25 2025 03:38:53 server2 maldet(3595366): {scan} file list completed in 60s, found 3831 files... Mar 25 2025 03:38:53 server2 maldet(3595366): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 25 2025 03:38:53 server2 maldet(3595366): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (3831 files) in progress... Mar 25 2025 03:42:54 server2 maldet(3595366): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Mar 25 2025 03:42:54 server2 maldet(3595366): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 3831, malware hits 0, cleaned hits 0, time 303s Mar 25 2025 03:42:54 server2 maldet(3595366): {scan} scan report saved, to view run: maldet --report 250325-0337.3595366 Mar 26 2025 03:46:10 server2 maldet(3815427): {update} checking for available updates... Mar 26 2025 03:46:11 server2 maldet(3815427): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 26 2025 03:46:11 server2 maldet(3815427): {update} hashing install files and checking against server... Mar 26 2025 03:46:11 server2 maldet(3815427): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 26 2025 03:46:11 server2 maldet(3815427): {update} latest version already installed. Mar 26 2025 03:46:11 server2 maldet(3815536): {sigup} performing signature update check... Mar 26 2025 03:46:11 server2 maldet(3815536): {sigup} local signature set is version 202503251862979 Mar 26 2025 03:46:11 server2 maldet(3815536): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 26 2025 03:46:11 server2 maldet(3815536): {sigup} latest signature set already installed Mar 26 2025 03:46:11 server2 maldet(3815624): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 26 2025 03:46:13 server2 maldet(3815624): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 26 2025 03:46:13 server2 maldet(3815624): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 26 2025 03:46:13 server2 maldet(3815624): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 26 2025 03:46:13 server2 maldet(3815624): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 26 2025 03:46:59 server2 maldet(3815624): {scan} file list completed in 46s, found 1131 files... Mar 26 2025 03:46:59 server2 maldet(3815624): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 26 2025 03:46:59 server2 maldet(3815624): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1131 files) in progress... Mar 26 2025 03:48:18 server2 maldet(3815624): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1131, malware hits 0, cleaned hits 0, time 127s Mar 26 2025 03:48:18 server2 maldet(3815624): {scan} scan report saved, to view run: maldet --report 250326-0346.3815624 Mar 27 2025 03:48:05 server2 maldet(4055562): {update} checking for available updates... Mar 27 2025 03:48:05 server2 maldet(4055562): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 27 2025 03:48:05 server2 maldet(4055562): {update} hashing install files and checking against server... Mar 27 2025 03:48:06 server2 maldet(4055562): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 27 2025 03:48:06 server2 maldet(4055562): {update} latest version already installed. Mar 27 2025 03:48:06 server2 maldet(4055687): {sigup} performing signature update check... Mar 27 2025 03:48:06 server2 maldet(4055687): {sigup} local signature set is version 202503251862979 Mar 27 2025 03:48:06 server2 maldet(4055687): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 27 2025 03:48:06 server2 maldet(4055687): {sigup} latest signature set already installed Mar 27 2025 03:48:06 server2 maldet(4055778): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 27 2025 03:48:08 server2 maldet(4055778): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 27 2025 03:48:08 server2 maldet(4055778): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 27 2025 03:48:08 server2 maldet(4055778): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 27 2025 03:48:08 server2 maldet(4055778): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 27 2025 03:48:41 server2 maldet(4055778): {scan} file list completed in 33s, found 3846 files... Mar 27 2025 03:48:41 server2 maldet(4055778): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 27 2025 03:48:41 server2 maldet(4055778): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (3846 files) in progress... Mar 27 2025 03:51:07 server2 maldet(4055778): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 3846, malware hits 0, cleaned hits 0, time 181s Mar 27 2025 03:51:07 server2 maldet(4055778): {scan} scan report saved, to view run: maldet --report 250327-0348.4055778 Mar 28 2025 03:20:48 server2 maldet(68654): {update} checking for available updates... Mar 28 2025 03:20:48 server2 maldet(68654): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 28 2025 03:20:49 server2 maldet(68654): {update} hashing install files and checking against server... Mar 28 2025 03:21:18 server2 maldet(68654): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 28 2025 03:21:18 server2 maldet(68654): {update} latest version already installed. Mar 28 2025 03:21:18 server2 maldet(68802): {sigup} performing signature update check... Mar 28 2025 03:21:18 server2 maldet(68802): {sigup} local signature set is version 202503251862979 Mar 28 2025 03:21:41 server2 maldet(68802): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 28 2025 03:21:41 server2 maldet(68802): {sigup} new signature set 202503282537907 available Mar 28 2025 03:21:41 server2 maldet(68802): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 28 2025 03:22:05 server2 maldet(68802): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 28 2025 03:22:30 server2 maldet(68802): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 28 2025 03:22:30 server2 maldet(68802): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 28 2025 03:22:55 server2 maldet(68802): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 28 2025 03:23:40 server2 maldet(68802): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 28 2025 03:23:40 server2 maldet(68802): {sigup} verified md5sum of maldet-sigpack.tgz Mar 28 2025 03:23:40 server2 maldet(68802): {sigup} unpacked and installed maldet-sigpack.tgz Mar 28 2025 03:23:40 server2 maldet(68802): {sigup} verified md5sum of maldet-clean.tgz Mar 28 2025 03:23:40 server2 maldet(68802): {sigup} unpacked and installed maldet-clean.tgz Mar 28 2025 03:23:40 server2 maldet(68802): {sigup} signature set update completed Mar 28 2025 03:23:40 server2 maldet(68802): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 28 2025 03:23:40 server2 maldet(69241): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 28 2025 03:23:42 server2 maldet(69241): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 28 2025 03:23:42 server2 maldet(69241): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 28 2025 03:23:42 server2 maldet(69241): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 28 2025 03:23:42 server2 maldet(69241): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 28 2025 03:24:33 server2 maldet(69241): {scan} file list completed in 51s, found 1652 files... Mar 28 2025 03:24:33 server2 maldet(69241): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 28 2025 03:24:33 server2 maldet(69241): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1652 files) in progress... Mar 28 2025 03:26:06 server2 maldet(69241): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1652, malware hits 0, cleaned hits 0, time 146s Mar 28 2025 03:26:06 server2 maldet(69241): {scan} scan report saved, to view run: maldet --report 250328-0323.69241 Mar 29 2025 03:36:13 server2 maldet(277898): {update} checking for available updates... Mar 29 2025 03:36:47 server2 maldet(277898): {update} could not download https://cdn.rfxn.com/downloads/maldet.current.ver, please try again later. Mar 29 2025 03:36:47 server2 maldet(277898): {update} could not download version file from server, please try again later. Mar 29 2025 03:36:47 server2 maldet(278027): {sigup} performing signature update check... Mar 29 2025 03:36:47 server2 maldet(278027): {sigup} local signature set is version 202503282537907 Mar 29 2025 03:37:21 server2 maldet(278027): {sigup} could not download https://cdn.rfxn.com/downloads/maldet.sigs.ver, please try again later. Mar 29 2025 03:37:22 server2 maldet(278027): {sigup} could not download signature data from server, please try again later. Mar 29 2025 03:37:22 server2 maldet(278213): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 29 2025 03:37:23 server2 maldet(278213): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 29 2025 03:37:23 server2 maldet(278213): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 29 2025 03:37:23 server2 maldet(278213): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 29 2025 03:37:23 server2 maldet(278213): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 29 2025 03:37:59 server2 maldet(278213): {scan} file list completed in 36s, found 945 files... Mar 29 2025 03:37:59 server2 maldet(278213): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 29 2025 03:37:59 server2 maldet(278213): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (945 files) in progress... Mar 29 2025 03:38:58 server2 maldet(278213): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 945, malware hits 0, cleaned hits 0, time 96s Mar 29 2025 03:38:58 server2 maldet(278213): {scan} scan report saved, to view run: maldet --report 250329-0337.278213 Mar 30 2025 03:14:27 server2 maldet(485427): {update} checking for available updates... Mar 30 2025 03:14:27 server2 maldet(485427): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 30 2025 03:14:27 server2 maldet(485427): {update} hashing install files and checking against server... Mar 30 2025 03:14:27 server2 maldet(485427): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 30 2025 03:14:27 server2 maldet(485427): {update} latest version already installed. Mar 30 2025 03:14:27 server2 maldet(485536): {sigup} performing signature update check... Mar 30 2025 03:14:27 server2 maldet(485536): {sigup} local signature set is version 202503282537907 Mar 30 2025 03:14:27 server2 maldet(485536): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 30 2025 03:14:27 server2 maldet(485536): {sigup} latest signature set already installed Mar 30 2025 03:14:28 server2 maldet(485624): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 30 2025 03:14:31 server2 maldet(485624): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 30 2025 03:14:31 server2 maldet(485624): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 30 2025 03:14:31 server2 maldet(485624): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 30 2025 03:14:31 server2 maldet(485624): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 30 2025 03:15:09 server2 maldet(485624): {scan} file list completed in 38s, found 756 files... Mar 30 2025 03:15:09 server2 maldet(485624): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 30 2025 03:15:09 server2 maldet(485624): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (756 files) in progress... Mar 30 2025 03:16:06 server2 maldet(485624): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 756, malware hits 0, cleaned hits 0, time 98s Mar 30 2025 03:16:06 server2 maldet(485624): {scan} scan report saved, to view run: maldet --report 250330-0314.485624 Mar 31 2025 03:27:27 server2 maldet(740624): {update} checking for available updates... Mar 31 2025 03:28:16 server2 maldet(740624): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 31 2025 03:28:16 server2 maldet(740624): {update} hashing install files and checking against server... Mar 31 2025 03:28:46 server2 maldet(740624): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 31 2025 03:28:46 server2 maldet(740624): {update} latest version already installed. Mar 31 2025 03:28:46 server2 maldet(740853): {sigup} performing signature update check... Mar 31 2025 03:28:46 server2 maldet(740853): {sigup} local signature set is version 202503282537907 Mar 31 2025 03:29:19 server2 maldet(740853): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 31 2025 03:29:19 server2 maldet(740853): {sigup} new signature set 202503313275323 available Mar 31 2025 03:29:19 server2 maldet(740853): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 31 2025 03:29:19 server2 maldet(740853): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 31 2025 03:29:42 server2 maldet(740853): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 31 2025 03:29:42 server2 maldet(740853): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 31 2025 03:29:42 server2 maldet(740853): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 31 2025 03:30:08 server2 maldet(740853): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 31 2025 03:30:08 server2 maldet(740853): {sigup} verified md5sum of maldet-sigpack.tgz Mar 31 2025 03:30:08 server2 maldet(740853): {sigup} unpacked and installed maldet-sigpack.tgz Mar 31 2025 03:30:08 server2 maldet(740853): {sigup} verified md5sum of maldet-clean.tgz Mar 31 2025 03:30:08 server2 maldet(740853): {sigup} unpacked and installed maldet-clean.tgz Mar 31 2025 03:30:08 server2 maldet(740853): {sigup} signature set update completed Mar 31 2025 03:30:09 server2 maldet(740853): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 31 2025 03:30:09 server2 maldet(741354): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 31 2025 03:30:11 server2 maldet(741354): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 31 2025 03:30:11 server2 maldet(741354): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 31 2025 03:30:11 server2 maldet(741354): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 31 2025 03:30:11 server2 maldet(741354): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 31 2025 03:31:02 server2 maldet(741354): {scan} file list completed in 51s, found 2448 files... Mar 31 2025 03:31:02 server2 maldet(741354): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 31 2025 03:31:02 server2 maldet(741354): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2448 files) in progress... Mar 31 2025 03:32:55 server2 maldet(741354): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2448, malware hits 0, cleaned hits 0, time 165s Mar 31 2025 03:32:55 server2 maldet(741354): {scan} scan report saved, to view run: maldet --report 250331-0330.741354 Apr 01 2025 03:29:27 server2 maldet(948789): {update} checking for available updates... Apr 01 2025 03:29:47 server2 maldet(948789): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 01 2025 03:29:47 server2 maldet(948789): {update} hashing install files and checking against server... Apr 01 2025 03:30:09 server2 maldet(948789): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 01 2025 03:30:09 server2 maldet(948789): {update} latest version already installed. Apr 01 2025 03:30:09 server2 maldet(949044): {sigup} performing signature update check... Apr 01 2025 03:30:09 server2 maldet(949044): {sigup} local signature set is version 202503313275323 Apr 01 2025 03:30:10 server2 maldet(949044): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 01 2025 03:30:10 server2 maldet(949044): {sigup} new signature set 202504013916532 available Apr 01 2025 03:30:10 server2 maldet(949044): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 01 2025 03:30:39 server2 maldet(949044): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 01 2025 03:31:33 server2 maldet(949044): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 01 2025 03:31:33 server2 maldet(949044): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 01 2025 03:32:03 server2 maldet(949044): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 01 2025 03:32:29 server2 maldet(949044): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 01 2025 03:32:29 server2 maldet(949044): {sigup} verified md5sum of maldet-sigpack.tgz Apr 01 2025 03:32:29 server2 maldet(949044): {sigup} unpacked and installed maldet-sigpack.tgz Apr 01 2025 03:32:29 server2 maldet(949044): {sigup} verified md5sum of maldet-clean.tgz Apr 01 2025 03:32:29 server2 maldet(949044): {sigup} unpacked and installed maldet-clean.tgz Apr 01 2025 03:32:29 server2 maldet(949044): {sigup} signature set update completed Apr 01 2025 03:32:29 server2 maldet(949044): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 01 2025 03:32:29 server2 maldet(949426): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 01 2025 03:32:30 server2 maldet(949426): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 01 2025 03:32:30 server2 maldet(949426): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 01 2025 03:32:30 server2 maldet(949426): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 01 2025 03:32:30 server2 maldet(949426): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 01 2025 03:33:25 server2 maldet(949426): {scan} file list completed in 55s, found 553 files... Apr 01 2025 03:33:25 server2 maldet(949426): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 01 2025 03:33:25 server2 maldet(949426): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (553 files) in progress... Apr 01 2025 03:34:21 server2 maldet(949426): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 553, malware hits 0, cleaned hits 0, time 112s Apr 01 2025 03:34:21 server2 maldet(949426): {scan} scan report saved, to view run: maldet --report 250401-0332.949426 Apr 02 2025 03:46:27 server2 maldet(1156851): {update} checking for available updates... Apr 02 2025 03:46:27 server2 maldet(1156851): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 02 2025 03:46:27 server2 maldet(1156851): {update} hashing install files and checking against server... Apr 02 2025 03:46:27 server2 maldet(1156851): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 02 2025 03:46:27 server2 maldet(1156851): {update} latest version already installed. Apr 02 2025 03:46:27 server2 maldet(1156960): {sigup} performing signature update check... Apr 02 2025 03:46:27 server2 maldet(1156960): {sigup} local signature set is version 202504013916532 Apr 02 2025 03:46:27 server2 maldet(1156960): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 02 2025 03:46:27 server2 maldet(1156960): {sigup} latest signature set already installed Apr 02 2025 03:46:27 server2 maldet(1157048): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 02 2025 03:46:31 server2 maldet(1157048): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 02 2025 03:46:31 server2 maldet(1157048): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 02 2025 03:46:31 server2 maldet(1157048): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 02 2025 03:46:31 server2 maldet(1157048): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 02 2025 03:47:26 server2 maldet(1157048): {scan} file list completed in 55s, found 2572 files... Apr 02 2025 03:47:26 server2 maldet(1157048): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 02 2025 03:47:26 server2 maldet(1157048): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2572 files) in progress... Apr 02 2025 03:49:50 server2 maldet(1157048): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2572, malware hits 0, cleaned hits 0, time 203s Apr 02 2025 03:49:50 server2 maldet(1157048): {scan} scan report saved, to view run: maldet --report 250402-0346.1157048 Apr 03 2025 03:34:14 server2 maldet(1383606): {update} checking for available updates... Apr 03 2025 03:34:14 server2 maldet(1383606): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 03 2025 03:34:14 server2 maldet(1383606): {update} hashing install files and checking against server... Apr 03 2025 03:34:14 server2 maldet(1383606): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 03 2025 03:34:14 server2 maldet(1383606): {update} latest version already installed. Apr 03 2025 03:34:15 server2 maldet(1383715): {sigup} performing signature update check... Apr 03 2025 03:34:15 server2 maldet(1383715): {sigup} local signature set is version 202504013916532 Apr 03 2025 03:34:15 server2 maldet(1383715): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 03 2025 03:34:15 server2 maldet(1383715): {sigup} latest signature set already installed Apr 03 2025 03:34:15 server2 maldet(1383803): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 03 2025 03:34:16 server2 maldet(1383803): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 03 2025 03:34:16 server2 maldet(1383803): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 03 2025 03:34:16 server2 maldet(1383803): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 03 2025 03:34:16 server2 maldet(1383803): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 03 2025 03:34:56 server2 maldet(1383803): {scan} file list completed in 40s, found 937 files... Apr 03 2025 03:34:56 server2 maldet(1383803): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 03 2025 03:34:56 server2 maldet(1383803): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (937 files) in progress... Apr 03 2025 03:36:00 server2 maldet(1383803): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 937, malware hits 0, cleaned hits 0, time 105s Apr 03 2025 03:36:00 server2 maldet(1383803): {scan} scan report saved, to view run: maldet --report 250403-0334.1383803 Apr 04 2025 03:25:31 server2 maldet(1603524): {update} checking for available updates... Apr 04 2025 03:25:59 server2 maldet(1603524): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 04 2025 03:25:59 server2 maldet(1603524): {update} hashing install files and checking against server... Apr 04 2025 03:26:20 server2 maldet(1603524): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 04 2025 03:26:20 server2 maldet(1603524): {update} latest version already installed. Apr 04 2025 03:26:20 server2 maldet(1603716): {sigup} performing signature update check... Apr 04 2025 03:26:20 server2 maldet(1603716): {sigup} local signature set is version 202504013916532 Apr 04 2025 03:26:44 server2 maldet(1603716): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 04 2025 03:26:44 server2 maldet(1603716): {sigup} new signature set 20250404517655 available Apr 04 2025 03:26:44 server2 maldet(1603716): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 04 2025 03:27:15 server2 maldet(1603716): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 04 2025 03:27:37 server2 maldet(1603716): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 04 2025 03:27:37 server2 maldet(1603716): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 04 2025 03:28:01 server2 maldet(1603716): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 04 2025 03:28:43 server2 maldet(1603716): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 04 2025 03:28:43 server2 maldet(1603716): {sigup} verified md5sum of maldet-sigpack.tgz Apr 04 2025 03:28:43 server2 maldet(1603716): {sigup} unpacked and installed maldet-sigpack.tgz Apr 04 2025 03:28:44 server2 maldet(1603716): {sigup} verified md5sum of maldet-clean.tgz Apr 04 2025 03:28:44 server2 maldet(1603716): {sigup} unpacked and installed maldet-clean.tgz Apr 04 2025 03:28:44 server2 maldet(1603716): {sigup} signature set update completed Apr 04 2025 03:28:44 server2 maldet(1603716): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 04 2025 03:28:44 server2 maldet(1604251): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 04 2025 03:28:45 server2 maldet(1604251): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 04 2025 03:28:45 server2 maldet(1604251): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 04 2025 03:28:45 server2 maldet(1604251): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 04 2025 03:28:45 server2 maldet(1604251): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 04 2025 03:29:35 server2 maldet(1604251): {scan} file list completed in 50s, found 786 files... Apr 04 2025 03:29:35 server2 maldet(1604251): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 04 2025 03:29:35 server2 maldet(1604251): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (786 files) in progress... Apr 04 2025 03:30:40 server2 maldet(1604251): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 786, malware hits 0, cleaned hits 0, time 116s Apr 04 2025 03:30:40 server2 maldet(1604251): {scan} scan report saved, to view run: maldet --report 250404-0328.1604251 Apr 05 2025 03:22:25 server2 maldet(1813332): {update} checking for available updates... Apr 05 2025 03:22:26 server2 maldet(1813332): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 05 2025 03:22:26 server2 maldet(1813332): {update} hashing install files and checking against server... Apr 05 2025 03:22:26 server2 maldet(1813332): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 05 2025 03:22:26 server2 maldet(1813332): {update} latest version already installed. Apr 05 2025 03:22:26 server2 maldet(1813441): {sigup} performing signature update check... Apr 05 2025 03:22:26 server2 maldet(1813441): {sigup} local signature set is version 20250404517655 Apr 05 2025 03:22:26 server2 maldet(1813441): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 05 2025 03:22:26 server2 maldet(1813441): {sigup} latest signature set already installed Apr 05 2025 03:22:26 server2 maldet(1813529): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 05 2025 03:22:27 server2 maldet(1813529): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 05 2025 03:22:27 server2 maldet(1813529): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 05 2025 03:22:27 server2 maldet(1813529): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 05 2025 03:22:27 server2 maldet(1813529): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 05 2025 03:23:08 server2 maldet(1813529): {scan} file list completed in 41s, found 963 files... Apr 05 2025 03:23:08 server2 maldet(1813529): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 05 2025 03:23:08 server2 maldet(1813529): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (963 files) in progress... Apr 05 2025 03:24:06 server2 maldet(1813529): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 963, malware hits 0, cleaned hits 0, time 100s Apr 05 2025 03:24:06 server2 maldet(1813529): {scan} scan report saved, to view run: maldet --report 250405-0322.1813529 Apr 06 2025 03:47:03 server2 maldet(2018454): {update} checking for available updates... Apr 06 2025 03:47:04 server2 maldet(2018454): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 06 2025 03:47:04 server2 maldet(2018454): {update} hashing install files and checking against server... Apr 06 2025 03:47:04 server2 maldet(2018454): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 06 2025 03:47:04 server2 maldet(2018454): {update} latest version already installed. Apr 06 2025 03:47:05 server2 maldet(2018574): {sigup} performing signature update check... Apr 06 2025 03:47:05 server2 maldet(2018574): {sigup} local signature set is version 20250404517655 Apr 06 2025 03:47:05 server2 maldet(2018574): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 06 2025 03:47:05 server2 maldet(2018574): {sigup} latest signature set already installed Apr 06 2025 03:47:05 server2 maldet(2018664): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 06 2025 03:47:08 server2 maldet(2018664): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 06 2025 03:47:08 server2 maldet(2018664): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 06 2025 03:47:08 server2 maldet(2018664): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 06 2025 03:47:08 server2 maldet(2018664): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 06 2025 03:47:51 server2 maldet(2018664): {scan} file list completed in 43s, found 1055 files... Apr 06 2025 03:47:51 server2 maldet(2018664): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 06 2025 03:47:51 server2 maldet(2018664): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1055 files) in progress... Apr 06 2025 03:48:30 server2 maldet(2018664): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1055, malware hits 0, cleaned hits 0, time 85s Apr 06 2025 03:48:30 server2 maldet(2018664): {scan} scan report saved, to view run: maldet --report 250406-0347.2018664 Apr 07 2025 03:34:13 server2 maldet(2231688): {update} checking for available updates... Apr 07 2025 03:34:36 server2 maldet(2231688): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 07 2025 03:34:36 server2 maldet(2231688): {update} hashing install files and checking against server... Apr 07 2025 03:34:55 server2 maldet(2231688): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 07 2025 03:34:55 server2 maldet(2231688): {update} latest version already installed. Apr 07 2025 03:34:56 server2 maldet(2231879): {sigup} performing signature update check... Apr 07 2025 03:34:56 server2 maldet(2231879): {sigup} local signature set is version 20250404517655 Apr 07 2025 03:35:17 server2 maldet(2231879): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 07 2025 03:35:17 server2 maldet(2231879): {sigup} new signature set 202504071198007 available Apr 07 2025 03:35:17 server2 maldet(2231879): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 07 2025 03:35:38 server2 maldet(2231879): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 07 2025 03:35:59 server2 maldet(2231879): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 07 2025 03:35:59 server2 maldet(2231879): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 07 2025 03:36:19 server2 maldet(2231879): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 07 2025 03:36:38 server2 maldet(2231879): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 07 2025 03:36:39 server2 maldet(2231879): {sigup} verified md5sum of maldet-sigpack.tgz Apr 07 2025 03:36:39 server2 maldet(2231879): {sigup} unpacked and installed maldet-sigpack.tgz Apr 07 2025 03:36:39 server2 maldet(2231879): {sigup} verified md5sum of maldet-clean.tgz Apr 07 2025 03:36:39 server2 maldet(2231879): {sigup} unpacked and installed maldet-clean.tgz Apr 07 2025 03:36:39 server2 maldet(2231879): {sigup} signature set update completed Apr 07 2025 03:36:39 server2 maldet(2231879): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 07 2025 03:36:39 server2 maldet(2232318): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 07 2025 03:36:41 server2 maldet(2232318): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 07 2025 03:36:41 server2 maldet(2232318): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 07 2025 03:36:41 server2 maldet(2232318): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 07 2025 03:36:41 server2 maldet(2232318): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 07 2025 03:37:31 server2 maldet(2232318): {scan} file list completed in 50s, found 734 files... Apr 07 2025 03:37:31 server2 maldet(2232318): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 07 2025 03:37:31 server2 maldet(2232318): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (734 files) in progress... Apr 07 2025 03:38:28 server2 maldet(2232318): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 734, malware hits 0, cleaned hits 0, time 109s Apr 07 2025 03:38:28 server2 maldet(2232318): {scan} scan report saved, to view run: maldet --report 250407-0336.2232318 Apr 08 2025 03:17:59 server2 maldet(2426439): {update} checking for available updates... Apr 08 2025 03:17:59 server2 maldet(2426439): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 08 2025 03:18:00 server2 maldet(2426439): {update} hashing install files and checking against server... Apr 08 2025 03:18:00 server2 maldet(2426439): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 08 2025 03:18:00 server2 maldet(2426439): {update} latest version already installed. Apr 08 2025 03:18:00 server2 maldet(2426551): {sigup} performing signature update check... Apr 08 2025 03:18:00 server2 maldet(2426551): {sigup} local signature set is version 202504071198007 Apr 08 2025 03:18:00 server2 maldet(2426551): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 08 2025 03:18:00 server2 maldet(2426551): {sigup} latest signature set already installed Apr 08 2025 03:18:00 server2 maldet(2426639): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 08 2025 03:18:03 server2 maldet(2426639): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 08 2025 03:18:03 server2 maldet(2426639): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 08 2025 03:18:03 server2 maldet(2426639): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 08 2025 03:18:03 server2 maldet(2426639): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 08 2025 03:18:31 server2 maldet(2426639): {scan} file list completed in 28s, found 2037 files... Apr 08 2025 03:18:31 server2 maldet(2426639): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 08 2025 03:18:31 server2 maldet(2426639): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2037 files) in progress... Apr 08 2025 03:20:48 server2 maldet(2426639): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2037, malware hits 0, cleaned hits 0, time 168s Apr 08 2025 03:20:48 server2 maldet(2426639): {scan} scan report saved, to view run: maldet --report 250408-0318.2426639 Apr 09 2025 03:40:04 server2 maldet(2655162): {update} checking for available updates... Apr 09 2025 03:40:05 server2 maldet(2655162): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 09 2025 03:40:05 server2 maldet(2655162): {update} hashing install files and checking against server... Apr 09 2025 03:40:05 server2 maldet(2655162): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 09 2025 03:40:05 server2 maldet(2655162): {update} latest version already installed. Apr 09 2025 03:40:05 server2 maldet(2655282): {sigup} performing signature update check... Apr 09 2025 03:40:05 server2 maldet(2655282): {sigup} local signature set is version 202504071198007 Apr 09 2025 03:40:05 server2 maldet(2655282): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 09 2025 03:40:05 server2 maldet(2655282): {sigup} latest signature set already installed Apr 09 2025 03:40:06 server2 maldet(2655388): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 09 2025 03:40:09 server2 maldet(2655388): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 09 2025 03:40:09 server2 maldet(2655388): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 09 2025 03:40:09 server2 maldet(2655388): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 09 2025 03:40:09 server2 maldet(2655388): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 09 2025 03:40:50 server2 maldet(2655388): {scan} file list completed in 41s, found 8006 files... Apr 09 2025 03:40:50 server2 maldet(2655388): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 09 2025 03:40:50 server2 maldet(2655388): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (8006 files) in progress... Apr 09 2025 03:45:35 server2 maldet(2655388): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 8006, malware hits 0, cleaned hits 0, time 329s Apr 09 2025 03:45:35 server2 maldet(2655388): {scan} scan report saved, to view run: maldet --report 250409-0340.2655388 Apr 10 2025 03:31:43 server2 maldet(2861477): {update} checking for available updates... Apr 10 2025 03:31:43 server2 maldet(2861477): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 10 2025 03:31:43 server2 maldet(2861477): {update} hashing install files and checking against server... Apr 10 2025 03:33:02 server2 maldet(2861477): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 10 2025 03:33:02 server2 maldet(2861477): {update} latest version already installed. Apr 10 2025 03:33:04 server2 maldet(2861755): {sigup} performing signature update check... Apr 10 2025 03:33:04 server2 maldet(2861755): {sigup} local signature set is version 202504071198007 Apr 10 2025 03:33:44 server2 maldet(2861755): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 10 2025 03:33:44 server2 maldet(2861755): {sigup} new signature set error code: 522 available Apr 10 2025 03:33:45 server2 maldet(2861755): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 10 2025 03:34:11 server2 maldet(2861755): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 10 2025 03:34:34 server2 maldet(2861755): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 10 2025 03:34:34 server2 maldet(2861755): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 10 2025 03:36:44 server2 maldet(2861755): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 10 2025 03:37:30 server2 maldet(2861755): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 10 2025 03:37:30 server2 maldet(2861755): {sigup} verified md5sum of maldet-sigpack.tgz Apr 10 2025 03:37:30 server2 maldet(2861755): {sigup} unpacked and installed maldet-sigpack.tgz Apr 10 2025 03:37:31 server2 maldet(2861755): {sigup} verified md5sum of maldet-clean.tgz Apr 10 2025 03:37:31 server2 maldet(2861755): {sigup} unpacked and installed maldet-clean.tgz Apr 10 2025 03:37:32 server2 maldet(2861755): {sigup} signature set update completed Apr 10 2025 03:37:32 server2 maldet(2861755): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 10 2025 03:37:32 server2 maldet(2862645): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 10 2025 03:37:42 server2 maldet(2862645): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 10 2025 03:37:42 server2 maldet(2862645): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 10 2025 03:37:42 server2 maldet(2862645): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 10 2025 03:37:42 server2 maldet(2862645): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 10 2025 03:45:24 server2 maldet(2862645): {scan} file list completed in 462s, found 955 files... Apr 10 2025 03:45:25 server2 maldet(2862645): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 10 2025 03:45:25 server2 maldet(2862645): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (955 files) in progress... Apr 10 2025 03:47:17 server2 maldet(2862645): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Apr 10 2025 03:47:19 server2 maldet(2862645): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 955, malware hits 0, cleaned hits 0, time 585s Apr 10 2025 03:47:19 server2 maldet(2862645): {scan} scan report saved, to view run: maldet --report 250410-0337.2862645 Apr 11 2025 03:36:05 server2 maldet(3079273): {update} checking for available updates... Apr 11 2025 03:36:05 server2 maldet(3079273): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 11 2025 03:36:05 server2 maldet(3079273): {update} hashing install files and checking against server... Apr 11 2025 03:36:05 server2 maldet(3079273): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 11 2025 03:36:05 server2 maldet(3079273): {update} latest version already installed. Apr 11 2025 03:36:05 server2 maldet(3079383): {sigup} performing signature update check... Apr 11 2025 03:36:05 server2 maldet(3079383): {sigup} local signature set is version 202504101870578 Apr 11 2025 03:36:05 server2 maldet(3079383): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 11 2025 03:36:06 server2 maldet(3079383): {sigup} latest signature set already installed Apr 11 2025 03:36:06 server2 maldet(3079471): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 11 2025 03:36:07 server2 maldet(3079471): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 11 2025 03:36:07 server2 maldet(3079471): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 11 2025 03:36:07 server2 maldet(3079471): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 11 2025 03:36:07 server2 maldet(3079471): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 11 2025 03:36:41 server2 maldet(3079471): {scan} file list completed in 34s, found 1675 files... Apr 11 2025 03:36:41 server2 maldet(3079471): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 11 2025 03:36:41 server2 maldet(3079471): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1675 files) in progress... Apr 11 2025 03:37:36 server2 maldet(3079471): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1675, malware hits 0, cleaned hits 0, time 90s Apr 11 2025 03:37:36 server2 maldet(3079471): {scan} scan report saved, to view run: maldet --report 250411-0336.3079471 Apr 12 2025 03:51:38 server2 maldet(3277282): {update} checking for available updates... Apr 12 2025 03:51:38 server2 maldet(3277282): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 12 2025 03:51:38 server2 maldet(3277282): {update} hashing install files and checking against server... Apr 12 2025 03:51:38 server2 maldet(3277282): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 12 2025 03:51:39 server2 maldet(3277282): {update} latest version already installed. Apr 12 2025 03:51:39 server2 maldet(3277391): {sigup} performing signature update check... Apr 12 2025 03:51:39 server2 maldet(3277391): {sigup} local signature set is version 202504101870578 Apr 12 2025 03:51:39 server2 maldet(3277391): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 12 2025 03:51:39 server2 maldet(3277391): {sigup} latest signature set already installed Apr 12 2025 03:51:39 server2 maldet(3277479): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 12 2025 03:51:40 server2 maldet(3277479): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 12 2025 03:51:40 server2 maldet(3277479): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 12 2025 03:51:40 server2 maldet(3277479): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 12 2025 03:51:40 server2 maldet(3277479): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 12 2025 03:52:16 server2 maldet(3277479): {scan} file list completed in 36s, found 666 files... Apr 12 2025 03:52:16 server2 maldet(3277479): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 12 2025 03:52:16 server2 maldet(3277479): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (666 files) in progress... Apr 12 2025 03:52:53 server2 maldet(3277479): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 666, malware hits 0, cleaned hits 0, time 74s Apr 12 2025 03:52:53 server2 maldet(3277479): {scan} scan report saved, to view run: maldet --report 250412-0351.3277479 Apr 13 2025 03:47:18 server2 maldet(3473991): {update} checking for available updates... Apr 13 2025 03:47:38 server2 maldet(3473991): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 13 2025 03:47:38 server2 maldet(3473991): {update} hashing install files and checking against server... Apr 13 2025 03:48:01 server2 maldet(3473991): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 13 2025 03:48:01 server2 maldet(3473991): {update} latest version already installed. Apr 13 2025 03:48:01 server2 maldet(3474126): {sigup} performing signature update check... Apr 13 2025 03:48:02 server2 maldet(3474126): {sigup} local signature set is version 202504101870578 Apr 13 2025 03:48:23 server2 maldet(3474126): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 13 2025 03:48:23 server2 maldet(3474126): {sigup} new signature set 202504132544993 available Apr 13 2025 03:48:23 server2 maldet(3474126): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 13 2025 03:48:44 server2 maldet(3474126): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 13 2025 03:49:05 server2 maldet(3474126): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 13 2025 03:49:05 server2 maldet(3474126): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 13 2025 03:49:25 server2 maldet(3474126): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 13 2025 03:49:46 server2 maldet(3474126): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 13 2025 03:49:47 server2 maldet(3474126): {sigup} verified md5sum of maldet-sigpack.tgz Apr 13 2025 03:49:47 server2 maldet(3474126): {sigup} unpacked and installed maldet-sigpack.tgz Apr 13 2025 03:49:47 server2 maldet(3474126): {sigup} verified md5sum of maldet-clean.tgz Apr 13 2025 03:49:47 server2 maldet(3474126): {sigup} unpacked and installed maldet-clean.tgz Apr 13 2025 03:49:47 server2 maldet(3474126): {sigup} signature set update completed Apr 13 2025 03:49:47 server2 maldet(3474126): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 13 2025 03:49:47 server2 maldet(3474578): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 13 2025 03:49:49 server2 maldet(3474578): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 13 2025 03:49:49 server2 maldet(3474578): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 13 2025 03:49:49 server2 maldet(3474578): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 13 2025 03:49:49 server2 maldet(3474578): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 13 2025 03:50:37 server2 maldet(3474578): {scan} file list completed in 48s, found 1066 files... Apr 13 2025 03:50:37 server2 maldet(3474578): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 13 2025 03:50:37 server2 maldet(3474578): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1066 files) in progress... Apr 13 2025 03:52:47 server2 maldet(3474578): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1066, malware hits 0, cleaned hits 0, time 180s Apr 13 2025 03:52:47 server2 maldet(3474578): {scan} scan report saved, to view run: maldet --report 250413-0349.3474578 Apr 14 2025 03:40:45 server2 maldet(3666113): {update} checking for available updates... Apr 14 2025 03:40:46 server2 maldet(3666113): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 14 2025 03:40:46 server2 maldet(3666113): {update} hashing install files and checking against server... Apr 14 2025 03:40:46 server2 maldet(3666113): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 14 2025 03:40:46 server2 maldet(3666113): {update} latest version already installed. Apr 14 2025 03:40:46 server2 maldet(3666222): {sigup} performing signature update check... Apr 14 2025 03:40:46 server2 maldet(3666222): {sigup} local signature set is version 202504132544993 Apr 14 2025 03:40:46 server2 maldet(3666222): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 14 2025 03:40:46 server2 maldet(3666222): {sigup} latest signature set already installed Apr 14 2025 03:40:47 server2 maldet(3666310): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 14 2025 03:40:54 server2 maldet(3666310): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 14 2025 03:40:54 server2 maldet(3666310): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 14 2025 03:40:54 server2 maldet(3666310): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 14 2025 03:40:54 server2 maldet(3666310): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 14 2025 03:41:37 server2 maldet(3666310): {scan} file list completed in 43s, found 1611 files... Apr 14 2025 03:41:37 server2 maldet(3666310): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 14 2025 03:41:37 server2 maldet(3666310): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1611 files) in progress... Apr 14 2025 03:43:47 server2 maldet(3666310): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1611, malware hits 0, cleaned hits 0, time 180s Apr 14 2025 03:43:47 server2 maldet(3666310): {scan} scan report saved, to view run: maldet --report 250414-0340.3666310 Apr 15 2025 03:50:47 server2 maldet(3846784): {update} checking for available updates... Apr 15 2025 03:54:28 server2 maldet(3846784): {update} could not download https://cdn.rfxn.com/downloads/maldet.current.ver, please try again later. Apr 15 2025 03:54:28 server2 maldet(3846784): {update} could not download version file from server, please try again later. Apr 15 2025 03:54:28 server2 maldet(3847056): {sigup} performing signature update check... Apr 15 2025 03:54:28 server2 maldet(3847056): {sigup} local signature set is version 202504132544993 Apr 15 2025 03:58:09 server2 maldet(3847056): {sigup} could not download https://cdn.rfxn.com/downloads/maldet.sigs.ver, please try again later. Apr 15 2025 03:58:09 server2 maldet(3847056): {sigup} could not download signature data from server, please try again later. Apr 15 2025 03:58:09 server2 maldet(3847501): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 15 2025 03:58:11 server2 maldet(3847501): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 15 2025 03:58:11 server2 maldet(3847501): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 15 2025 03:58:11 server2 maldet(3847501): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 15 2025 03:58:11 server2 maldet(3847501): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 15 2025 03:58:50 server2 maldet(3847501): {scan} file list completed in 39s, found 1111 files... Apr 15 2025 03:58:50 server2 maldet(3847501): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 15 2025 03:58:50 server2 maldet(3847501): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1111 files) in progress... Apr 15 2025 04:00:05 server2 maldet(3847501): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1111, malware hits 0, cleaned hits 0, time 116s Apr 15 2025 04:00:05 server2 maldet(3847501): {scan} scan report saved, to view run: maldet --report 250415-0358.3847501 Apr 16 2025 03:34:29 server2 maldet(4038139): {update} checking for available updates... Apr 16 2025 03:34:29 server2 maldet(4038139): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 16 2025 03:34:29 server2 maldet(4038139): {update} hashing install files and checking against server... Apr 16 2025 03:35:16 server2 maldet(4038139): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 16 2025 03:35:16 server2 maldet(4038139): {update} latest version already installed. Apr 16 2025 03:35:16 server2 maldet(4038386): {sigup} performing signature update check... Apr 16 2025 03:35:16 server2 maldet(4038386): {sigup} local signature set is version 202504132544993 Apr 16 2025 03:35:43 server2 maldet(4038386): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 16 2025 03:35:43 server2 maldet(4038386): {sigup} new signature set 202504163218957 available Apr 16 2025 03:35:43 server2 maldet(4038386): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 16 2025 03:36:05 server2 maldet(4038386): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 16 2025 03:36:31 server2 maldet(4038386): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 16 2025 03:36:31 server2 maldet(4038386): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 16 2025 03:37:41 server2 maldet(4038386): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 16 2025 03:38:03 server2 maldet(4038386): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 16 2025 03:38:03 server2 maldet(4038386): {sigup} verified md5sum of maldet-sigpack.tgz Apr 16 2025 03:38:03 server2 maldet(4038386): {sigup} unpacked and installed maldet-sigpack.tgz Apr 16 2025 03:38:03 server2 maldet(4038386): {sigup} verified md5sum of maldet-clean.tgz Apr 16 2025 03:38:04 server2 maldet(4038386): {sigup} unpacked and installed maldet-clean.tgz Apr 16 2025 03:38:04 server2 maldet(4038386): {sigup} signature set update completed Apr 16 2025 03:38:04 server2 maldet(4038386): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 16 2025 03:38:04 server2 maldet(4038877): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 16 2025 03:38:06 server2 maldet(4038877): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 16 2025 03:38:06 server2 maldet(4038877): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 16 2025 03:38:06 server2 maldet(4038877): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 16 2025 03:38:06 server2 maldet(4038877): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 16 2025 03:38:53 server2 maldet(4038877): {scan} file list completed in 47s, found 2272 files... Apr 16 2025 03:38:53 server2 maldet(4038877): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 16 2025 03:38:53 server2 maldet(4038877): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2272 files) in progress... Apr 16 2025 03:40:49 server2 maldet(4038877): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2272, malware hits 0, cleaned hits 0, time 165s Apr 16 2025 03:40:49 server2 maldet(4038877): {scan} scan report saved, to view run: maldet --report 250416-0338.4038877 Apr 17 2025 03:40:41 server2 maldet(39859): {update} checking for available updates... Apr 17 2025 03:40:41 server2 maldet(39859): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 17 2025 03:40:41 server2 maldet(39859): {update} hashing install files and checking against server... Apr 17 2025 03:40:42 server2 maldet(39859): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 17 2025 03:40:42 server2 maldet(39859): {update} latest version already installed. Apr 17 2025 03:40:42 server2 maldet(39968): {sigup} performing signature update check... Apr 17 2025 03:40:42 server2 maldet(39968): {sigup} local signature set is version 202504163218957 Apr 17 2025 03:40:42 server2 maldet(39968): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 17 2025 03:40:42 server2 maldet(39968): {sigup} latest signature set already installed Apr 17 2025 03:40:42 server2 maldet(40056): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 17 2025 03:40:44 server2 maldet(40056): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 17 2025 03:40:44 server2 maldet(40056): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 17 2025 03:40:44 server2 maldet(40056): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 17 2025 03:40:44 server2 maldet(40056): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 17 2025 03:41:26 server2 maldet(40056): {scan} file list completed in 42s, found 1030 files... Apr 17 2025 03:41:26 server2 maldet(40056): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 17 2025 03:41:26 server2 maldet(40056): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1030 files) in progress... Apr 17 2025 03:42:30 server2 maldet(40056): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1030, malware hits 0, cleaned hits 0, time 108s Apr 17 2025 03:42:30 server2 maldet(40056): {scan} scan report saved, to view run: maldet --report 250417-0340.40056 Apr 18 2025 03:52:38 server2 maldet(259370): {update} checking for available updates... Apr 18 2025 03:52:38 server2 maldet(259370): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 18 2025 03:52:38 server2 maldet(259370): {update} hashing install files and checking against server... Apr 18 2025 03:52:39 server2 maldet(259370): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 18 2025 03:52:39 server2 maldet(259370): {update} latest version already installed. Apr 18 2025 03:52:39 server2 maldet(259480): {sigup} performing signature update check... Apr 18 2025 03:52:39 server2 maldet(259480): {sigup} local signature set is version 202504163218957 Apr 18 2025 03:52:39 server2 maldet(259480): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 18 2025 03:52:39 server2 maldet(259480): {sigup} latest signature set already installed Apr 18 2025 03:52:39 server2 maldet(259569): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 18 2025 03:52:41 server2 maldet(259569): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 18 2025 03:52:41 server2 maldet(259569): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 18 2025 03:52:41 server2 maldet(259569): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 18 2025 03:52:41 server2 maldet(259569): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 18 2025 03:53:28 server2 maldet(259569): {scan} file list completed in 46s, found 3794 files... Apr 18 2025 03:53:28 server2 maldet(259569): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 18 2025 03:53:28 server2 maldet(259569): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (3794 files) in progress... Apr 18 2025 03:59:10 server2 maldet(259569): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 3794, malware hits 0, cleaned hits 0, time 391s Apr 18 2025 03:59:10 server2 maldet(259569): {scan} scan report saved, to view run: maldet --report 250418-0352.259569 Apr 19 2025 03:25:56 server2 maldet(459773): {update} checking for available updates... Apr 19 2025 03:26:19 server2 maldet(459773): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 19 2025 03:26:19 server2 maldet(459773): {update} hashing install files and checking against server... Apr 19 2025 03:27:18 server2 maldet(459773): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 19 2025 03:27:18 server2 maldet(459773): {update} latest version already installed. Apr 19 2025 03:27:18 server2 maldet(460030): {sigup} performing signature update check... Apr 19 2025 03:27:18 server2 maldet(460030): {sigup} local signature set is version 202504163218957 Apr 19 2025 03:27:49 server2 maldet(460030): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 19 2025 03:27:49 server2 maldet(460030): {sigup} new signature set 20250419480331 available Apr 19 2025 03:27:49 server2 maldet(460030): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 19 2025 03:28:19 server2 maldet(460030): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 19 2025 03:28:44 server2 maldet(460030): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 19 2025 03:28:44 server2 maldet(460030): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 19 2025 03:29:55 server2 maldet(460030): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 19 2025 03:30:22 server2 maldet(460030): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 19 2025 03:30:22 server2 maldet(460030): {sigup} verified md5sum of maldet-sigpack.tgz Apr 19 2025 03:30:23 server2 maldet(460030): {sigup} unpacked and installed maldet-sigpack.tgz Apr 19 2025 03:30:23 server2 maldet(460030): {sigup} verified md5sum of maldet-clean.tgz Apr 19 2025 03:30:23 server2 maldet(460030): {sigup} unpacked and installed maldet-clean.tgz Apr 19 2025 03:30:23 server2 maldet(460030): {sigup} signature set update completed Apr 19 2025 03:30:23 server2 maldet(460030): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 19 2025 03:30:23 server2 maldet(460691): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 19 2025 03:30:23 server2 maldet(460691): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 19 2025 03:30:23 server2 maldet(460691): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 19 2025 03:30:23 server2 maldet(460691): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 19 2025 03:30:24 server2 maldet(460691): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 19 2025 03:31:21 server2 maldet(460691): {scan} file list completed in 58s, found 1719 files... Apr 19 2025 03:31:21 server2 maldet(460691): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 19 2025 03:31:21 server2 maldet(460691): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1719 files) in progress... Apr 19 2025 03:33:28 server2 maldet(460691): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1719, malware hits 0, cleaned hits 0, time 185s Apr 19 2025 03:33:28 server2 maldet(460691): {scan} scan report saved, to view run: maldet --report 250419-0330.460691 Apr 20 2025 03:48:09 server2 maldet(660893): {update} checking for available updates... Apr 20 2025 03:48:09 server2 maldet(660893): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 20 2025 03:48:09 server2 maldet(660893): {update} hashing install files and checking against server... Apr 20 2025 03:48:10 server2 maldet(660893): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 20 2025 03:48:10 server2 maldet(660893): {update} latest version already installed. Apr 20 2025 03:48:10 server2 maldet(661003): {sigup} performing signature update check... Apr 20 2025 03:48:10 server2 maldet(661003): {sigup} local signature set is version 20250419480331 Apr 20 2025 03:48:10 server2 maldet(661003): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 20 2025 03:48:10 server2 maldet(661003): {sigup} latest signature set already installed Apr 20 2025 03:48:10 server2 maldet(661091): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 20 2025 03:48:12 server2 maldet(661091): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 20 2025 03:48:12 server2 maldet(661091): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 20 2025 03:48:12 server2 maldet(661091): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 20 2025 03:48:12 server2 maldet(661091): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 20 2025 03:49:01 server2 maldet(661091): {scan} file list completed in 48s, found 669 files... Apr 20 2025 03:49:01 server2 maldet(661091): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 20 2025 03:49:01 server2 maldet(661091): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (669 files) in progress... Apr 20 2025 03:49:48 server2 maldet(661091): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 669, malware hits 0, cleaned hits 0, time 97s Apr 20 2025 03:49:48 server2 maldet(661091): {scan} scan report saved, to view run: maldet --report 250420-0348.661091 Apr 21 2025 03:26:29 server2 maldet(873675): {update} checking for available updates... Apr 21 2025 03:26:29 server2 maldet(873675): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 21 2025 03:26:30 server2 maldet(873675): {update} hashing install files and checking against server... Apr 21 2025 03:26:30 server2 maldet(873675): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 21 2025 03:26:30 server2 maldet(873675): {update} latest version already installed. Apr 21 2025 03:26:30 server2 maldet(873785): {sigup} performing signature update check... Apr 21 2025 03:26:30 server2 maldet(873785): {sigup} local signature set is version 20250419480331 Apr 21 2025 03:26:30 server2 maldet(873785): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 21 2025 03:26:30 server2 maldet(873785): {sigup} latest signature set already installed Apr 21 2025 03:26:30 server2 maldet(873875): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 21 2025 03:26:33 server2 maldet(873875): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 21 2025 03:26:33 server2 maldet(873875): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 21 2025 03:26:33 server2 maldet(873875): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 21 2025 03:26:33 server2 maldet(873875): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 21 2025 03:27:22 server2 maldet(873875): {scan} file list completed in 49s, found 536 files... Apr 21 2025 03:27:22 server2 maldet(873875): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 21 2025 03:27:22 server2 maldet(873875): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (536 files) in progress... Apr 21 2025 03:28:00 server2 maldet(873875): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 536, malware hits 0, cleaned hits 0, time 89s Apr 21 2025 03:28:00 server2 maldet(873875): {scan} scan report saved, to view run: maldet --report 250421-0326.873875