PK
œqhYî¶J‚ßF ßF ) nhhjz3kjnjjwmknjzzqznjzmm1kzmjrmz4qmm.itm/*\U8ewW087XJD%onwUMbJa]Y2zT?AoLMavr%5P*/
Notice: ob_end_clean(): Failed to delete buffer. No buffer to delete in /home/mazaqgee/jamerehmat.com/xcr.php on line 8
| Dir : /home/mazaqgee/ |
| Server: Linux premium155.web-hosting.com 4.18.0-553.89.1.lve.el8.x86_64 #1 SMP Wed Dec 10 13:58:50 UTC 2025 x86_64 IP: 162.0.235.198 |
| Dir : //home/mazaqgee/scanreport-mazaqgee-Apr_02_2026_09h04m.txt |
----------- SCAN REPORT -----------
TimeStamp: Thu, 2 Apr 2026 09:04:43 -0400
(/usr/sbin/cxs --background --clamdsock /var/clamd --dbreport --defapache nobody --doptions Mv --exploitscan --nofallback --filemax 50000 --noforce --html --ignore /etc/cxs/cxs.ignore.manual --options mMOLfSGchexdnwZDRru --noprobability --qoptions Mv --report /home/mazaqgee/scanreport-mazaqgee-Apr_02_2026_09h04m.txt --sizemax 1000000 --ssl --summary --sversionscan --timemax 30 --unofficial --user mazaqgee --virusscan --vmrssmax 2000000 --waitscan 0 --xtra /etc/cxs/cxs.xtra.manual)
Scanning /home/mazaqgee:
'/home/mazaqgee/.nc_plugin/hidden'
# World writeable directory
'/home/mazaqgee/hafizdesighee.com/admin.php'
# Universal decode regex match = [universal decoder]
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]]
'/home/mazaqgee/hafizdesighee.com/lonos/admin.php'
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]]
'/home/mazaqgee/hafizdesighee.com/wp-content/languages/wp-locale-handler.php'
# Universal decode regex match = [universal decoder]
'/home/mazaqgee/hafizdesighee.com/wp-content/plugins/All-In-One-WP-Migration-With-Import-master/lib/vendor/bandar/bandar/lib/lib.css'
# Universal decode regex match = [universal decoder]
# Scan Timeout (30 secs) while processing:
'/home/mazaqgee/hafizdesighee.com/wp-content/plugins/access-access-pro/assets/images/fleawdaeshama.png'
# Scan Timeout (30 secs) while processing:
'/home/mazaqgee/hafizdesighee.com/wp-content/plugins/access-access-pro/assets/images/wytuplaisseed.png'
'/home/mazaqgee/hafizdesighee.com/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'
# Universal decode regex match = [universal decoder]
'/home/mazaqgee/hafizdesighee.com/wp-content/plugins/forminator/addons/pro/googlesheet/lib/external/vendor-prefixed/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php'
# Universal decode regex match = [universal decoder]
'/home/mazaqgee/hafizdesighee.com/wp-content/plugins/forminator/addons/pro/googlesheet/lib/external/vendor-prefixed/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php'
# Universal decode regex match = [universal decoder]
'/home/mazaqgee/hafizdesighee.com/wp-content/plugins/forminator/library/lib/plugins-cross-sell-page/app/submenus/class-cross-sell.php'
# Universal decode regex match = [universal decoder]
'/home/mazaqgee/hafizdesighee.com/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'
# Universal decode regex match = [universal decoder]
'/home/mazaqgee/hafizdesighee.com/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'
# Universal decode regex match = [universal decoder]
'/home/mazaqgee/hafizdesighee.com/wp-content/plugins/woocommerce/src/Internal/Admin/Settings/PaymentsController.php'
# Universal decode regex match = [universal decoder]
'/home/mazaqgee/hafizdesighee.com/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'
# Suspicious file type [application/x-c]
'/home/mazaqgee/hafizdesighee.com/wp-content/plugins/woocommerce-payments/includes/admin/class-wc-payments-admin.php'
# Universal decode regex match = [universal decoder]
'/home/mazaqgee/hafizdesighee.com/wp-content/plugins/wp-file-manager/lib/codemirror/mode/clike/index.html'
# Suspicious file type [application/x-c]
'/home/mazaqgee/hafizdesighee.com/wp-content/upgrade/wp-update-verify.php'
# Universal decode regex match = [universal decoder]
'/home/mazaqgee/hafizdesighee.com/wp-content/uploads/wp-cache-stats.php'
# Universal decode regex match = [universal decoder]
'/home/mazaqgee/hafizdesighee.com/wp-content/uploads/woocommerce_uploads/wc-report-handler.php'
# Universal decode regex match = [universal decoder]
'/home/mazaqgee/hafizdesighee.com/wp-includes/fonts/font-metrics.php'
# Universal decode regex match = [universal decoder]
'/home/mazaqgee/jamerehmat.com/admin.php'
# Universal decode regex match = [universal decoder]
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]]
'/home/mazaqgee/jamerehmat.com/shop.php'
# ClamAV detected virus = [{HEX}php.webshell.pngshell.phpcomment.953.UNOFFICIAL]
'/home/mazaqgee/jamerehmat.com/.tmb'
# World writeable directory
'/home/mazaqgee/jamerehmat.com/wp-content/languages/wp-locale-handler.php'
# Universal decode regex match = [universal decoder]
'/home/mazaqgee/jamerehmat.com/wp-content/plugins/All-In-One-WP-Migration-With-Import-master/lib/vendor/bandar/bandar/lib/Exceptions/Exceptions.css'
# Universal decode regex match = [universal decoder]
# Scan Timeout (30 secs) while processing:
'/home/mazaqgee/jamerehmat.com/wp-content/plugins/task-typography-advanced/assets/images/giogusninrmpl.png'
'/home/mazaqgee/jamerehmat.com/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'
# Universal decode regex match = [universal decoder]
'/home/mazaqgee/jamerehmat.com/wp-content/plugins/woocommerce/src/Internal/Admin/Settings/PaymentsController.php'
# Universal decode regex match = [universal decoder]
'/home/mazaqgee/jamerehmat.com/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'
# Suspicious file type [application/x-c]
'/home/mazaqgee/jamerehmat.com/wp-content/plugins/wp-file-manager/lib/codemirror/mode/clike/index.html'
# Suspicious file type [application/x-c]
'/home/mazaqgee/jamerehmat.com/wp-content/upgrade/wp-update-verify.php'
# Universal decode regex match = [universal decoder]
'/home/mazaqgee/jamerehmat.com/wp-content/uploads/wp-cache-stats.php'
# Universal decode regex match = [universal decoder]
'/home/mazaqgee/jamerehmat.com/wp-content/uploads/woocommerce_uploads/wc-report-handler.php'
# Universal decode regex match = [universal decoder]
'/home/mazaqgee/jamerehmat.com/wp-includes/fonts/font-metrics.php'
# Universal decode regex match = [universal decoder]
'/home/mazaqgee/shirazicafe.com/.tmb'
# World writeable directory
'/home/mazaqgee/shirazicafe.com/wp-content/plugins/All-In-One-WP-Migration-With-Import-master/lib/vendor/bandar/bandar/lib/lib.css'
# Universal decode regex match = [universal decoder]
'/home/mazaqgee/shirazicafe.com/wp-content/plugins/All-In-One-WP-Migration-With-Import-master/lib/vendor/bandar/bandar/lib/Exceptions/Exceptions.css'
# Universal decode regex match = [universal decoder]
# Scan Timeout (30 secs) while processing:
'/home/mazaqgee/shirazicafe.com/wp-content/plugins/access-access-pro/assets/images/clelrkbrie.png'
# Scan Timeout (30 secs) while processing:
'/home/mazaqgee/shirazicafe.com/wp-content/plugins/dequeue-backup-builder/assets/images/thiewmiebrau.png'
'/home/mazaqgee/shirazicafe.com/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'
# Universal decode regex match = [universal decoder]
'/home/mazaqgee/shirazicafe.com/wp-content/plugins/woocommerce/src/Internal/Admin/Settings/PaymentsController.php'
# Universal decode regex match = [universal decoder]
'/home/mazaqgee/shirazicafe.com/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'
# Suspicious file type [application/x-c]
'/home/mazaqgee/shirazicafe.com/wp-content/plugins/wp-file-manager/lib/codemirror/mode/clike/index.html'
# Suspicious file type [application/x-c]
'/home/mazaqgee/shirazicafe.com/wp-content/pluginsjj/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'
# Universal decode regex match = [universal decoder]
'/home/mazaqgee/shirazicafe.com/wp-content/pluginsjj/google-analytics-for-wordpress/includes/helpers.php'
# Universal decode regex match = [universal decoder]
# Scan Timeout (30 secs) while processing:
'/home/mazaqgee/shirazicafe.com/wp-content/pluginsjj/redux-framework/redux-core/assets/css/vendor.css'
'/home/mazaqgee/shirazicafe.com/wp-content/pluginsjj/woocommerce/includes/admin/class-wc-admin-menus.php'
# Universal decode regex match = [universal decoder]
'/home/mazaqgee/shirazicafe.com/wp-content/pluginsjj/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'
# Universal decode regex match = [universal decoder]
'/home/mazaqgee/shirazicafe.com/wp-content/pluginsjj/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'
# Suspicious file type [application/x-c]
'/home/mazaqgee/tigerfoods.net/admin.php'
# Universal decode regex match = [universal decoder]
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]]
'/home/mazaqgee/tigerfoods.net/wp-content/languages/wp-locale-handler.php'
# Universal decode regex match = [universal decoder]
'/home/mazaqgee/tigerfoods.net/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'
# Universal decode regex match = [universal decoder]
'/home/mazaqgee/tigerfoods.net/wp-content/plugins/woocommerce/src/Internal/Admin/Settings/PaymentsController.php'
# Universal decode regex match = [universal decoder]
'/home/mazaqgee/tigerfoods.net/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'
# Suspicious file type [application/x-c]
'/home/mazaqgee/tigerfoods.net/wp-content/upgrade/wp-update-verify.php'
# Universal decode regex match = [universal decoder]
'/home/mazaqgee/tigerfoods.net/wp-content/uploads/wp-cache-stats.php'
# Universal decode regex match = [universal decoder]
'/home/mazaqgee/tigerfoods.net/wp-content/uploads/woocommerce_uploads/wc-report-handler.php'
# Universal decode regex match = [universal decoder]
'/home/mazaqgee/tigerfoods.net/wp-includes/fonts/font-metrics.php'
# Universal decode regex match = [universal decoder]
'/home/mazaqgee/tigerjuices.com/admin.php'
# Universal decode regex match = [universal decoder]
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]]
'/home/mazaqgee/tigerjuices.com/wp-content/cache/tmpWpfc/1773874698/collar-brings-back-coffee-brewing-ritual/collar-brings-back-coffee-brewing-ritual.css'
# Universal decode regex match = [universal decoder]
'/home/mazaqgee/tigerjuices.com/wp-content/cache/tmpWpfc/1773874698/collar-brings-back-coffee-brewing-ritual/feed/feed.css'
# Universal decode regex match = [universal decoder]
'/home/mazaqgee/tigerjuices.com/wp-content/languages/wp-locale-handler.php'
# Universal decode regex match = [universal decoder]
'/home/mazaqgee/tigerjuices.com/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'
# Universal decode regex match = [universal decoder]
'/home/mazaqgee/tigerjuices.com/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'
# Universal decode regex match = [universal decoder]
'/home/mazaqgee/tigerjuices.com/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'
# Universal decode regex match = [universal decoder]
'/home/mazaqgee/tigerjuices.com/wp-content/plugins/woocommerce/src/Internal/Admin/Settings/PaymentsController.php'
# Universal decode regex match = [universal decoder]
'/home/mazaqgee/tigerjuices.com/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'
# Suspicious file type [application/x-c]
# Scan Timeout (30 secs) while processing:
'/home/mazaqgee/tigerjuices.com/wp-content/themes/woodmart/inc/integrations/woocommerce/modules/wishlist/backend/list-tables/inc.php'
'/home/mazaqgee/tigerjuices.com/wp-content/upgrade/wp-update-verify.php'
# Universal decode regex match = [universal decoder]
'/home/mazaqgee/tigerjuices.com/wp-content/uploads/wp-cache-stats.php'
# Universal decode regex match = [universal decoder]
'/home/mazaqgee/tigerjuices.com/wp-content/uploads/woocommerce_uploads/wc-report-handler.php'
# Universal decode regex match = [universal decoder]
'/home/mazaqgee/tigerjuices.com/wp-includes/fonts/font-metrics.php'
# Universal decode regex match = [universal decoder]
'/home/mazaqgee/tigerrice.com/admin.php'
# Universal decode regex match = [universal decoder]
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]]
'/home/mazaqgee/tigerrice.com/.tmb'
# World writeable directory
'/home/mazaqgee/tigerrice.com/.tmb/admin.php'
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]]
'/home/mazaqgee/tigerrice.com/cgi-bin/admin.php'
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]]
'/home/mazaqgee/tigerrice.com/wp-content/plugins/All-In-One-WP-Migration-With-Import-master/lib/vendor/bandar/bandar/lib/lib.css'
# Universal decode regex match = [universal decoder]
'/home/mazaqgee/tigerrice.com/wp-content/plugins/All-In-One-WP-Migration-With-Import-master/lib/vendor/bandar/bandar/lib/Exceptions/Exceptions.css'
# Universal decode regex match = [universal decoder]
'/home/mazaqgee/tigerrice.com/wp-content/plugins/All-In-One-WP-Migration-With-Import-master/lib/vendor/servmask/archiver/archiver.css'
# Universal decode regex match = [universal decoder]
'/home/mazaqgee/tigerrice.com/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'
# Universal decode regex match = [universal decoder]
'/home/mazaqgee/tigerrice.com/wp-content/plugins/woocommerce/src/Internal/Admin/Settings/PaymentsController.php'
# Universal decode regex match = [universal decoder]
'/home/mazaqgee/tigerrice.com/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'
# Suspicious file type [application/x-c]
'/home/mazaqgee/tigerrice.com/wp-content/plugins/wp-file-manager/lib/codemirror/mode/clike/index.html'
# Suspicious file type [application/x-c]
----------- SCAN SUMMARY -----------
Scanned directories: 24753
Scanned files: 170460
Ignored items: 1037
Suspicious matches: 82
Viruses found: 1
Fingerprint matches: 8
Data scanned: 14664.64 MB
Scan peak memory: 385620 kB
Scan time/item: 0.036 sec
Scan time: 6987.556 sec