May 14 2026 03:36:44 instant0279 maldet(30483): {sigup} performing signature update check...
May 14 2026 03:36:44 instant0279 maldet(30483): {sigup} could not determine signature version
May 14 2026 03:36:44 instant0279 maldet(30483): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
May 14 2026 03:36:44 instant0279 maldet(30483): {sigup} signature files missing or corrupted, forcing update...
May 14 2026 03:36:44 instant0279 maldet(30483): {sigup} new signature set 2026051290484 available
May 14 2026 03:36:44 instant0279 maldet(30483): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz
May 14 2026 03:36:45 instant0279 maldet(30483): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz
May 14 2026 03:36:45 instant0279 maldet(30483): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5
May 14 2026 03:36:45 instant0279 maldet(30483): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz
May 14 2026 03:36:45 instant0279 maldet(30483): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz
May 14 2026 03:36:45 instant0279 maldet(30483): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5
May 14 2026 03:36:45 instant0279 maldet(30483): {sigup} verified md5sum of maldet-sigpack.tgz
May 14 2026 03:36:46 instant0279 maldet(30483): {sigup} unpacked and installed maldet-sigpack.tgz
May 14 2026 03:36:46 instant0279 maldet(30483): {sigup} verified md5sum of maldet-clean.tgz
May 14 2026 03:36:46 instant0279 maldet(30483): {sigup} unpacked and installed maldet-clean.tgz
May 14 2026 03:36:46 instant0279 maldet(30483): {sigup} signature set update completed
May 14 2026 03:36:46 instant0279 maldet(30483): {sigup} 51468 signatures (45387 MD5 | 2375 HEX | 3706 YARA | 0 USER)
May 14 2026 03:36:46 instant0279 maldet(31203): {cve-2026-41940} starting one-shot cPanel defensive remediation (scanid: 260514-0336.31203)
May 14 2026 03:36:47 instant0279 maldet(31203): {cve-2026-41940} remediation completed: 0 action(s) taken, time 1s
May 14 2026 03:36:47 instant0279 maldet(29156): {update} completed update v1.6.6 3a1792 => v1.6.6 e54dca, running signature updates...
May 14 2026 03:36:47 instant0279 maldet(863): {sigup} performing signature update check...
May 14 2026 03:36:47 instant0279 maldet(863): {sigup} local signature set is version 2026051290484
May 14 2026 03:36:48 instant0279 maldet(863): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
May 14 2026 03:36:48 instant0279 maldet(863): {sigup} latest signature set already installed
May 14 2026 03:36:48 instant0279 maldet(29156): {update} update and config import completed
May 14 2026 03:36:48 instant0279 maldet(1491): {sigup} performing signature update check...
May 14 2026 03:36:48 instant0279 maldet(1491): {sigup} local signature set is version 2026051290484
May 14 2026 03:36:48 instant0279 maldet(1491): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
May 14 2026 03:36:48 instant0279 maldet(1491): {sigup} latest signature set already installed
May 14 2026 03:36:48 instant0279 maldet(2166): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
May 14 2026 03:37:28 instant0279 maldet(2166): {scan} signatures loaded: 51468 (45387 MD5 | 2375 HEX | 3706 YARA | 0 USER)
May 14 2026 03:37:28 instant0279 maldet(2166): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
May 14 2026 03:37:28 instant0279 maldet(2166): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
May 14 2026 03:37:28 instant0279 maldet(2166): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
May 14 2026 03:37:45 instant0279 maldet(2166): {scan} file list completed in 17s, found 472 files...
May 14 2026 03:37:45 instant0279 maldet(2166): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
May 14 2026 03:37:45 instant0279 maldet(2166): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (472 files) in progress...
May 14 2026 03:38:32 instant0279 maldet(2166): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 472, malware hits 0, cleaned hits 0, time 104s
May 14 2026 03:38:32 instant0279 maldet(2166): {scan} scan report saved, to view run: maldet --report 260514-0336.2166
May 15 2026 03:10:24 instant0279 maldet(11703): {update} checking for available updates...
May 15 2026 03:10:25 instant0279 maldet(11703): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
May 15 2026 03:10:25 instant0279 maldet(11703): {update} hashing install files and checking against server...
May 15 2026 03:10:25 instant0279 maldet(11703): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
May 15 2026 03:10:25 instant0279 maldet(11703): {update} latest version already installed.
May 15 2026 03:10:25 instant0279 maldet(12357): {sigup} performing signature update check...
May 15 2026 03:10:25 instant0279 maldet(12357): {sigup} local signature set is version 2026051290484
May 15 2026 03:10:25 instant0279 maldet(12357): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
May 15 2026 03:10:25 instant0279 maldet(12357): {sigup} latest signature set already installed
May 15 2026 03:10:26 instant0279 maldet(12993): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
May 15 2026 03:10:43 instant0279 maldet(12993): {scan} signatures loaded: 51468 (45387 MD5 | 2375 HEX | 3706 YARA | 0 USER)
May 15 2026 03:10:43 instant0279 maldet(12993): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
May 15 2026 03:10:43 instant0279 maldet(12993): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
May 15 2026 03:10:43 instant0279 maldet(12993): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
May 15 2026 03:11:07 instant0279 maldet(12993): {scan} file list completed in 24s, found 331 files...
May 15 2026 03:11:07 instant0279 maldet(12993): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
May 15 2026 03:11:07 instant0279 maldet(12993): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (331 files) in progress...
May 15 2026 03:11:41 instant0279 maldet(12993): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 331, malware hits 0, cleaned hits 0, time 75s
May 15 2026 03:11:41 instant0279 maldet(12993): {scan} scan report saved, to view run: maldet --report 260515-0310.12993
May 16 2026 03:29:28 instant0279 maldet(11705): {update} checking for available updates...
May 16 2026 03:29:29 instant0279 maldet(11705): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
May 16 2026 03:29:29 instant0279 maldet(11705): {update} hashing install files and checking against server...
May 16 2026 03:29:29 instant0279 maldet(11705): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
May 16 2026 03:29:29 instant0279 maldet(11705): {update} latest version already installed.
May 16 2026 03:29:29 instant0279 maldet(12308): {sigup} performing signature update check...
May 16 2026 03:29:29 instant0279 maldet(12308): {sigup} local signature set is version 2026051290484
May 16 2026 03:29:29 instant0279 maldet(12308): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
May 16 2026 03:29:29 instant0279 maldet(12308): {sigup} latest signature set already installed
May 16 2026 03:29:30 instant0279 maldet(12896): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
May 16 2026 03:29:30 instant0279 maldet(12896): {scan} signatures loaded: 51468 (45387 MD5 | 2375 HEX | 3706 YARA | 0 USER)
May 16 2026 03:29:30 instant0279 maldet(12896): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
May 16 2026 03:29:30 instant0279 maldet(12896): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
May 16 2026 03:29:30 instant0279 maldet(12896): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
May 16 2026 03:30:03 instant0279 maldet(12896): {scan} file list completed in 33s, found 455 files...
May 16 2026 03:30:03 instant0279 maldet(12896): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
May 16 2026 03:30:03 instant0279 maldet(12896): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (455 files) in progress...
May 16 2026 03:30:24 instant0279 maldet(12896): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 455, malware hits 0, cleaned hits 0, time 54s
May 16 2026 03:30:24 instant0279 maldet(12896): {scan} scan report saved, to view run: maldet --report 260516-0329.12896
May 17 2026 03:21:49 instant0279 maldet(8086): {update} checking for available updates...
May 17 2026 03:21:49 instant0279 maldet(8086): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
May 17 2026 03:21:49 instant0279 maldet(8086): {update} hashing install files and checking against server...
May 17 2026 03:21:49 instant0279 maldet(8086): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
May 17 2026 03:21:49 instant0279 maldet(8086): {update} latest version already installed.
May 17 2026 03:21:50 instant0279 maldet(8725): {sigup} performing signature update check...
May 17 2026 03:21:50 instant0279 maldet(8725): {sigup} local signature set is version 2026051290484
May 17 2026 03:21:50 instant0279 maldet(8725): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
May 17 2026 03:21:50 instant0279 maldet(8725): {sigup} latest signature set already installed
May 17 2026 03:21:50 instant0279 maldet(9323): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
May 17 2026 03:22:08 instant0279 maldet(9323): {scan} signatures loaded: 51468 (45387 MD5 | 2375 HEX | 3706 YARA | 0 USER)
May 17 2026 03:22:08 instant0279 maldet(9323): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
May 17 2026 03:22:08 instant0279 maldet(9323): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
May 17 2026 03:22:08 instant0279 maldet(9323): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
May 17 2026 03:22:30 instant0279 maldet(9323): {scan} file list completed in 22s, found 396 files...
May 17 2026 03:22:30 instant0279 maldet(9323): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
May 17 2026 03:22:30 instant0279 maldet(9323): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (396 files) in progress...
May 17 2026 03:23:10 instant0279 maldet(9323): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 396, malware hits 0, cleaned hits 0, time 80s
May 17 2026 03:23:10 instant0279 maldet(9323): {scan} scan report saved, to view run: maldet --report 260517-0321.9323
May 18 2026 03:33:29 instant0279 maldet(9236): {update} checking for available updates...
May 18 2026 03:33:30 instant0279 maldet(9236): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
May 18 2026 03:33:30 instant0279 maldet(9236): {update} hashing install files and checking against server...
May 18 2026 03:33:30 instant0279 maldet(9236): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
May 18 2026 03:33:30 instant0279 maldet(9236): {update} latest version already installed.
May 18 2026 03:33:30 instant0279 maldet(9857): {sigup} performing signature update check...
May 18 2026 03:33:30 instant0279 maldet(9857): {sigup} local signature set is version 2026051290484
May 18 2026 03:33:31 instant0279 maldet(9857): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
May 18 2026 03:33:31 instant0279 maldet(9857): {sigup} latest signature set already installed
May 18 2026 03:33:31 instant0279 maldet(10451): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
May 18 2026 03:33:31 instant0279 maldet(10451): {scan} signatures loaded: 51468 (45387 MD5 | 2375 HEX | 3706 YARA | 0 USER)
May 18 2026 03:33:31 instant0279 maldet(10451): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
May 18 2026 03:33:31 instant0279 maldet(10451): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
May 18 2026 03:33:31 instant0279 maldet(10451): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
May 18 2026 03:34:05 instant0279 maldet(10451): {scan} file list completed in 34s, found 396 files...
May 18 2026 03:34:05 instant0279 maldet(10451): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
May 18 2026 03:34:05 instant0279 maldet(10451): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (396 files) in progress...
May 18 2026 03:34:22 instant0279 maldet(10451): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 396, malware hits 0, cleaned hits 0, time 51s
May 18 2026 03:34:22 instant0279 maldet(10451): {scan} scan report saved, to view run: maldet --report 260518-0333.10451
May 19 2026 03:38:12 instant0279 maldet(20531): {update} checking for available updates...
May 19 2026 03:38:12 instant0279 maldet(20531): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
May 19 2026 03:38:12 instant0279 maldet(20531): {update} hashing install files and checking against server...
May 19 2026 03:38:12 instant0279 maldet(20531): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
May 19 2026 03:38:12 instant0279 maldet(20531): {update} latest version already installed.
May 19 2026 03:38:13 instant0279 maldet(21147): {sigup} performing signature update check...
May 19 2026 03:38:13 instant0279 maldet(21147): {sigup} local signature set is version 2026051290484
May 19 2026 03:38:13 instant0279 maldet(21147): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
May 19 2026 03:38:13 instant0279 maldet(21147): {sigup} latest signature set already installed
May 19 2026 03:38:13 instant0279 maldet(21739): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
May 19 2026 03:38:14 instant0279 maldet(21739): {scan} signatures loaded: 51468 (45387 MD5 | 2375 HEX | 3706 YARA | 0 USER)
May 19 2026 03:38:14 instant0279 maldet(21739): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
May 19 2026 03:38:14 instant0279 maldet(21739): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
May 19 2026 03:38:14 instant0279 maldet(21739): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
May 19 2026 03:38:47 instant0279 maldet(21739): {scan} file list completed in 33s, found 3057 files...
May 19 2026 03:38:47 instant0279 maldet(21739): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
May 19 2026 03:38:47 instant0279 maldet(21739): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (3057 files) in progress...
May 19 2026 03:41:15 instant0279 maldet(21739): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 3057, malware hits 0, cleaned hits 0, time 182s
May 19 2026 03:41:15 instant0279 maldet(21739): {scan} scan report saved, to view run: maldet --report 260519-0338.21739
May 20 2026 03:50:40 instant0279 maldet(31317): {update} checking for available updates...
May 20 2026 03:50:41 instant0279 maldet(31317): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
May 20 2026 03:50:41 instant0279 maldet(31317): {update} hashing install files and checking against server...
May 20 2026 03:50:41 instant0279 maldet(31317): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
May 20 2026 03:50:41 instant0279 maldet(31317): {update} latest version already installed.
May 20 2026 03:50:41 instant0279 maldet(31935): {sigup} performing signature update check...
May 20 2026 03:50:41 instant0279 maldet(31935): {sigup} local signature set is version 2026051290484
May 20 2026 03:50:41 instant0279 maldet(31935): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
May 20 2026 03:50:41 instant0279 maldet(31935): {sigup} latest signature set already installed
May 20 2026 03:50:42 instant0279 maldet(32533): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
May 20 2026 03:50:42 instant0279 maldet(32533): {scan} signatures loaded: 51468 (45387 MD5 | 2375 HEX | 3706 YARA | 0 USER)
May 20 2026 03:50:42 instant0279 maldet(32533): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
May 20 2026 03:50:42 instant0279 maldet(32533): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
May 20 2026 03:50:42 instant0279 maldet(32533): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
May 20 2026 03:51:14 instant0279 maldet(32533): {scan} file list completed in 32s, found 363 files...
May 20 2026 03:51:14 instant0279 maldet(32533): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
May 20 2026 03:51:14 instant0279 maldet(32533): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (363 files) in progress...
May 20 2026 03:51:37 instant0279 maldet(32533): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 363, malware hits 0, cleaned hits 0, time 55s
May 20 2026 03:51:37 instant0279 maldet(32533): {scan} scan report saved, to view run: maldet --report 260520-0350.32533
May 21 2026 03:16:23 instant0279 maldet(6683): {update} checking for available updates...
May 21 2026 03:16:24 instant0279 maldet(6683): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
May 21 2026 03:16:24 instant0279 maldet(6683): {update} hashing install files and checking against server...
May 21 2026 03:16:24 instant0279 maldet(6683): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
May 21 2026 03:16:24 instant0279 maldet(6683): {update} latest version already installed.
May 21 2026 03:16:24 instant0279 maldet(7281): {sigup} performing signature update check...
May 21 2026 03:16:24 instant0279 maldet(7281): {sigup} local signature set is version 2026051290484
May 21 2026 03:16:24 instant0279 maldet(7281): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
May 21 2026 03:16:24 instant0279 maldet(7281): {sigup} latest signature set already installed
May 21 2026 03:16:25 instant0279 maldet(7887): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
May 21 2026 03:16:25 instant0279 maldet(7887): {scan} signatures loaded: 51468 (45387 MD5 | 2375 HEX | 3706 YARA | 0 USER)
May 21 2026 03:16:25 instant0279 maldet(7887): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
May 21 2026 03:16:25 instant0279 maldet(7887): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
May 21 2026 03:16:25 instant0279 maldet(7887): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
May 21 2026 03:16:58 instant0279 maldet(7887): {scan} file list completed in 33s, found 2114 files...
May 21 2026 03:16:58 instant0279 maldet(7887): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
May 21 2026 03:16:58 instant0279 maldet(7887): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2114 files) in progress...
May 21 2026 03:18:37 instant0279 maldet(7887): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2114, malware hits 0, cleaned hits 0, time 132s
May 21 2026 03:18:37 instant0279 maldet(7887): {scan} scan report saved, to view run: maldet --report 260521-0316.7887
May 22 2026 04:34:55 instant0279 maldet(27521): {update} checking for available updates...
May 22 2026 04:34:55 instant0279 maldet(27521): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
May 22 2026 04:34:55 instant0279 maldet(27521): {update} hashing install files and checking against server...
May 22 2026 04:34:55 instant0279 maldet(27521): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
May 22 2026 04:34:55 instant0279 maldet(27521): {update} latest version already installed.
May 22 2026 04:34:55 instant0279 maldet(28138): {sigup} performing signature update check...
May 22 2026 04:34:55 instant0279 maldet(28138): {sigup} local signature set is version 2026051290484
May 22 2026 04:34:56 instant0279 maldet(28138): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
May 22 2026 04:34:56 instant0279 maldet(28138): {sigup} latest signature set already installed
May 22 2026 04:34:56 instant0279 maldet(28730): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
May 22 2026 04:34:56 instant0279 maldet(28730): {scan} signatures loaded: 51468 (45387 MD5 | 2375 HEX | 3706 YARA | 0 USER)
May 22 2026 04:34:56 instant0279 maldet(28730): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
May 22 2026 04:34:56 instant0279 maldet(28730): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
May 22 2026 04:34:56 instant0279 maldet(28730): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
May 22 2026 04:35:30 instant0279 maldet(28730): {scan} file list completed in 34s, found 2083 files...
May 22 2026 04:35:30 instant0279 maldet(28730): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
May 22 2026 04:35:30 instant0279 maldet(28730): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2083 files) in progress...
May 22 2026 04:37:03 instant0279 maldet(28730): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2083, malware hits 0, cleaned hits 0, time 127s
May 22 2026 04:37:03 instant0279 maldet(28730): {scan} scan report saved, to view run: maldet --report 260522-0434.28730
May 23 2026 03:11:51 instant0279 maldet(2341): {update} checking for available updates...
May 23 2026 03:11:51 instant0279 maldet(2341): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
May 23 2026 03:11:51 instant0279 maldet(2341): {update} hashing install files and checking against server...
May 23 2026 03:11:52 instant0279 maldet(2341): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
May 23 2026 03:11:52 instant0279 maldet(2341): {update} latest version already installed.
May 23 2026 03:11:52 instant0279 maldet(2972): {sigup} performing signature update check...
May 23 2026 03:11:52 instant0279 maldet(2972): {sigup} local signature set is version 2026051290484
May 23 2026 03:11:52 instant0279 maldet(2972): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
May 23 2026 03:11:52 instant0279 maldet(2972): {sigup} latest signature set already installed
May 23 2026 03:11:52 instant0279 maldet(3604): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
May 23 2026 03:11:53 instant0279 maldet(3604): {scan} signatures loaded: 51468 (45387 MD5 | 2375 HEX | 3706 YARA | 0 USER)
May 23 2026 03:11:53 instant0279 maldet(3604): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
May 23 2026 03:11:53 instant0279 maldet(3604): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
May 23 2026 03:11:53 instant0279 maldet(3604): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
May 23 2026 03:12:26 instant0279 maldet(3604): {scan} file list completed in 33s, found 254 files...
May 23 2026 03:12:26 instant0279 maldet(3604): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
May 23 2026 03:12:26 instant0279 maldet(3604): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (254 files) in progress...
May 23 2026 03:12:56 instant0279 maldet(3604): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 254, malware hits 0, cleaned hits 0, time 64s
May 23 2026 03:12:56 instant0279 maldet(3604): {scan} scan report saved, to view run: maldet --report 260523-0311.3604
May 24 2026 03:31:51 instant0279 maldet(767): {update} checking for available updates...
May 24 2026 03:31:51 instant0279 maldet(767): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
May 24 2026 03:31:51 instant0279 maldet(767): {update} hashing install files and checking against server...
May 24 2026 03:31:52 instant0279 maldet(767): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
May 24 2026 03:31:52 instant0279 maldet(767): {update} latest version already installed.
May 24 2026 03:31:52 instant0279 maldet(1405): {sigup} performing signature update check...
May 24 2026 03:31:52 instant0279 maldet(1405): {sigup} local signature set is version 2026051290484
May 24 2026 03:31:52 instant0279 maldet(1405): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
May 24 2026 03:31:52 instant0279 maldet(1405): {sigup} new signature set 2026052390483 available
May 24 2026 03:31:52 instant0279 maldet(1405): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz
May 24 2026 03:31:52 instant0279 maldet(1405): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz
May 24 2026 03:31:53 instant0279 maldet(1405): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5
May 24 2026 03:31:53 instant0279 maldet(1405): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz
May 24 2026 03:31:53 instant0279 maldet(1405): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz
May 24 2026 03:31:53 instant0279 maldet(1405): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5
May 24 2026 03:31:53 instant0279 maldet(1405): {sigup} verified md5sum of maldet-sigpack.tgz
May 24 2026 03:31:53 instant0279 maldet(1405): {sigup} unpacked and installed maldet-sigpack.tgz
May 24 2026 03:31:53 instant0279 maldet(1405): {sigup} verified md5sum of maldet-clean.tgz
May 24 2026 03:31:53 instant0279 maldet(1405): {sigup} unpacked and installed maldet-clean.tgz
May 24 2026 03:31:53 instant0279 maldet(1405): {sigup} signature set update completed
May 24 2026 03:31:54 instant0279 maldet(1405): {sigup} 51467 signatures (45387 MD5 | 2374 HEX | 3706 YARA | 0 USER)
May 24 2026 03:31:54 instant0279 maldet(2193): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
May 24 2026 03:32:22 instant0279 maldet(2193): {scan} signatures loaded: 51467 (45387 MD5 | 2374 HEX | 3706 YARA | 0 USER)
May 24 2026 03:32:22 instant0279 maldet(2193): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
May 24 2026 03:32:22 instant0279 maldet(2193): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
May 24 2026 03:32:22 instant0279 maldet(2193): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
May 24 2026 03:32:43 instant0279 maldet(2193): {scan} file list completed in 21s, found 188 files...
May 24 2026 03:32:43 instant0279 maldet(2193): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
May 24 2026 03:32:43 instant0279 maldet(2193): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (188 files) in progress...
May 24 2026 03:33:09 instant0279 maldet(2193): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 188, malware hits 0, cleaned hits 0, time 75s
May 24 2026 03:33:09 instant0279 maldet(2193): {scan} scan report saved, to view run: maldet --report 260524-0331.2193
May 25 2026 03:45:57 instant0279 maldet(9157): {update} checking for available updates...
May 25 2026 03:45:57 instant0279 maldet(9157): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
May 25 2026 03:45:57 instant0279 maldet(9157): {update} hashing install files and checking against server...
May 25 2026 03:45:57 instant0279 maldet(9157): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
May 25 2026 03:45:57 instant0279 maldet(9157): {update} latest version already installed.
May 25 2026 03:45:57 instant0279 maldet(9800): {sigup} performing signature update check...
May 25 2026 03:45:57 instant0279 maldet(9800): {sigup} local signature set is version 2026052390483
May 25 2026 03:45:58 instant0279 maldet(9800): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
May 25 2026 03:45:58 instant0279 maldet(9800): {sigup} new signature set 2026052490478 available
May 25 2026 03:45:58 instant0279 maldet(9800): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz
May 25 2026 03:45:58 instant0279 maldet(9800): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz
May 25 2026 03:45:58 instant0279 maldet(9800): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5
May 25 2026 03:45:58 instant0279 maldet(9800): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz
May 25 2026 03:45:58 instant0279 maldet(9800): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz
May 25 2026 03:45:58 instant0279 maldet(9800): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5
May 25 2026 03:45:58 instant0279 maldet(9800): {sigup} verified md5sum of maldet-sigpack.tgz
May 25 2026 03:45:59 instant0279 maldet(9800): {sigup} unpacked and installed maldet-sigpack.tgz
May 25 2026 03:45:59 instant0279 maldet(9800): {sigup} verified md5sum of maldet-clean.tgz
May 25 2026 03:45:59 instant0279 maldet(9800): {sigup} unpacked and installed maldet-clean.tgz
May 25 2026 03:45:59 instant0279 maldet(9800): {sigup} signature set update completed
May 25 2026 03:45:59 instant0279 maldet(9800): {sigup} 51464 signatures (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
May 25 2026 03:45:59 instant0279 maldet(10535): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
May 25 2026 03:46:17 instant0279 maldet(10535): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
May 25 2026 03:46:17 instant0279 maldet(10535): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
May 25 2026 03:46:17 instant0279 maldet(10535): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
May 25 2026 03:46:17 instant0279 maldet(10535): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
May 25 2026 03:46:44 instant0279 maldet(10535): {scan} file list completed in 27s, found 277 files...
May 25 2026 03:46:44 instant0279 maldet(10535): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
May 25 2026 03:46:44 instant0279 maldet(10535): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (277 files) in progress...
May 25 2026 03:47:19 instant0279 maldet(10535): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 277, malware hits 0, cleaned hits 0, time 80s
May 25 2026 03:47:19 instant0279 maldet(10535): {scan} scan report saved, to view run: maldet --report 260525-0345.10535
May 26 2026 04:20:14 instant0279 maldet(29508): {update} checking for available updates...
May 26 2026 04:20:15 instant0279 maldet(29508): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
May 26 2026 04:20:15 instant0279 maldet(29508): {update} hashing install files and checking against server...
May 26 2026 04:20:15 instant0279 maldet(29508): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
May 26 2026 04:20:15 instant0279 maldet(29508): {update} latest version already installed.
May 26 2026 04:20:15 instant0279 maldet(30190): {sigup} performing signature update check...
May 26 2026 04:20:15 instant0279 maldet(30190): {sigup} local signature set is version 2026052490478
May 26 2026 04:20:15 instant0279 maldet(30190): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
May 26 2026 04:20:15 instant0279 maldet(30190): {sigup} latest signature set already installed
May 26 2026 04:20:16 instant0279 maldet(30812): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
May 26 2026 04:20:16 instant0279 maldet(30812): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
May 26 2026 04:20:16 instant0279 maldet(30812): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
May 26 2026 04:20:16 instant0279 maldet(30812): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
May 26 2026 04:20:16 instant0279 maldet(30812): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
May 26 2026 04:20:51 instant0279 maldet(30812): {scan} file list completed in 35s, found 466 files...
May 26 2026 04:20:51 instant0279 maldet(30812): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
May 26 2026 04:20:51 instant0279 maldet(30812): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (466 files) in progress...
May 26 2026 04:21:24 instant0279 maldet(30812): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 466, malware hits 0, cleaned hits 0, time 68s
May 26 2026 04:21:24 instant0279 maldet(30812): {scan} scan report saved, to view run: maldet --report 260526-0420.30812
May 27 2026 03:16:12 instant0279 maldet(24739): {update} checking for available updates...
May 27 2026 03:16:13 instant0279 maldet(24739): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
May 27 2026 03:16:13 instant0279 maldet(24739): {update} hashing install files and checking against server...
May 27 2026 03:16:13 instant0279 maldet(24739): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
May 27 2026 03:16:13 instant0279 maldet(24739): {update} latest version already installed.
May 27 2026 03:16:13 instant0279 maldet(25354): {sigup} performing signature update check...
May 27 2026 03:16:13 instant0279 maldet(25354): {sigup} local signature set is version 2026052490478
May 27 2026 03:16:13 instant0279 maldet(25354): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
May 27 2026 03:16:13 instant0279 maldet(25354): {sigup} latest signature set already installed
May 27 2026 03:16:14 instant0279 maldet(25951): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
May 27 2026 03:16:14 instant0279 maldet(25951): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
May 27 2026 03:16:14 instant0279 maldet(25951): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
May 27 2026 03:16:14 instant0279 maldet(25951): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
May 27 2026 03:16:14 instant0279 maldet(25951): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
May 27 2026 03:16:48 instant0279 maldet(25951): {scan} file list completed in 34s, found 439 files...
May 27 2026 03:16:48 instant0279 maldet(25951): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
May 27 2026 03:16:48 instant0279 maldet(25951): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (439 files) in progress...
May 27 2026 03:17:51 instant0279 maldet(25951): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 439, malware hits 0, cleaned hits 0, time 97s
May 27 2026 03:17:51 instant0279 maldet(25951): {scan} scan report saved, to view run: maldet --report 260527-0316.25951
May 28 2026 03:28:23 instant0279 maldet(24336): {update} checking for available updates...
May 28 2026 03:28:24 instant0279 maldet(24336): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
May 28 2026 03:28:24 instant0279 maldet(24336): {update} hashing install files and checking against server...
May 28 2026 03:28:24 instant0279 maldet(24336): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
May 28 2026 03:28:24 instant0279 maldet(24336): {update} latest version already installed.
May 28 2026 03:28:25 instant0279 maldet(24968): {sigup} performing signature update check...
May 28 2026 03:28:25 instant0279 maldet(24968): {sigup} local signature set is version 2026052490478
May 28 2026 03:28:25 instant0279 maldet(24968): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
May 28 2026 03:28:25 instant0279 maldet(24968): {sigup} latest signature set already installed
May 28 2026 03:28:25 instant0279 maldet(25579): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
May 28 2026 03:28:26 instant0279 maldet(25579): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
May 28 2026 03:28:26 instant0279 maldet(25579): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
May 28 2026 03:28:26 instant0279 maldet(25579): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
May 28 2026 03:28:26 instant0279 maldet(25579): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
May 28 2026 03:28:59 instant0279 maldet(25579): {scan} file list completed in 33s, found 249 files...
May 28 2026 03:28:59 instant0279 maldet(25579): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
May 28 2026 03:28:59 instant0279 maldet(25579): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (249 files) in progress...
May 28 2026 03:29:17 instant0279 maldet(25579): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 249, malware hits 0, cleaned hits 0, time 52s
May 28 2026 03:29:17 instant0279 maldet(25579): {scan} scan report saved, to view run: maldet --report 260528-0328.25579
May 29 2026 03:22:55 instant0279 maldet(8259): {update} checking for available updates...
May 29 2026 03:22:55 instant0279 maldet(8259): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
May 29 2026 03:22:55 instant0279 maldet(8259): {update} hashing install files and checking against server...
May 29 2026 03:22:55 instant0279 maldet(8259): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
May 29 2026 03:22:55 instant0279 maldet(8259): {update} latest version already installed.
May 29 2026 03:22:56 instant0279 maldet(8872): {sigup} performing signature update check...
May 29 2026 03:22:56 instant0279 maldet(8872): {sigup} local signature set is version 2026052490478
May 29 2026 03:22:56 instant0279 maldet(8872): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
May 29 2026 03:22:56 instant0279 maldet(8872): {sigup} latest signature set already installed
May 29 2026 03:22:56 instant0279 maldet(9465): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
May 29 2026 03:22:57 instant0279 maldet(9465): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
May 29 2026 03:22:57 instant0279 maldet(9465): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
May 29 2026 03:22:57 instant0279 maldet(9465): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
May 29 2026 03:22:57 instant0279 maldet(9465): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
May 29 2026 03:23:30 instant0279 maldet(9465): {scan} file list completed in 33s, found 182 files...
May 29 2026 03:23:30 instant0279 maldet(9465): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
May 29 2026 03:23:30 instant0279 maldet(9465): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (182 files) in progress...
May 29 2026 03:23:56 instant0279 maldet(9465): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 182, malware hits 0, cleaned hits 0, time 60s
May 29 2026 03:23:56 instant0279 maldet(9465): {scan} scan report saved, to view run: maldet --report 260529-0322.9465
May 30 2026 03:46:44 instant0279 maldet(8808): {update} checking for available updates...
May 30 2026 03:46:44 instant0279 maldet(8808): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
May 30 2026 03:46:44 instant0279 maldet(8808): {update} hashing install files and checking against server...
May 30 2026 03:46:45 instant0279 maldet(8808): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
May 30 2026 03:46:45 instant0279 maldet(8808): {update} latest version already installed.
May 30 2026 03:46:45 instant0279 maldet(9416): {sigup} performing signature update check...
May 30 2026 03:46:45 instant0279 maldet(9416): {sigup} local signature set is version 2026052490478
May 30 2026 03:46:45 instant0279 maldet(9416): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
May 30 2026 03:46:45 instant0279 maldet(9416): {sigup} latest signature set already installed
May 30 2026 03:46:45 instant0279 maldet(10010): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
May 30 2026 03:46:46 instant0279 maldet(10010): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
May 30 2026 03:46:46 instant0279 maldet(10010): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
May 30 2026 03:46:46 instant0279 maldet(10010): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
May 30 2026 03:46:46 instant0279 maldet(10010): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
May 30 2026 03:47:19 instant0279 maldet(10010): {scan} file list completed in 33s, found 206 files...
May 30 2026 03:47:19 instant0279 maldet(10010): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
May 30 2026 03:47:19 instant0279 maldet(10010): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (206 files) in progress...
May 30 2026 03:47:47 instant0279 maldet(10010): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 206, malware hits 0, cleaned hits 0, time 62s
May 30 2026 03:47:47 instant0279 maldet(10010): {scan} scan report saved, to view run: maldet --report 260530-0346.10010
May 31 2026 03:23:44 instant0279 maldet(29996): {update} checking for available updates...
May 31 2026 03:23:44 instant0279 maldet(29996): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
May 31 2026 03:23:44 instant0279 maldet(29996): {update} hashing install files and checking against server...
May 31 2026 03:23:44 instant0279 maldet(29996): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
May 31 2026 03:23:44 instant0279 maldet(29996): {update} latest version already installed.
May 31 2026 03:23:45 instant0279 maldet(30626): {sigup} performing signature update check...
May 31 2026 03:23:45 instant0279 maldet(30626): {sigup} local signature set is version 2026052490478
May 31 2026 03:23:45 instant0279 maldet(30626): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
May 31 2026 03:23:45 instant0279 maldet(30626): {sigup} latest signature set already installed
May 31 2026 03:23:45 instant0279 maldet(31236): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
May 31 2026 03:23:46 instant0279 maldet(31236): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
May 31 2026 03:23:46 instant0279 maldet(31236): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
May 31 2026 03:23:46 instant0279 maldet(31236): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
May 31 2026 03:23:46 instant0279 maldet(31236): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
May 31 2026 03:24:20 instant0279 maldet(31236): {scan} file list completed in 34s, found 402 files...
May 31 2026 03:24:20 instant0279 maldet(31236): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
May 31 2026 03:24:20 instant0279 maldet(31236): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (402 files) in progress...
May 31 2026 03:25:23 instant0279 maldet(31236): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 402, malware hits 0, cleaned hits 0, time 98s
May 31 2026 03:25:23 instant0279 maldet(31236): {scan} scan report saved, to view run: maldet --report 260531-0323.31236
Jun 01 2026 03:44:06 instant0279 maldet(26503): {update} checking for available updates...
Jun 01 2026 03:44:07 instant0279 maldet(26503): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Jun 01 2026 03:44:07 instant0279 maldet(26503): {update} hashing install files and checking against server...
Jun 01 2026 03:44:07 instant0279 maldet(26503): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Jun 01 2026 03:44:07 instant0279 maldet(26503): {update} latest version already installed.
Jun 01 2026 03:44:07 instant0279 maldet(27121): {sigup} performing signature update check...
Jun 01 2026 03:44:07 instant0279 maldet(27121): {sigup} local signature set is version 2026052490478
Jun 01 2026 03:44:07 instant0279 maldet(27121): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Jun 01 2026 03:44:07 instant0279 maldet(27121): {sigup} latest signature set already installed
Jun 01 2026 03:44:08 instant0279 maldet(27724): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Jun 01 2026 03:44:33 instant0279 maldet(27724): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Jun 01 2026 03:44:33 instant0279 maldet(27724): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Jun 01 2026 03:44:33 instant0279 maldet(27724): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Jun 01 2026 03:44:33 instant0279 maldet(27724): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Jun 01 2026 03:44:52 instant0279 maldet(27724): {scan} file list completed in 19s, found 303 files...
Jun 01 2026 03:44:52 instant0279 maldet(27724): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Jun 01 2026 03:44:52 instant0279 maldet(27724): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (303 files) in progress...
Jun 01 2026 03:45:26 instant0279 maldet(27724): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 303, malware hits 0, cleaned hits 0, time 78s
Jun 01 2026 03:45:26 instant0279 maldet(27724): {scan} scan report saved, to view run: maldet --report 260601-0344.27724
Jun 02 2026 03:36:07 instant0279 maldet(17084): {update} checking for available updates...
Jun 02 2026 03:36:07 instant0279 maldet(17084): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Jun 02 2026 03:36:07 instant0279 maldet(17084): {update} hashing install files and checking against server...
Jun 02 2026 03:36:07 instant0279 maldet(17084): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Jun 02 2026 03:36:07 instant0279 maldet(17084): {update} latest version already installed.
Jun 02 2026 03:36:07 instant0279 maldet(17711): {sigup} performing signature update check...
Jun 02 2026 03:36:07 instant0279 maldet(17711): {sigup} local signature set is version 2026052490478
Jun 02 2026 03:36:08 instant0279 maldet(17711): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Jun 02 2026 03:36:08 instant0279 maldet(17711): {sigup} latest signature set already installed
Jun 02 2026 03:36:08 instant0279 maldet(18319): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Jun 02 2026 03:36:08 instant0279 maldet(18319): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Jun 02 2026 03:36:08 instant0279 maldet(18319): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Jun 02 2026 03:36:08 instant0279 maldet(18319): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Jun 02 2026 03:36:08 instant0279 maldet(18319): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Jun 02 2026 03:36:42 instant0279 maldet(18319): {scan} file list completed in 34s, found 199 files...
Jun 02 2026 03:36:42 instant0279 maldet(18319): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Jun 02 2026 03:36:42 instant0279 maldet(18319): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (199 files) in progress...
Jun 02 2026 03:36:50 instant0279 maldet(18319): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 199, malware hits 0, cleaned hits 0, time 42s
Jun 02 2026 03:36:50 instant0279 maldet(18319): {scan} scan report saved, to view run: maldet --report 260602-0336.18319
Jun 03 2026 03:30:39 instant0279 maldet(874): {update} checking for available updates...
Jun 03 2026 03:30:39 instant0279 maldet(874): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Jun 03 2026 03:30:39 instant0279 maldet(874): {update} hashing install files and checking against server...
Jun 03 2026 03:30:39 instant0279 maldet(874): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Jun 03 2026 03:30:39 instant0279 maldet(874): {update} latest version already installed.
Jun 03 2026 03:30:39 instant0279 maldet(1494): {sigup} performing signature update check...
Jun 03 2026 03:30:39 instant0279 maldet(1494): {sigup} local signature set is version 2026052490478
Jun 03 2026 03:30:40 instant0279 maldet(1494): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Jun 03 2026 03:30:40 instant0279 maldet(1494): {sigup} latest signature set already installed
Jun 03 2026 03:30:40 instant0279 maldet(2155): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Jun 03 2026 03:30:40 instant0279 maldet(2155): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Jun 03 2026 03:30:40 instant0279 maldet(2155): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Jun 03 2026 03:30:40 instant0279 maldet(2155): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Jun 03 2026 03:30:40 instant0279 maldet(2155): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Jun 03 2026 03:31:12 instant0279 maldet(2155): {scan} file list completed in 32s, found 454 files...
Jun 03 2026 03:31:12 instant0279 maldet(2155): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Jun 03 2026 03:31:12 instant0279 maldet(2155): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (454 files) in progress...
Jun 03 2026 03:31:58 instant0279 maldet(2155): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 454, malware hits 0, cleaned hits 0, time 78s
Jun 03 2026 03:31:58 instant0279 maldet(2155): {scan} scan report saved, to view run: maldet --report 260603-0330.2155
Jun 04 2026 03:22:42 instant0279 maldet(24823): {update} checking for available updates...
Jun 04 2026 03:22:42 instant0279 maldet(24823): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Jun 04 2026 03:22:42 instant0279 maldet(24823): {update} hashing install files and checking against server...
Jun 04 2026 03:22:42 instant0279 maldet(24823): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Jun 04 2026 03:22:42 instant0279 maldet(24823): {update} latest version already installed.
Jun 04 2026 03:22:42 instant0279 maldet(25456): {sigup} performing signature update check...
Jun 04 2026 03:22:42 instant0279 maldet(25456): {sigup} local signature set is version 2026052490478
Jun 04 2026 03:22:43 instant0279 maldet(25456): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Jun 04 2026 03:22:43 instant0279 maldet(25456): {sigup} latest signature set already installed
Jun 04 2026 03:22:43 instant0279 maldet(26068): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Jun 04 2026 03:22:43 instant0279 maldet(26068): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Jun 04 2026 03:22:43 instant0279 maldet(26068): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Jun 04 2026 03:22:43 instant0279 maldet(26068): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Jun 04 2026 03:22:43 instant0279 maldet(26068): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Jun 04 2026 03:23:18 instant0279 maldet(26068): {scan} file list completed in 35s, found 464 files...
Jun 04 2026 03:23:18 instant0279 maldet(26068): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Jun 04 2026 03:23:18 instant0279 maldet(26068): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (464 files) in progress...
Jun 04 2026 03:24:02 instant0279 maldet(26068): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 464, malware hits 0, cleaned hits 0, time 79s
Jun 04 2026 03:24:02 instant0279 maldet(26068): {scan} scan report saved, to view run: maldet --report 260604-0322.26068
Jun 05 2026 03:42:59 instant0279 maldet(11066): {update} checking for available updates...
Jun 05 2026 03:42:59 instant0279 maldet(11066): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Jun 05 2026 03:42:59 instant0279 maldet(11066): {update} hashing install files and checking against server...
Jun 05 2026 03:43:00 instant0279 maldet(11066): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Jun 05 2026 03:43:00 instant0279 maldet(11066): {update} latest version already installed.
Jun 05 2026 03:43:00 instant0279 maldet(11709): {sigup} performing signature update check...
Jun 05 2026 03:43:00 instant0279 maldet(11709): {sigup} local signature set is version 2026052490478
Jun 05 2026 03:43:00 instant0279 maldet(11709): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Jun 05 2026 03:43:00 instant0279 maldet(11709): {sigup} latest signature set already installed
Jun 05 2026 03:43:01 instant0279 maldet(12332): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Jun 05 2026 03:43:01 instant0279 maldet(12332): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Jun 05 2026 03:43:01 instant0279 maldet(12332): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Jun 05 2026 03:43:01 instant0279 maldet(12332): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Jun 05 2026 03:43:01 instant0279 maldet(12332): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Jun 05 2026 03:43:35 instant0279 maldet(12332): {scan} file list completed in 34s, found 329 files...
Jun 05 2026 03:43:35 instant0279 maldet(12332): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Jun 05 2026 03:43:35 instant0279 maldet(12332): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (329 files) in progress...
Jun 05 2026 03:44:10 instant0279 maldet(12332): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 329, malware hits 0, cleaned hits 0, time 69s
Jun 05 2026 03:44:10 instant0279 maldet(12332): {scan} scan report saved, to view run: maldet --report 260605-0343.12332
Jun 06 2026 03:17:03 instant0279 maldet(28808): {update} checking for available updates...
Jun 06 2026 03:17:04 instant0279 maldet(28808): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Jun 06 2026 03:17:04 instant0279 maldet(28808): {update} hashing install files and checking against server...
Jun 06 2026 03:17:04 instant0279 maldet(28808): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Jun 06 2026 03:17:04 instant0279 maldet(28808): {update} latest version already installed.
Jun 06 2026 03:17:04 instant0279 maldet(29417): {sigup} performing signature update check...
Jun 06 2026 03:17:04 instant0279 maldet(29417): {sigup} local signature set is version 2026052490478
Jun 06 2026 03:17:04 instant0279 maldet(29417): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Jun 06 2026 03:17:04 instant0279 maldet(29417): {sigup} latest signature set already installed
Jun 06 2026 03:17:05 instant0279 maldet(30005): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Jun 06 2026 03:17:05 instant0279 maldet(30005): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Jun 06 2026 03:17:05 instant0279 maldet(30005): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Jun 06 2026 03:17:05 instant0279 maldet(30005): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Jun 06 2026 03:17:05 instant0279 maldet(30005): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Jun 06 2026 03:17:37 instant0279 maldet(30005): {scan} file list completed in 32s, found 414 files...
Jun 06 2026 03:17:37 instant0279 maldet(30005): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Jun 06 2026 03:17:37 instant0279 maldet(30005): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (414 files) in progress...
Jun 06 2026 03:18:17 instant0279 maldet(30005): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 414, malware hits 0, cleaned hits 0, time 72s
Jun 06 2026 03:18:17 instant0279 maldet(30005): {scan} scan report saved, to view run: maldet --report 260606-0317.30005
Jun 07 2026 03:45:16 instant0279 maldet(2808): {update} checking for available updates...
Jun 07 2026 03:45:16 instant0279 maldet(2808): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Jun 07 2026 03:45:16 instant0279 maldet(2808): {update} hashing install files and checking against server...
Jun 07 2026 03:45:16 instant0279 maldet(2808): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Jun 07 2026 03:45:16 instant0279 maldet(2808): {update} latest version already installed.
Jun 07 2026 03:45:16 instant0279 maldet(3483): {sigup} performing signature update check...
Jun 07 2026 03:45:16 instant0279 maldet(3483): {sigup} local signature set is version 2026052490478
Jun 07 2026 03:45:17 instant0279 maldet(3483): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Jun 07 2026 03:45:17 instant0279 maldet(3483): {sigup} latest signature set already installed
Jun 07 2026 03:45:17 instant0279 maldet(4090): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Jun 07 2026 03:45:17 instant0279 maldet(4090): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Jun 07 2026 03:45:17 instant0279 maldet(4090): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Jun 07 2026 03:45:17 instant0279 maldet(4090): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Jun 07 2026 03:45:17 instant0279 maldet(4090): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Jun 07 2026 03:45:52 instant0279 maldet(4090): {scan} file list completed in 35s, found 303 files...
Jun 07 2026 03:45:52 instant0279 maldet(4090): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Jun 07 2026 03:45:52 instant0279 maldet(4090): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (303 files) in progress...
Jun 07 2026 03:46:24 instant0279 maldet(4090): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 303, malware hits 0, cleaned hits 0, time 67s
Jun 07 2026 03:46:24 instant0279 maldet(4090): {scan} scan report saved, to view run: maldet --report 260607-0345.4090
Jun 08 2026 03:47:06 instant0279 maldet(15120): {update} checking for available updates...
Jun 08 2026 03:47:06 instant0279 maldet(15120): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Jun 08 2026 03:47:06 instant0279 maldet(15120): {update} hashing install files and checking against server...
Jun 08 2026 03:47:07 instant0279 maldet(15120): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Jun 08 2026 03:47:07 instant0279 maldet(15120): {update} latest version already installed.
Jun 08 2026 03:47:07 instant0279 maldet(15723): {sigup} performing signature update check...
Jun 08 2026 03:47:07 instant0279 maldet(15723): {sigup} local signature set is version 2026052490478
Jun 08 2026 03:47:07 instant0279 maldet(15723): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Jun 08 2026 03:47:07 instant0279 maldet(15723): {sigup} latest signature set already installed
Jun 08 2026 03:47:08 instant0279 maldet(16309): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Jun 08 2026 03:47:08 instant0279 maldet(16309): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Jun 08 2026 03:47:08 instant0279 maldet(16309): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Jun 08 2026 03:47:08 instant0279 maldet(16309): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Jun 08 2026 03:47:08 instant0279 maldet(16309): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Jun 08 2026 03:47:42 instant0279 maldet(16309): {scan} file list completed in 34s, found 401 files...
Jun 08 2026 03:47:42 instant0279 maldet(16309): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Jun 08 2026 03:47:42 instant0279 maldet(16309): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (401 files) in progress...
Jun 08 2026 03:48:25 instant0279 maldet(16309): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 401, malware hits 0, cleaned hits 0, time 77s
Jun 08 2026 03:48:25 instant0279 maldet(16309): {scan} scan report saved, to view run: maldet --report 260608-0347.16309
Jun 09 2026 03:30:43 instant0279 maldet(4164): {update} checking for available updates...
Jun 09 2026 03:30:43 instant0279 maldet(4164): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Jun 09 2026 03:30:43 instant0279 maldet(4164): {update} hashing install files and checking against server...
Jun 09 2026 03:30:43 instant0279 maldet(4164): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Jun 09 2026 03:30:43 instant0279 maldet(4164): {update} latest version already installed.
Jun 09 2026 03:30:43 instant0279 maldet(4787): {sigup} performing signature update check...
Jun 09 2026 03:30:43 instant0279 maldet(4787): {sigup} local signature set is version 2026052490478
Jun 09 2026 03:30:44 instant0279 maldet(4787): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Jun 09 2026 03:30:44 instant0279 maldet(4787): {sigup} latest signature set already installed
Jun 09 2026 03:30:44 instant0279 maldet(5385): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Jun 09 2026 03:31:04 instant0279 maldet(5385): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Jun 09 2026 03:31:04 instant0279 maldet(5385): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Jun 09 2026 03:31:04 instant0279 maldet(5385): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Jun 09 2026 03:31:04 instant0279 maldet(5385): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Jun 09 2026 03:31:26 instant0279 maldet(5385): {scan} file list completed in 22s, found 346 files...
Jun 09 2026 03:31:26 instant0279 maldet(5385): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Jun 09 2026 03:31:26 instant0279 maldet(5385): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (346 files) in progress...
Jun 09 2026 03:32:05 instant0279 maldet(5385): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 346, malware hits 0, cleaned hits 0, time 81s
Jun 09 2026 03:32:05 instant0279 maldet(5385): {scan} scan report saved, to view run: maldet --report 260609-0330.5385
Jun 10 2026 03:56:57 instant0279 maldet(28738): {update} checking for available updates...
Jun 10 2026 03:56:57 instant0279 maldet(28738): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Jun 10 2026 03:56:57 instant0279 maldet(28738): {update} hashing install files and checking against server...
Jun 10 2026 03:56:58 instant0279 maldet(28738): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Jun 10 2026 03:56:58 instant0279 maldet(28738): {update} latest version already installed.
Jun 10 2026 03:56:58 instant0279 maldet(29416): {sigup} performing signature update check...
Jun 10 2026 03:56:58 instant0279 maldet(29416): {sigup} local signature set is version 2026052490478
Jun 10 2026 03:56:58 instant0279 maldet(29416): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Jun 10 2026 03:56:58 instant0279 maldet(29416): {sigup} latest signature set already installed
Jun 10 2026 03:56:59 instant0279 maldet(30026): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Jun 10 2026 03:56:59 instant0279 maldet(30026): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Jun 10 2026 03:56:59 instant0279 maldet(30026): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Jun 10 2026 03:56:59 instant0279 maldet(30026): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Jun 10 2026 03:56:59 instant0279 maldet(30026): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Jun 10 2026 03:57:32 instant0279 maldet(30026): {scan} file list completed in 33s, found 583 files...
Jun 10 2026 03:57:32 instant0279 maldet(30026): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Jun 10 2026 03:57:32 instant0279 maldet(30026): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (583 files) in progress...
Jun 10 2026 03:58:22 instant0279 maldet(30026): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 583, malware hits 0, cleaned hits 0, time 83s
Jun 10 2026 03:58:22 instant0279 maldet(30026): {scan} scan report saved, to view run: maldet --report 260610-0356.30026
Jun 11 2026 03:55:05 instant0279 maldet(6398): {update} checking for available updates...
Jun 11 2026 03:55:05 instant0279 maldet(6398): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Jun 11 2026 03:55:05 instant0279 maldet(6398): {update} hashing install files and checking against server...
Jun 11 2026 03:55:06 instant0279 maldet(6398): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Jun 11 2026 03:55:06 instant0279 maldet(6398): {update} latest version already installed.
Jun 11 2026 03:55:06 instant0279 maldet(7085): {sigup} performing signature update check...
Jun 11 2026 03:55:06 instant0279 maldet(7085): {sigup} local signature set is version 2026052490478
Jun 11 2026 03:55:06 instant0279 maldet(7085): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Jun 11 2026 03:55:06 instant0279 maldet(7085): {sigup} latest signature set already installed
Jun 11 2026 03:55:06 instant0279 maldet(7735): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Jun 11 2026 03:55:07 instant0279 maldet(7735): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Jun 11 2026 03:55:07 instant0279 maldet(7735): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Jun 11 2026 03:55:07 instant0279 maldet(7735): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Jun 11 2026 03:55:07 instant0279 maldet(7735): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Jun 11 2026 03:55:40 instant0279 maldet(7735): {scan} file list completed in 33s, found 286 files...
Jun 11 2026 03:55:40 instant0279 maldet(7735): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Jun 11 2026 03:55:40 instant0279 maldet(7735): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (286 files) in progress...
Jun 11 2026 03:56:13 instant0279 maldet(7735): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 286, malware hits 0, cleaned hits 0, time 66s
Jun 11 2026 03:56:13 instant0279 maldet(7735): {scan} scan report saved, to view run: maldet --report 260611-0355.7735
Jun 12 2026 04:47:35 instant0279 maldet(31633): {update} checking for available updates...
Jun 12 2026 04:47:35 instant0279 maldet(31633): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Jun 12 2026 04:47:35 instant0279 maldet(31633): {update} hashing install files and checking against server...
Jun 12 2026 04:47:36 instant0279 maldet(31633): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Jun 12 2026 04:47:36 instant0279 maldet(31633): {update} latest version already installed.
Jun 12 2026 04:47:36 instant0279 maldet(32248): {sigup} performing signature update check...
Jun 12 2026 04:47:36 instant0279 maldet(32248): {sigup} local signature set is version 2026052490478
Jun 12 2026 04:47:36 instant0279 maldet(32248): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Jun 12 2026 04:47:36 instant0279 maldet(32248): {sigup} latest signature set already installed
Jun 12 2026 04:47:37 instant0279 maldet(376): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Jun 12 2026 04:47:55 instant0279 maldet(376): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Jun 12 2026 04:47:55 instant0279 maldet(376): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Jun 12 2026 04:47:55 instant0279 maldet(376): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Jun 12 2026 04:47:55 instant0279 maldet(376): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Jun 12 2026 04:48:16 instant0279 maldet(376): {scan} file list completed in 21s, found 279 files...
Jun 12 2026 04:48:16 instant0279 maldet(376): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Jun 12 2026 04:48:16 instant0279 maldet(376): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (279 files) in progress...
Jun 12 2026 04:48:48 instant0279 maldet(376): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 279, malware hits 0, cleaned hits 0, time 71s
Jun 12 2026 04:48:48 instant0279 maldet(376): {scan} scan report saved, to view run: maldet --report 260612-0447.376
Jun 13 2026 03:31:10 instant0279 maldet(14910): {update} checking for available updates...
Jun 13 2026 03:31:10 instant0279 maldet(14910): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Jun 13 2026 03:31:10 instant0279 maldet(14910): {update} hashing install files and checking against server...
Jun 13 2026 03:31:10 instant0279 maldet(14910): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Jun 13 2026 03:31:10 instant0279 maldet(14910): {update} latest version already installed.
Jun 13 2026 03:31:11 instant0279 maldet(15524): {sigup} performing signature update check...
Jun 13 2026 03:31:11 instant0279 maldet(15524): {sigup} local signature set is version 2026052490478
Jun 13 2026 03:31:11 instant0279 maldet(15524): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Jun 13 2026 03:31:11 instant0279 maldet(15524): {sigup} latest signature set already installed
Jun 13 2026 03:31:11 instant0279 maldet(16116): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Jun 13 2026 03:31:30 instant0279 maldet(16116): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Jun 13 2026 03:31:30 instant0279 maldet(16116): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Jun 13 2026 03:31:30 instant0279 maldet(16116): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Jun 13 2026 03:31:30 instant0279 maldet(16116): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Jun 13 2026 03:31:52 instant0279 maldet(16116): {scan} file list completed in 22s, found 274 files...
Jun 13 2026 03:31:52 instant0279 maldet(16116): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Jun 13 2026 03:31:52 instant0279 maldet(16116): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (274 files) in progress...
Jun 13 2026 03:32:22 instant0279 maldet(16116): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 274, malware hits 0, cleaned hits 0, time 71s
Jun 13 2026 03:32:22 instant0279 maldet(16116): {scan} scan report saved, to view run: maldet --report 260613-0331.16116
Jun 14 2026 03:52:38 instant0279 maldet(18499): {update} checking for available updates...
Jun 14 2026 03:52:38 instant0279 maldet(18499): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Jun 14 2026 03:52:38 instant0279 maldet(18499): {update} hashing install files and checking against server...
Jun 14 2026 03:52:38 instant0279 maldet(18499): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Jun 14 2026 03:52:38 instant0279 maldet(18499): {update} latest version already installed.
Jun 14 2026 03:52:39 instant0279 maldet(19135): {sigup} performing signature update check...
Jun 14 2026 03:52:39 instant0279 maldet(19135): {sigup} local signature set is version 2026052490478
Jun 14 2026 03:52:39 instant0279 maldet(19135): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Jun 14 2026 03:52:39 instant0279 maldet(19135): {sigup} latest signature set already installed
Jun 14 2026 03:52:39 instant0279 maldet(19743): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Jun 14 2026 03:52:58 instant0279 maldet(19743): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Jun 14 2026 03:52:58 instant0279 maldet(19743): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Jun 14 2026 03:52:58 instant0279 maldet(19743): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Jun 14 2026 03:52:58 instant0279 maldet(19743): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Jun 14 2026 03:53:23 instant0279 maldet(19743): {scan} file list completed in 25s, found 447 files...
Jun 14 2026 03:53:23 instant0279 maldet(19743): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Jun 14 2026 03:53:23 instant0279 maldet(19743): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (447 files) in progress...
Jun 14 2026 03:54:04 instant0279 maldet(19743): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 447, malware hits 0, cleaned hits 0, time 84s
Jun 14 2026 03:54:04 instant0279 maldet(19743): {scan} scan report saved, to view run: maldet --report 260614-0352.19743
Jun 15 2026 03:44:42 instant0279 maldet(27751): {update} checking for available updates...
Jun 15 2026 03:44:42 instant0279 maldet(27751): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Jun 15 2026 03:44:42 instant0279 maldet(27751): {update} hashing install files and checking against server...
Jun 15 2026 03:44:43 instant0279 maldet(27751): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Jun 15 2026 03:44:43 instant0279 maldet(27751): {update} latest version already installed.
Jun 15 2026 03:44:43 instant0279 maldet(28404): {sigup} performing signature update check...
Jun 15 2026 03:44:43 instant0279 maldet(28404): {sigup} local signature set is version 2026052490478
Jun 15 2026 03:44:43 instant0279 maldet(28404): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Jun 15 2026 03:44:43 instant0279 maldet(28404): {sigup} latest signature set already installed
Jun 15 2026 03:44:43 instant0279 maldet(29061): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Jun 15 2026 03:44:44 instant0279 maldet(29061): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Jun 15 2026 03:44:44 instant0279 maldet(29061): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Jun 15 2026 03:44:44 instant0279 maldet(29061): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Jun 15 2026 03:44:44 instant0279 maldet(29061): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Jun 15 2026 03:45:18 instant0279 maldet(29061): {scan} file list completed in 34s, found 308 files...
Jun 15 2026 03:45:18 instant0279 maldet(29061): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Jun 15 2026 03:45:18 instant0279 maldet(29061): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (308 files) in progress...
Jun 15 2026 03:45:35 instant0279 maldet(29061): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 308, malware hits 0, cleaned hits 0, time 51s
Jun 15 2026 03:45:35 instant0279 maldet(29061): {scan} scan report saved, to view run: maldet --report 260615-0344.29061
Jun 16 2026 03:18:30 instant0279 maldet(4821): {update} checking for available updates...
Jun 16 2026 03:18:30 instant0279 maldet(4821): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Jun 16 2026 03:18:30 instant0279 maldet(4821): {update} hashing install files and checking against server...
Jun 16 2026 03:18:30 instant0279 maldet(4821): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Jun 16 2026 03:18:30 instant0279 maldet(4821): {update} latest version already installed.
Jun 16 2026 03:18:31 instant0279 maldet(5461): {sigup} performing signature update check...
Jun 16 2026 03:18:31 instant0279 maldet(5461): {sigup} local signature set is version 2026052490478
Jun 16 2026 03:18:31 instant0279 maldet(5461): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Jun 16 2026 03:18:31 instant0279 maldet(5461): {sigup} latest signature set already installed
Jun 16 2026 03:18:31 instant0279 maldet(6086): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Jun 16 2026 03:18:32 instant0279 maldet(6086): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Jun 16 2026 03:18:32 instant0279 maldet(6086): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Jun 16 2026 03:18:32 instant0279 maldet(6086): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Jun 16 2026 03:18:32 instant0279 maldet(6086): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Jun 16 2026 03:19:08 instant0279 maldet(6086): {scan} file list completed in 36s, found 246 files...
Jun 16 2026 03:19:08 instant0279 maldet(6086): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Jun 16 2026 03:19:08 instant0279 maldet(6086): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (246 files) in progress...
Jun 16 2026 03:19:39 instant0279 maldet(6086): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 246, malware hits 0, cleaned hits 0, time 68s
Jun 16 2026 03:19:39 instant0279 maldet(6086): {scan} scan report saved, to view run: maldet --report 260616-0318.6086
Jun 17 2026 03:27:09 instant0279 maldet(9072): {update} checking for available updates...
Jun 17 2026 03:27:10 instant0279 maldet(9072): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Jun 17 2026 03:27:10 instant0279 maldet(9072): {update} hashing install files and checking against server...
Jun 17 2026 03:27:10 instant0279 maldet(9072): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Jun 17 2026 03:27:10 instant0279 maldet(9072): {update} latest version already installed.
Jun 17 2026 03:27:10 instant0279 maldet(9714): {sigup} performing signature update check...
Jun 17 2026 03:27:10 instant0279 maldet(9714): {sigup} local signature set is version 2026052490478
Jun 17 2026 03:27:10 instant0279 maldet(9714): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Jun 17 2026 03:27:10 instant0279 maldet(9714): {sigup} latest signature set already installed
Jun 17 2026 03:27:11 instant0279 maldet(10380): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Jun 17 2026 03:27:11 instant0279 maldet(10380): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Jun 17 2026 03:27:11 instant0279 maldet(10380): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Jun 17 2026 03:27:11 instant0279 maldet(10380): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Jun 17 2026 03:27:11 instant0279 maldet(10380): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Jun 17 2026 03:27:46 instant0279 maldet(10380): {scan} file list completed in 35s, found 309 files...
Jun 17 2026 03:27:46 instant0279 maldet(10380): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Jun 17 2026 03:27:46 instant0279 maldet(10380): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (309 files) in progress...
Jun 17 2026 03:28:22 instant0279 maldet(10380): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 309, malware hits 0, cleaned hits 0, time 71s
Jun 17 2026 03:28:22 instant0279 maldet(10380): {scan} scan report saved, to view run: maldet --report 260617-0327.10380
Jun 18 2026 03:50:53 instant0279 maldet(24616): {update} checking for available updates...
Jun 18 2026 03:50:54 instant0279 maldet(24616): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Jun 18 2026 03:50:54 instant0279 maldet(24616): {update} hashing install files and checking against server...
Jun 18 2026 03:50:54 instant0279 maldet(24616): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Jun 18 2026 03:50:54 instant0279 maldet(24616): {update} latest version already installed.
Jun 18 2026 03:50:54 instant0279 maldet(25264): {sigup} performing signature update check...
Jun 18 2026 03:50:54 instant0279 maldet(25264): {sigup} local signature set is version 2026052490478
Jun 18 2026 03:50:55 instant0279 maldet(25264): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Jun 18 2026 03:50:55 instant0279 maldet(25264): {sigup} latest signature set already installed
Jun 18 2026 03:50:55 instant0279 maldet(25889): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Jun 18 2026 03:50:55 instant0279 maldet(25889): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Jun 18 2026 03:50:55 instant0279 maldet(25889): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Jun 18 2026 03:50:55 instant0279 maldet(25889): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Jun 18 2026 03:50:55 instant0279 maldet(25889): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Jun 18 2026 03:51:29 instant0279 maldet(25889): {scan} file list completed in 34s, found 369 files...
Jun 18 2026 03:51:29 instant0279 maldet(25889): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Jun 18 2026 03:51:29 instant0279 maldet(25889): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (369 files) in progress...
Jun 18 2026 03:52:11 instant0279 maldet(25889): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 369, malware hits 0, cleaned hits 0, time 76s
Jun 18 2026 03:52:11 instant0279 maldet(25889): {scan} scan report saved, to view run: maldet --report 260618-0350.25889
Jun 19 2026 03:20:15 instant0279 maldet(30877): {update} checking for available updates...
Jun 19 2026 03:20:15 instant0279 maldet(30877): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Jun 19 2026 03:20:15 instant0279 maldet(30877): {update} hashing install files and checking against server...
Jun 19 2026 03:20:16 instant0279 maldet(30877): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Jun 19 2026 03:20:16 instant0279 maldet(30877): {update} latest version already installed.
Jun 19 2026 03:20:16 instant0279 maldet(31568): {sigup} performing signature update check...
Jun 19 2026 03:20:16 instant0279 maldet(31568): {sigup} local signature set is version 2026052490478
Jun 19 2026 03:20:16 instant0279 maldet(31568): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Jun 19 2026 03:20:16 instant0279 maldet(31568): {sigup} latest signature set already installed
Jun 19 2026 03:20:17 instant0279 maldet(32198): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Jun 19 2026 03:20:17 instant0279 maldet(32198): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Jun 19 2026 03:20:17 instant0279 maldet(32198): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Jun 19 2026 03:20:17 instant0279 maldet(32198): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Jun 19 2026 03:20:17 instant0279 maldet(32198): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Jun 19 2026 03:20:51 instant0279 maldet(32198): {scan} file list completed in 34s, found 3429 files...
Jun 19 2026 03:20:51 instant0279 maldet(32198): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Jun 19 2026 03:20:51 instant0279 maldet(32198): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (3429 files) in progress...
Jun 19 2026 03:23:52 instant0279 maldet(32198): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 3429, malware hits 0, cleaned hits 0, time 215s
Jun 19 2026 03:23:52 instant0279 maldet(32198): {scan} scan report saved, to view run: maldet --report 260619-0320.32198
Jun 20 2026 03:49:46 instant0279 maldet(21177): {update} checking for available updates...
Jun 20 2026 03:49:46 instant0279 maldet(21177): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Jun 20 2026 03:49:46 instant0279 maldet(21177): {update} hashing install files and checking against server...
Jun 20 2026 03:49:46 instant0279 maldet(21177): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Jun 20 2026 03:49:47 instant0279 maldet(21177): {update} latest version already installed.
Jun 20 2026 03:49:47 instant0279 maldet(21804): {sigup} performing signature update check...
Jun 20 2026 03:49:47 instant0279 maldet(21804): {sigup} local signature set is version 2026052490478
Jun 20 2026 03:49:47 instant0279 maldet(21804): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Jun 20 2026 03:49:47 instant0279 maldet(21804): {sigup} latest signature set already installed
Jun 20 2026 03:49:48 instant0279 maldet(22431): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Jun 20 2026 03:49:48 instant0279 maldet(22431): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Jun 20 2026 03:49:48 instant0279 maldet(22431): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Jun 20 2026 03:49:48 instant0279 maldet(22431): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Jun 20 2026 03:49:48 instant0279 maldet(22431): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Jun 20 2026 03:50:25 instant0279 maldet(22431): {scan} file list completed in 37s, found 608 files...
Jun 20 2026 03:50:25 instant0279 maldet(22431): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Jun 20 2026 03:50:25 instant0279 maldet(22431): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (608 files) in progress...
Jun 20 2026 03:51:03 instant0279 maldet(22431): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 608, malware hits 0, cleaned hits 0, time 75s
Jun 20 2026 03:51:03 instant0279 maldet(22431): {scan} scan report saved, to view run: maldet --report 260620-0349.22431
Jun 21 2026 03:11:55 instant0279 maldet(32585): {update} checking for available updates...
Jun 21 2026 03:11:55 instant0279 maldet(32585): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Jun 21 2026 03:11:55 instant0279 maldet(32585): {update} hashing install files and checking against server...
Jun 21 2026 03:11:56 instant0279 maldet(32585): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Jun 21 2026 03:11:56 instant0279 maldet(32585): {update} latest version already installed.
Jun 21 2026 03:11:56 instant0279 maldet(740): {sigup} performing signature update check...
Jun 21 2026 03:11:56 instant0279 maldet(740): {sigup} local signature set is version 2026052490478
Jun 21 2026 03:11:56 instant0279 maldet(740): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Jun 21 2026 03:11:56 instant0279 maldet(740): {sigup} latest signature set already installed
Jun 21 2026 03:11:56 instant0279 maldet(1347): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Jun 21 2026 03:11:57 instant0279 maldet(1347): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Jun 21 2026 03:11:57 instant0279 maldet(1347): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Jun 21 2026 03:11:57 instant0279 maldet(1347): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Jun 21 2026 03:11:57 instant0279 maldet(1347): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Jun 21 2026 03:12:31 instant0279 maldet(1347): {scan} file list completed in 34s, found 379 files...
Jun 21 2026 03:12:31 instant0279 maldet(1347): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Jun 21 2026 03:12:31 instant0279 maldet(1347): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (379 files) in progress...
Jun 21 2026 03:13:10 instant0279 maldet(1347): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 379, malware hits 0, cleaned hits 0, time 74s
Jun 21 2026 03:13:10 instant0279 maldet(1347): {scan} scan report saved, to view run: maldet --report 260621-0311.1347
Jun 22 2026 03:18:11 instant0279 maldet(1144): {update} checking for available updates...
Jun 22 2026 03:18:11 instant0279 maldet(1144): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Jun 22 2026 03:18:11 instant0279 maldet(1144): {update} hashing install files and checking against server...
Jun 22 2026 03:18:11 instant0279 maldet(1144): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Jun 22 2026 03:18:11 instant0279 maldet(1144): {update} latest version already installed.
Jun 22 2026 03:18:12 instant0279 maldet(1793): {sigup} performing signature update check...
Jun 22 2026 03:18:12 instant0279 maldet(1793): {sigup} local signature set is version 2026052490478
Jun 22 2026 03:18:12 instant0279 maldet(1793): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Jun 22 2026 03:18:12 instant0279 maldet(1793): {sigup} latest signature set already installed
Jun 22 2026 03:18:12 instant0279 maldet(2432): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Jun 22 2026 03:18:13 instant0279 maldet(2432): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Jun 22 2026 03:18:13 instant0279 maldet(2432): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Jun 22 2026 03:18:13 instant0279 maldet(2432): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Jun 22 2026 03:18:13 instant0279 maldet(2432): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Jun 22 2026 03:18:48 instant0279 maldet(2432): {scan} file list completed in 35s, found 303 files...
Jun 22 2026 03:18:48 instant0279 maldet(2432): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Jun 22 2026 03:18:48 instant0279 maldet(2432): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (303 files) in progress...
Jun 22 2026 03:19:24 instant0279 maldet(2432): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 303, malware hits 0, cleaned hits 0, time 72s
Jun 22 2026 03:19:24 instant0279 maldet(2432): {scan} scan report saved, to view run: maldet --report 260622-0318.2432
Jun 23 2026 03:39:42 instant0279 maldet(18474): {update} checking for available updates...
Jun 23 2026 03:39:43 instant0279 maldet(18474): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Jun 23 2026 03:39:43 instant0279 maldet(18474): {update} hashing install files and checking against server...
Jun 23 2026 03:39:43 instant0279 maldet(18474): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Jun 23 2026 03:39:43 instant0279 maldet(18474): {update} latest version already installed.
Jun 23 2026 03:39:43 instant0279 maldet(19100): {sigup} performing signature update check...
Jun 23 2026 03:39:43 instant0279 maldet(19100): {sigup} local signature set is version 2026052490478
Jun 23 2026 03:39:43 instant0279 maldet(19100): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Jun 23 2026 03:39:43 instant0279 maldet(19100): {sigup} latest signature set already installed
Jun 23 2026 03:39:44 instant0279 maldet(19710): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Jun 23 2026 03:39:44 instant0279 maldet(19710): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Jun 23 2026 03:39:44 instant0279 maldet(19710): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Jun 23 2026 03:39:44 instant0279 maldet(19710): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Jun 23 2026 03:39:44 instant0279 maldet(19710): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Jun 23 2026 03:40:18 instant0279 maldet(19710): {scan} file list completed in 34s, found 369 files...
Jun 23 2026 03:40:18 instant0279 maldet(19710): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Jun 23 2026 03:40:18 instant0279 maldet(19710): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (369 files) in progress...
Jun 23 2026 03:40:56 instant0279 maldet(19710): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 369, malware hits 0, cleaned hits 0, time 72s
Jun 23 2026 03:40:56 instant0279 maldet(19710): {scan} scan report saved, to view run: maldet --report 260623-0339.19710
Jun 24 2026 03:43:28 instant0279 maldet(22169): {update} checking for available updates...
Jun 24 2026 03:43:28 instant0279 maldet(22169): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Jun 24 2026 03:43:28 instant0279 maldet(22169): {update} hashing install files and checking against server...
Jun 24 2026 03:43:29 instant0279 maldet(22169): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Jun 24 2026 03:43:29 instant0279 maldet(22169): {update} latest version already installed.
Jun 24 2026 03:43:29 instant0279 maldet(22811): {sigup} performing signature update check...
Jun 24 2026 03:43:29 instant0279 maldet(22811): {sigup} local signature set is version 2026052490478
Jun 24 2026 03:43:29 instant0279 maldet(22811): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Jun 24 2026 03:43:29 instant0279 maldet(22811): {sigup} latest signature set already installed
Jun 24 2026 03:43:30 instant0279 maldet(23431): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Jun 24 2026 03:43:30 instant0279 maldet(23431): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Jun 24 2026 03:43:30 instant0279 maldet(23431): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Jun 24 2026 03:43:30 instant0279 maldet(23431): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Jun 24 2026 03:43:30 instant0279 maldet(23431): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Jun 24 2026 03:44:02 instant0279 maldet(23431): {scan} file list completed in 32s, found 433 files...
Jun 24 2026 03:44:02 instant0279 maldet(23431): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Jun 24 2026 03:44:02 instant0279 maldet(23431): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (433 files) in progress...
Jun 24 2026 03:44:47 instant0279 maldet(23431): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 433, malware hits 0, cleaned hits 0, time 77s
Jun 24 2026 03:44:47 instant0279 maldet(23431): {scan} scan report saved, to view run: maldet --report 260624-0343.23431
Jun 25 2026 04:09:57 instant0279 maldet(4922): {update} checking for available updates...
Jun 25 2026 04:09:58 instant0279 maldet(4922): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Jun 25 2026 04:09:58 instant0279 maldet(4922): {update} hashing install files and checking against server...
Jun 25 2026 04:09:58 instant0279 maldet(4922): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Jun 25 2026 04:09:58 instant0279 maldet(4922): {update} latest version already installed.
Jun 25 2026 04:09:58 instant0279 maldet(5548): {sigup} performing signature update check...
Jun 25 2026 04:09:58 instant0279 maldet(5548): {sigup} local signature set is version 2026052490478
Jun 25 2026 04:09:58 instant0279 maldet(5548): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Jun 25 2026 04:09:58 instant0279 maldet(5548): {sigup} latest signature set already installed
Jun 25 2026 04:09:59 instant0279 maldet(6181): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Jun 25 2026 04:09:59 instant0279 maldet(6181): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Jun 25 2026 04:09:59 instant0279 maldet(6181): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Jun 25 2026 04:09:59 instant0279 maldet(6181): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Jun 25 2026 04:09:59 instant0279 maldet(6181): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Jun 25 2026 04:10:34 instant0279 maldet(6181): {scan} file list completed in 35s, found 3309 files...
Jun 25 2026 04:10:34 instant0279 maldet(6181): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Jun 25 2026 04:10:34 instant0279 maldet(6181): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (3309 files) in progress...
Jun 25 2026 04:12:46 instant0279 maldet(6181): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 3309, malware hits 0, cleaned hits 0, time 167s
Jun 25 2026 04:12:46 instant0279 maldet(6181): {scan} scan report saved, to view run: maldet --report 260625-0409.6181
Jun 26 2026 04:34:52 instant0279 maldet(26765): {update} checking for available updates...
Jun 26 2026 04:34:53 instant0279 maldet(26765): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Jun 26 2026 04:34:53 instant0279 maldet(26765): {update} hashing install files and checking against server...
Jun 26 2026 04:34:53 instant0279 maldet(26765): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Jun 26 2026 04:34:53 instant0279 maldet(26765): {update} latest version already installed.
Jun 26 2026 04:34:54 instant0279 maldet(27383): {sigup} performing signature update check...
Jun 26 2026 04:34:54 instant0279 maldet(27383): {sigup} local signature set is version 2026052490478
Jun 26 2026 04:34:54 instant0279 maldet(27383): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Jun 26 2026 04:34:54 instant0279 maldet(27383): {sigup} latest signature set already installed
Jun 26 2026 04:34:54 instant0279 maldet(28004): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Jun 26 2026 04:34:55 instant0279 maldet(28004): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Jun 26 2026 04:34:55 instant0279 maldet(28004): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Jun 26 2026 04:34:55 instant0279 maldet(28004): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Jun 26 2026 04:34:55 instant0279 maldet(28004): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Jun 26 2026 04:35:32 instant0279 maldet(28004): {scan} file list completed in 37s, found 310 files...
Jun 26 2026 04:35:32 instant0279 maldet(28004): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Jun 26 2026 04:35:32 instant0279 maldet(28004): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (310 files) in progress...
Jun 26 2026 04:36:12 instant0279 maldet(28004): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 310, malware hits 0, cleaned hits 0, time 78s
Jun 26 2026 04:36:12 instant0279 maldet(28004): {scan} scan report saved, to view run: maldet --report 260626-0434.28004
Jun 27 2026 03:46:42 instant0279 maldet(15573): {update} checking for available updates...
Jun 27 2026 03:46:42 instant0279 maldet(15573): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Jun 27 2026 03:46:42 instant0279 maldet(15573): {update} hashing install files and checking against server...
Jun 27 2026 03:46:43 instant0279 maldet(15573): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Jun 27 2026 03:46:43 instant0279 maldet(15573): {update} latest version already installed.
Jun 27 2026 03:46:43 instant0279 maldet(16213): {sigup} performing signature update check...
Jun 27 2026 03:46:43 instant0279 maldet(16213): {sigup} local signature set is version 2026052490478
Jun 27 2026 03:46:43 instant0279 maldet(16213): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Jun 27 2026 03:46:43 instant0279 maldet(16213): {sigup} latest signature set already installed
Jun 27 2026 03:46:44 instant0279 maldet(16836): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Jun 27 2026 03:46:44 instant0279 maldet(16836): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Jun 27 2026 03:46:44 instant0279 maldet(16836): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Jun 27 2026 03:46:44 instant0279 maldet(16836): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Jun 27 2026 03:46:44 instant0279 maldet(16836): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Jun 27 2026 03:47:17 instant0279 maldet(16836): {scan} file list completed in 33s, found 347 files...
Jun 27 2026 03:47:17 instant0279 maldet(16836): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Jun 27 2026 03:47:17 instant0279 maldet(16836): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (347 files) in progress...
Jun 27 2026 03:47:58 instant0279 maldet(16836): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 347, malware hits 0, cleaned hits 0, time 74s
Jun 27 2026 03:47:58 instant0279 maldet(16836): {scan} scan report saved, to view run: maldet --report 260627-0346.16836
Jun 28 2026 03:28:46 instant0279 maldet(31579): {update} checking for available updates...
Jun 28 2026 03:28:47 instant0279 maldet(31579): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Jun 28 2026 03:28:47 instant0279 maldet(31579): {update} hashing install files and checking against server...
Jun 28 2026 03:28:47 instant0279 maldet(31579): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Jun 28 2026 03:28:47 instant0279 maldet(31579): {update} latest version already installed.
Jun 28 2026 03:28:47 instant0279 maldet(32219): {sigup} performing signature update check...
Jun 28 2026 03:28:47 instant0279 maldet(32219): {sigup} local signature set is version 2026052490478
Jun 28 2026 03:28:48 instant0279 maldet(32219): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Jun 28 2026 03:28:48 instant0279 maldet(32219): {sigup} latest signature set already installed
Jun 28 2026 03:28:48 instant0279 maldet(353): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Jun 28 2026 03:28:48 instant0279 maldet(353): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Jun 28 2026 03:28:48 instant0279 maldet(353): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Jun 28 2026 03:28:48 instant0279 maldet(353): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Jun 28 2026 03:28:48 instant0279 maldet(353): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Jun 28 2026 03:29:20 instant0279 maldet(353): {scan} file list completed in 32s, found 415 files...
Jun 28 2026 03:29:20 instant0279 maldet(353): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Jun 28 2026 03:29:20 instant0279 maldet(353): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (415 files) in progress...
Jun 28 2026 03:30:14 instant0279 maldet(353): {hit} malware hit {HEX}php.inject.generic.565 found for /home/portugalsale/public_html/index.php
Jun 28 2026 03:30:14 instant0279 maldet(353): {quar} malware quarantined from '/home/portugalsale/public_html/index.php' to '/usr/local/maldetect/quarantine/index.php.1650411282'
Jun 28 2026 03:30:14 instant0279 maldet(353): {clean} could not find clean rule for hit php.inject.generic or file /usr/local/maldetect/quarantine/index.php.1650411282 no longer exists.
Jun 28 2026 03:30:14 instant0279 maldet(353): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 415, malware hits 1, cleaned hits 0, time 86s
Jun 28 2026 03:30:14 instant0279 maldet(353): {scan} scan report saved, to view run: maldet --report 260628-0328.353
Jun 28 2026 03:30:14 instant0279 maldet(353): {alert} sent scan report to [email protected]
Jun 29 2026 03:32:07 instant0279 maldet(7150): {update} checking for available updates...
Jun 29 2026 03:32:07 instant0279 maldet(7150): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Jun 29 2026 03:32:07 instant0279 maldet(7150): {update} hashing install files and checking against server...
Jun 29 2026 03:32:07 instant0279 maldet(7150): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Jun 29 2026 03:32:07 instant0279 maldet(7150): {update} latest version already installed.
Jun 29 2026 03:32:08 instant0279 maldet(7788): {sigup} performing signature update check...
Jun 29 2026 03:32:08 instant0279 maldet(7788): {sigup} local signature set is version 2026052490478
Jun 29 2026 03:32:08 instant0279 maldet(7788): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Jun 29 2026 03:32:08 instant0279 maldet(7788): {sigup} latest signature set already installed
Jun 29 2026 03:32:08 instant0279 maldet(8404): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Jun 29 2026 03:32:09 instant0279 maldet(8404): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Jun 29 2026 03:32:09 instant0279 maldet(8404): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Jun 29 2026 03:32:09 instant0279 maldet(8404): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Jun 29 2026 03:32:09 instant0279 maldet(8404): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Jun 29 2026 03:32:42 instant0279 maldet(8404): {scan} file list completed in 33s, found 2601 files...
Jun 29 2026 03:32:42 instant0279 maldet(8404): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Jun 29 2026 03:32:42 instant0279 maldet(8404): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2601 files) in progress...
Jun 29 2026 03:33:35 instant0279 maldet(8404): {hit} malware hit {HEX}php.generic.globals.500 found for /home/portugalsale/public_html/wp-includes/vxtjui.php
Jun 29 2026 03:33:35 instant0279 maldet(8404): {quar} malware quarantined from '/home/portugalsale/public_html/wp-includes/vxtjui.php' to '/usr/local/maldetect/quarantine/vxtjui.php.923610429'
Jun 29 2026 03:33:35 instant0279 maldet(8404): {clean} could not find clean rule for hit php.generic.globals or file /usr/local/maldetect/quarantine/vxtjui.php.923610429 no longer exists.
Jun 29 2026 03:33:35 instant0279 maldet(8404): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2601, malware hits 1, cleaned hits 0, time 87s
Jun 29 2026 03:33:35 instant0279 maldet(8404): {scan} scan report saved, to view run: maldet --report 260629-0332.8404
Jun 29 2026 03:33:35 instant0279 maldet(8404): {alert} sent scan report to [email protected]
Jun 30 2026 03:11:34 instant0279 maldet(7393): {update} checking for available updates...
Jun 30 2026 03:11:34 instant0279 maldet(7393): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Jun 30 2026 03:11:34 instant0279 maldet(7393): {update} hashing install files and checking against server...
Jun 30 2026 03:11:34 instant0279 maldet(7393): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Jun 30 2026 03:11:34 instant0279 maldet(7393): {update} latest version already installed.
Jun 30 2026 03:11:35 instant0279 maldet(8032): {sigup} performing signature update check...
Jun 30 2026 03:11:35 instant0279 maldet(8032): {sigup} local signature set is version 2026052490478
Jun 30 2026 03:11:35 instant0279 maldet(8032): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Jun 30 2026 03:11:35 instant0279 maldet(8032): {sigup} latest signature set already installed
Jun 30 2026 03:11:35 instant0279 maldet(8646): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Jun 30 2026 03:12:24 instant0279 maldet(8646): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Jun 30 2026 03:12:24 instant0279 maldet(8646): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Jun 30 2026 03:12:24 instant0279 maldet(8646): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Jun 30 2026 03:12:24 instant0279 maldet(8646): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Jun 30 2026 03:12:38 instant0279 maldet(8646): {scan} file list completed in 14s, found 540 files...
Jun 30 2026 03:12:38 instant0279 maldet(8646): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Jun 30 2026 03:12:38 instant0279 maldet(8646): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (540 files) in progress...
Jun 30 2026 03:13:23 instant0279 maldet(8646): {hit} malware hit {HEX}php.generic.globals.500 found for /home/portugalsale/public_html/wp-includes/qgwqsr.php
Jun 30 2026 03:13:23 instant0279 maldet(8646): {quar} malware quarantined from '/home/portugalsale/public_html/wp-includes/qgwqsr.php' to '/usr/local/maldetect/quarantine/qgwqsr.php.309184994'
Jun 30 2026 03:13:23 instant0279 maldet(8646): {clean} could not find clean rule for hit php.generic.globals or file /usr/local/maldetect/quarantine/qgwqsr.php.309184994 no longer exists.
Jun 30 2026 03:13:23 instant0279 maldet(8646): {hit} malware hit {HEX}php.generic.globals.500 found for /home/portugalsale/public_html/wp-includes/hpgyvu.php
Jun 30 2026 03:13:23 instant0279 maldet(8646): {quar} malware quarantined from '/home/portugalsale/public_html/wp-includes/hpgyvu.php' to '/usr/local/maldetect/quarantine/hpgyvu.php.2346119151'
Jun 30 2026 03:13:23 instant0279 maldet(8646): {clean} could not find clean rule for hit php.generic.globals or file /usr/local/maldetect/quarantine/hpgyvu.php.2346119151 no longer exists.
Jun 30 2026 03:13:23 instant0279 maldet(8646): {hit} malware hit {HEX}php.generic.globals.500 found for /home/portugalsale/public_html/wp-includes/njdugk.php
Jun 30 2026 03:13:23 instant0279 maldet(8646): {quar} malware quarantined from '/home/portugalsale/public_html/wp-includes/njdugk.php' to '/usr/local/maldetect/quarantine/njdugk.php.2587527946'
Jun 30 2026 03:13:23 instant0279 maldet(8646): {clean} could not find clean rule for hit php.generic.globals or file /usr/local/maldetect/quarantine/njdugk.php.2587527946 no longer exists.
Jun 30 2026 03:13:23 instant0279 maldet(8646): {hit} malware hit {HEX}php.generic.globals.500 found for /home/portugalsale/public_html/wp-includes/evvqhc.php
Jun 30 2026 03:13:23 instant0279 maldet(8646): {quar} malware quarantined from '/home/portugalsale/public_html/wp-includes/evvqhc.php' to '/usr/local/maldetect/quarantine/evvqhc.php.2489817639'
Jun 30 2026 03:13:23 instant0279 maldet(8646): {clean} could not find clean rule for hit php.generic.globals or file /usr/local/maldetect/quarantine/evvqhc.php.2489817639 no longer exists.
Jun 30 2026 03:13:23 instant0279 maldet(8646): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 540, malware hits 4, cleaned hits 0, time 108s
Jun 30 2026 03:13:23 instant0279 maldet(8646): {scan} scan report saved, to view run: maldet --report 260630-0311.8646
Jun 30 2026 03:13:23 instant0279 maldet(8646): {alert} sent scan report to [email protected]
Jul 01 2026 03:56:50 instant0279 maldet(22369): {update} checking for available updates...
Jul 01 2026 03:56:51 instant0279 maldet(22369): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Jul 01 2026 03:56:51 instant0279 maldet(22369): {update} hashing install files and checking against server...
Jul 01 2026 03:56:51 instant0279 maldet(22369): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Jul 01 2026 03:56:51 instant0279 maldet(22369): {update} latest version already installed.
Jul 01 2026 03:56:51 instant0279 maldet(23001): {sigup} performing signature update check...
Jul 01 2026 03:56:51 instant0279 maldet(23001): {sigup} local signature set is version 2026052490478
Jul 01 2026 03:56:51 instant0279 maldet(23001): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Jul 01 2026 03:56:51 instant0279 maldet(23001): {sigup} latest signature set already installed
Jul 01 2026 03:56:52 instant0279 maldet(23617): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Jul 01 2026 03:56:52 instant0279 maldet(23617): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Jul 01 2026 03:56:52 instant0279 maldet(23617): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Jul 01 2026 03:56:52 instant0279 maldet(23617): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Jul 01 2026 03:56:52 instant0279 maldet(23617): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Jul 01 2026 03:57:25 instant0279 maldet(23617): {scan} file list completed in 33s, found 518 files...
Jul 01 2026 03:57:25 instant0279 maldet(23617): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Jul 01 2026 03:57:25 instant0279 maldet(23617): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (518 files) in progress...
Jul 01 2026 03:58:01 instant0279 maldet(23617): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 518, malware hits 0, cleaned hits 0, time 69s
Jul 01 2026 03:58:01 instant0279 maldet(23617): {scan} scan report saved, to view run: maldet --report 260701-0356.23617
Jul 02 2026 03:36:07 instant0279 maldet(29622): {update} checking for available updates...
Jul 02 2026 03:36:07 instant0279 maldet(29622): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Jul 02 2026 03:36:07 instant0279 maldet(29622): {update} hashing install files and checking against server...
Jul 02 2026 03:36:08 instant0279 maldet(29622): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Jul 02 2026 03:36:08 instant0279 maldet(29622): {update} latest version already installed.
Jul 02 2026 03:36:08 instant0279 maldet(30262): {sigup} performing signature update check...
Jul 02 2026 03:36:08 instant0279 maldet(30262): {sigup} local signature set is version 2026052490478
Jul 02 2026 03:36:08 instant0279 maldet(30262): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Jul 02 2026 03:36:08 instant0279 maldet(30262): {sigup} latest signature set already installed
Jul 02 2026 03:36:09 instant0279 maldet(30860): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Jul 02 2026 03:36:34 instant0279 maldet(30860): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Jul 02 2026 03:36:34 instant0279 maldet(30860): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Jul 02 2026 03:36:34 instant0279 maldet(30860): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Jul 02 2026 03:36:34 instant0279 maldet(30860): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Jul 02 2026 03:36:52 instant0279 maldet(30860): {scan} file list completed in 18s, found 557 files...
Jul 02 2026 03:36:52 instant0279 maldet(30860): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Jul 02 2026 03:36:52 instant0279 maldet(30860): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (557 files) in progress...
Jul 02 2026 03:37:53 instant0279 maldet(30860): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 557, malware hits 0, cleaned hits 0, time 104s
Jul 02 2026 03:37:53 instant0279 maldet(30860): {scan} scan report saved, to view run: maldet --report 260702-0336.30860
Jul 03 2026 03:45:50 instant0279 maldet(550): {update} checking for available updates...
Jul 03 2026 03:45:50 instant0279 maldet(550): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Jul 03 2026 03:45:50 instant0279 maldet(550): {update} hashing install files and checking against server...
Jul 03 2026 03:45:50 instant0279 maldet(550): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Jul 03 2026 03:45:50 instant0279 maldet(550): {update} latest version already installed.
Jul 03 2026 03:45:51 instant0279 maldet(1165): {sigup} performing signature update check...
Jul 03 2026 03:45:51 instant0279 maldet(1165): {sigup} local signature set is version 2026052490478
Jul 03 2026 03:45:51 instant0279 maldet(1165): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Jul 03 2026 03:45:51 instant0279 maldet(1165): {sigup} latest signature set already installed
Jul 03 2026 03:45:52 instant0279 maldet(1781): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Jul 03 2026 03:45:52 instant0279 maldet(1781): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Jul 03 2026 03:45:52 instant0279 maldet(1781): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Jul 03 2026 03:45:52 instant0279 maldet(1781): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Jul 03 2026 03:45:52 instant0279 maldet(1781): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Jul 03 2026 03:46:24 instant0279 maldet(1781): {scan} file list completed in 32s, found 502 files...
Jul 03 2026 03:46:24 instant0279 maldet(1781): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Jul 03 2026 03:46:24 instant0279 maldet(1781): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (502 files) in progress...
Jul 03 2026 03:46:59 instant0279 maldet(1781): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 502, malware hits 0, cleaned hits 0, time 67s
Jul 03 2026 03:46:59 instant0279 maldet(1781): {scan} scan report saved, to view run: maldet --report 260703-0345.1781
Jul 04 2026 03:22:39 instant0279 maldet(19891): {update} checking for available updates...
Jul 04 2026 03:22:39 instant0279 maldet(19891): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Jul 04 2026 03:22:39 instant0279 maldet(19891): {update} hashing install files and checking against server...
Jul 04 2026 03:22:39 instant0279 maldet(19891): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Jul 04 2026 03:22:39 instant0279 maldet(19891): {update} latest version already installed.
Jul 04 2026 03:22:40 instant0279 maldet(20512): {sigup} performing signature update check...
Jul 04 2026 03:22:40 instant0279 maldet(20512): {sigup} local signature set is version 2026052490478
Jul 04 2026 03:22:40 instant0279 maldet(20512): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Jul 04 2026 03:22:40 instant0279 maldet(20512): {sigup} latest signature set already installed
Jul 04 2026 03:22:40 instant0279 maldet(21107): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Jul 04 2026 03:22:41 instant0279 maldet(21107): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Jul 04 2026 03:22:41 instant0279 maldet(21107): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Jul 04 2026 03:22:41 instant0279 maldet(21107): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Jul 04 2026 03:22:41 instant0279 maldet(21107): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Jul 04 2026 03:23:12 instant0279 maldet(21107): {scan} file list completed in 31s, found 376 files...
Jul 04 2026 03:23:12 instant0279 maldet(21107): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Jul 04 2026 03:23:12 instant0279 maldet(21107): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (376 files) in progress...
Jul 04 2026 03:24:15 instant0279 maldet(21107): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 376, malware hits 0, cleaned hits 0, time 95s
Jul 04 2026 03:24:15 instant0279 maldet(21107): {scan} scan report saved, to view run: maldet --report 260704-0322.21107
Jul 05 2026 03:44:58 instant0279 maldet(3466): {update} checking for available updates...
Jul 05 2026 03:44:58 instant0279 maldet(3466): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Jul 05 2026 03:44:58 instant0279 maldet(3466): {update} hashing install files and checking against server...
Jul 05 2026 03:44:59 instant0279 maldet(3466): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Jul 05 2026 03:44:59 instant0279 maldet(3466): {update} latest version already installed.
Jul 05 2026 03:44:59 instant0279 maldet(4112): {sigup} performing signature update check...
Jul 05 2026 03:44:59 instant0279 maldet(4112): {sigup} local signature set is version 2026052490478
Jul 05 2026 03:44:59 instant0279 maldet(4112): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Jul 05 2026 03:44:59 instant0279 maldet(4112): {sigup} latest signature set already installed
Jul 05 2026 03:45:00 instant0279 maldet(4731): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Jul 05 2026 03:45:00 instant0279 maldet(4731): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Jul 05 2026 03:45:00 instant0279 maldet(4731): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Jul 05 2026 03:45:00 instant0279 maldet(4731): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Jul 05 2026 03:45:00 instant0279 maldet(4731): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Jul 05 2026 03:45:31 instant0279 maldet(4731): {scan} file list completed in 31s, found 327 files...
Jul 05 2026 03:45:31 instant0279 maldet(4731): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Jul 05 2026 03:45:31 instant0279 maldet(4731): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (327 files) in progress...
Jul 05 2026 03:46:15 instant0279 maldet(4731): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 327, malware hits 0, cleaned hits 0, time 75s
Jul 05 2026 03:46:15 instant0279 maldet(4731): {scan} scan report saved, to view run: maldet --report 260705-0344.4731
Jul 06 2026 03:15:27 instant0279 maldet(2371): {update} checking for available updates...
Jul 06 2026 03:15:28 instant0279 maldet(2371): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Jul 06 2026 03:15:28 instant0279 maldet(2371): {update} hashing install files and checking against server...
Jul 06 2026 03:15:28 instant0279 maldet(2371): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Jul 06 2026 03:15:28 instant0279 maldet(2371): {update} latest version already installed.
Jul 06 2026 03:15:28 instant0279 maldet(3012): {sigup} performing signature update check...
Jul 06 2026 03:15:28 instant0279 maldet(3012): {sigup} local signature set is version 2026052490478
Jul 06 2026 03:15:28 instant0279 maldet(3012): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Jul 06 2026 03:15:28 instant0279 maldet(3012): {sigup} latest signature set already installed
Jul 06 2026 03:15:29 instant0279 maldet(3651): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Jul 06 2026 03:15:29 instant0279 maldet(3651): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Jul 06 2026 03:15:29 instant0279 maldet(3651): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Jul 06 2026 03:15:29 instant0279 maldet(3651): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Jul 06 2026 03:15:29 instant0279 maldet(3651): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Jul 06 2026 03:16:00 instant0279 maldet(3651): {scan} file list completed in 31s, found 500 files...
Jul 06 2026 03:16:00 instant0279 maldet(3651): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Jul 06 2026 03:16:00 instant0279 maldet(3651): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (500 files) in progress...
Jul 06 2026 03:16:50 instant0279 maldet(3651): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 500, malware hits 0, cleaned hits 0, time 81s
Jul 06 2026 03:16:50 instant0279 maldet(3651): {scan} scan report saved, to view run: maldet --report 260706-0315.3651
Jul 07 2026 03:21:51 instant0279 maldet(28400): {update} checking for available updates...
Jul 07 2026 03:21:52 instant0279 maldet(28400): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Jul 07 2026 03:21:52 instant0279 maldet(28400): {update} hashing install files and checking against server...
Jul 07 2026 03:21:52 instant0279 maldet(28400): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Jul 07 2026 03:21:52 instant0279 maldet(28400): {update} latest version already installed.
Jul 07 2026 03:21:52 instant0279 maldet(29027): {sigup} performing signature update check...
Jul 07 2026 03:21:52 instant0279 maldet(29027): {sigup} local signature set is version 2026052490478
Jul 07 2026 03:21:53 instant0279 maldet(29027): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Jul 07 2026 03:21:53 instant0279 maldet(29027): {sigup} latest signature set already installed
Jul 07 2026 03:21:53 instant0279 maldet(29627): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Jul 07 2026 03:21:53 instant0279 maldet(29627): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Jul 07 2026 03:21:53 instant0279 maldet(29627): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Jul 07 2026 03:21:53 instant0279 maldet(29627): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Jul 07 2026 03:21:53 instant0279 maldet(29627): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Jul 07 2026 03:22:23 instant0279 maldet(29627): {scan} file list completed in 30s, found 353 files...
Jul 07 2026 03:22:23 instant0279 maldet(29627): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Jul 07 2026 03:22:23 instant0279 maldet(29627): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (353 files) in progress...
Jul 07 2026 03:23:01 instant0279 maldet(29627): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 353, malware hits 0, cleaned hits 0, time 68s
Jul 07 2026 03:23:01 instant0279 maldet(29627): {scan} scan report saved, to view run: maldet --report 260707-0321.29627
Jul 08 2026 03:42:30 instant0279 maldet(13128): {update} checking for available updates...
Jul 08 2026 03:42:30 instant0279 maldet(13128): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Jul 08 2026 03:42:30 instant0279 maldet(13128): {update} hashing install files and checking against server...
Jul 08 2026 03:42:31 instant0279 maldet(13128): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Jul 08 2026 03:42:31 instant0279 maldet(13128): {update} latest version already installed.
Jul 08 2026 03:42:31 instant0279 maldet(13768): {sigup} performing signature update check...
Jul 08 2026 03:42:31 instant0279 maldet(13768): {sigup} local signature set is version 2026052490478
Jul 08 2026 03:42:31 instant0279 maldet(13768): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Jul 08 2026 03:42:31 instant0279 maldet(13768): {sigup} latest signature set already installed
Jul 08 2026 03:42:32 instant0279 maldet(14374): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Jul 08 2026 03:42:32 instant0279 maldet(14374): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Jul 08 2026 03:42:32 instant0279 maldet(14374): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Jul 08 2026 03:42:32 instant0279 maldet(14374): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Jul 08 2026 03:42:32 instant0279 maldet(14374): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Jul 08 2026 03:43:08 instant0279 maldet(14374): {scan} file list completed in 36s, found 508 files...
Jul 08 2026 03:43:08 instant0279 maldet(14374): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Jul 08 2026 03:43:08 instant0279 maldet(14374): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (508 files) in progress...
Jul 08 2026 03:43:59 instant0279 maldet(14374): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 508, malware hits 0, cleaned hits 0, time 87s
Jul 08 2026 03:43:59 instant0279 maldet(14374): {scan} scan report saved, to view run: maldet --report 260708-0342.14374
Jul 09 2026 03:12:56 instant0279 maldet(2617): {update} checking for available updates...
Jul 09 2026 03:12:56 instant0279 maldet(2617): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Jul 09 2026 03:12:56 instant0279 maldet(2617): {update} hashing install files and checking against server...
Jul 09 2026 03:12:57 instant0279 maldet(2617): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Jul 09 2026 03:12:57 instant0279 maldet(2617): {update} latest version already installed.
Jul 09 2026 03:12:57 instant0279 maldet(3260): {sigup} performing signature update check...
Jul 09 2026 03:12:57 instant0279 maldet(3260): {sigup} local signature set is version 2026052490478
Jul 09 2026 03:12:57 instant0279 maldet(3260): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Jul 09 2026 03:12:57 instant0279 maldet(3260): {sigup} latest signature set already installed
Jul 09 2026 03:12:58 instant0279 maldet(3887): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Jul 09 2026 03:12:58 instant0279 maldet(3887): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Jul 09 2026 03:12:58 instant0279 maldet(3887): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Jul 09 2026 03:12:58 instant0279 maldet(3887): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Jul 09 2026 03:12:58 instant0279 maldet(3887): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Jul 09 2026 03:13:29 instant0279 maldet(3887): {scan} file list completed in 31s, found 425 files...
Jul 09 2026 03:13:29 instant0279 maldet(3887): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Jul 09 2026 03:13:29 instant0279 maldet(3887): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (425 files) in progress...
Jul 09 2026 03:14:15 instant0279 maldet(3887): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 425, malware hits 0, cleaned hits 0, time 77s
Jul 09 2026 03:14:15 instant0279 maldet(3887): {scan} scan report saved, to view run: maldet --report 260709-0312.3887
Jul 10 2026 03:14:36 instant0279 maldet(5944): {update} checking for available updates...
Jul 10 2026 03:14:36 instant0279 maldet(5944): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Jul 10 2026 03:14:36 instant0279 maldet(5944): {update} hashing install files and checking against server...
Jul 10 2026 03:14:36 instant0279 maldet(5944): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Jul 10 2026 03:14:36 instant0279 maldet(5944): {update} latest version already installed.
Jul 10 2026 03:14:37 instant0279 maldet(6570): {sigup} performing signature update check...
Jul 10 2026 03:14:37 instant0279 maldet(6570): {sigup} local signature set is version 2026052490478
Jul 10 2026 03:14:37 instant0279 maldet(6570): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Jul 10 2026 03:14:37 instant0279 maldet(6570): {sigup} latest signature set already installed
Jul 10 2026 03:14:37 instant0279 maldet(7188): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Jul 10 2026 03:14:37 instant0279 maldet(7188): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Jul 10 2026 03:14:37 instant0279 maldet(7188): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Jul 10 2026 03:14:37 instant0279 maldet(7188): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Jul 10 2026 03:14:37 instant0279 maldet(7188): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Jul 10 2026 03:15:08 instant0279 maldet(7188): {scan} file list completed in 31s, found 3825 files...
Jul 10 2026 03:15:08 instant0279 maldet(7188): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Jul 10 2026 03:15:08 instant0279 maldet(7188): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (3825 files) in progress...
Jul 10 2026 03:19:16 instant0279 maldet(7188): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 3825, malware hits 0, cleaned hits 0, time 279s
Jul 10 2026 03:19:17 instant0279 maldet(7188): {scan} scan report saved, to view run: maldet --report 260710-0314.7188
Jul 11 2026 03:27:59 instant0279 maldet(2635): {update} checking for available updates...
Jul 11 2026 03:27:59 instant0279 maldet(2635): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Jul 11 2026 03:27:59 instant0279 maldet(2635): {update} hashing install files and checking against server...
Jul 11 2026 03:27:59 instant0279 maldet(2635): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Jul 11 2026 03:27:59 instant0279 maldet(2635): {update} latest version already installed.
Jul 11 2026 03:28:00 instant0279 maldet(3286): {sigup} performing signature update check...
Jul 11 2026 03:28:00 instant0279 maldet(3286): {sigup} local signature set is version 2026052490478
Jul 11 2026 03:28:00 instant0279 maldet(3286): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Jul 11 2026 03:28:00 instant0279 maldet(3286): {sigup} latest signature set already installed
Jul 11 2026 03:28:00 instant0279 maldet(3902): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Jul 11 2026 03:28:01 instant0279 maldet(3902): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Jul 11 2026 03:28:01 instant0279 maldet(3902): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Jul 11 2026 03:28:01 instant0279 maldet(3902): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Jul 11 2026 03:28:01 instant0279 maldet(3902): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Jul 11 2026 03:28:34 instant0279 maldet(3902): {scan} file list completed in 33s, found 2137 files...
Jul 11 2026 03:28:34 instant0279 maldet(3902): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Jul 11 2026 03:28:34 instant0279 maldet(3902): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2137 files) in progress...
Jul 11 2026 03:30:32 instant0279 maldet(3902): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2137, malware hits 0, cleaned hits 0, time 152s
Jul 11 2026 03:30:32 instant0279 maldet(3902): {scan} scan report saved, to view run: maldet --report 260711-0328.3902
Jul 12 2026 03:49:30 instant0279 maldet(28041): {update} checking for available updates...
Jul 12 2026 03:49:30 instant0279 maldet(28041): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Jul 12 2026 03:49:30 instant0279 maldet(28041): {update} hashing install files and checking against server...
Jul 12 2026 03:49:30 instant0279 maldet(28041): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Jul 12 2026 03:49:30 instant0279 maldet(28041): {update} latest version already installed.
Jul 12 2026 03:49:30 instant0279 maldet(28665): {sigup} performing signature update check...
Jul 12 2026 03:49:30 instant0279 maldet(28665): {sigup} local signature set is version 2026052490478
Jul 12 2026 03:49:31 instant0279 maldet(28665): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Jul 12 2026 03:49:31 instant0279 maldet(28665): {sigup} latest signature set already installed
Jul 12 2026 03:49:31 instant0279 maldet(29274): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Jul 12 2026 03:49:31 instant0279 maldet(29274): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Jul 12 2026 03:49:31 instant0279 maldet(29274): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Jul 12 2026 03:49:31 instant0279 maldet(29274): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Jul 12 2026 03:49:31 instant0279 maldet(29274): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Jul 12 2026 03:50:06 instant0279 maldet(29274): {scan} file list completed in 35s, found 543 files...
Jul 12 2026 03:50:06 instant0279 maldet(29274): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Jul 12 2026 03:50:06 instant0279 maldet(29274): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (543 files) in progress...
Jul 12 2026 03:50:57 instant0279 maldet(29274): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 543, malware hits 0, cleaned hits 0, time 86s
Jul 12 2026 03:50:57 instant0279 maldet(29274): {scan} scan report saved, to view run: maldet --report 260712-0349.29274
Jul 13 2026 03:37:17 instant0279 maldet(23346): {update} checking for available updates...
Jul 13 2026 03:37:17 instant0279 maldet(23346): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Jul 13 2026 03:37:17 instant0279 maldet(23346): {update} hashing install files and checking against server...
Jul 13 2026 03:37:17 instant0279 maldet(23346): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Jul 13 2026 03:37:17 instant0279 maldet(23346): {update} latest version already installed.
Jul 13 2026 03:37:18 instant0279 maldet(23972): {sigup} performing signature update check...
Jul 13 2026 03:37:18 instant0279 maldet(23972): {sigup} local signature set is version 2026052490478
Jul 13 2026 03:37:18 instant0279 maldet(23972): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Jul 13 2026 03:37:18 instant0279 maldet(23972): {sigup} latest signature set already installed
Jul 13 2026 03:37:18 instant0279 maldet(24604): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Jul 13 2026 03:37:19 instant0279 maldet(24604): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Jul 13 2026 03:37:19 instant0279 maldet(24604): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Jul 13 2026 03:37:19 instant0279 maldet(24604): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Jul 13 2026 03:37:19 instant0279 maldet(24604): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Jul 13 2026 03:37:51 instant0279 maldet(24604): {scan} file list completed in 32s, found 409 files...
Jul 13 2026 03:37:51 instant0279 maldet(24604): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Jul 13 2026 03:37:51 instant0279 maldet(24604): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (409 files) in progress...
Jul 13 2026 03:38:32 instant0279 maldet(24604): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 409, malware hits 0, cleaned hits 0, time 74s
Jul 13 2026 03:38:32 instant0279 maldet(24604): {scan} scan report saved, to view run: maldet --report 260713-0337.24604
Jul 14 2026 03:10:43 instant0279 maldet(1674): {update} checking for available updates...
Jul 14 2026 03:10:43 instant0279 maldet(1674): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Jul 14 2026 03:10:43 instant0279 maldet(1674): {update} hashing install files and checking against server...
Jul 14 2026 03:10:44 instant0279 maldet(1674): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Jul 14 2026 03:10:44 instant0279 maldet(1674): {update} latest version already installed.
Jul 14 2026 03:10:44 instant0279 maldet(2370): {sigup} performing signature update check...
Jul 14 2026 03:10:44 instant0279 maldet(2370): {sigup} local signature set is version 2026052490478
Jul 14 2026 03:10:44 instant0279 maldet(2370): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Jul 14 2026 03:10:44 instant0279 maldet(2370): {sigup} latest signature set already installed
Jul 14 2026 03:10:45 instant0279 maldet(2978): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Jul 14 2026 03:10:45 instant0279 maldet(2978): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Jul 14 2026 03:10:45 instant0279 maldet(2978): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Jul 14 2026 03:10:45 instant0279 maldet(2978): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Jul 14 2026 03:10:45 instant0279 maldet(2978): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Jul 14 2026 03:11:18 instant0279 maldet(2978): {scan} file list completed in 33s, found 2699 files...
Jul 14 2026 03:11:18 instant0279 maldet(2978): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Jul 14 2026 03:11:18 instant0279 maldet(2978): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2699 files) in progress...
Jul 14 2026 03:14:11 instant0279 maldet(2978): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2699, malware hits 0, cleaned hits 0, time 206s
Jul 14 2026 03:14:11 instant0279 maldet(2978): {scan} scan report saved, to view run: maldet --report 260714-0310.2978
Jul 15 2026 03:34:30 instant0279 maldet(20737): {update} checking for available updates...
Jul 15 2026 03:34:30 instant0279 maldet(20737): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Jul 15 2026 03:34:31 instant0279 maldet(20737): {update} hashing install files and checking against server...
Jul 15 2026 03:34:31 instant0279 maldet(20737): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Jul 15 2026 03:34:31 instant0279 maldet(20737): {update} latest version already installed.
Jul 15 2026 03:34:31 instant0279 maldet(21364): {sigup} performing signature update check...
Jul 15 2026 03:34:31 instant0279 maldet(21364): {sigup} local signature set is version 2026052490478
Jul 15 2026 03:34:31 instant0279 maldet(21364): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Jul 15 2026 03:34:31 instant0279 maldet(21364): {sigup} latest signature set already installed
Jul 15 2026 03:34:32 instant0279 maldet(22004): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Jul 15 2026 03:34:32 instant0279 maldet(22004): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Jul 15 2026 03:34:32 instant0279 maldet(22004): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Jul 15 2026 03:34:32 instant0279 maldet(22004): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Jul 15 2026 03:34:32 instant0279 maldet(22004): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Jul 15 2026 03:35:04 instant0279 maldet(22004): {scan} file list completed in 32s, found 407 files...
Jul 15 2026 03:35:04 instant0279 maldet(22004): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Jul 15 2026 03:35:04 instant0279 maldet(22004): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (407 files) in progress...
Jul 15 2026 03:35:51 instant0279 maldet(22004): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 407, malware hits 0, cleaned hits 0, time 79s
Jul 15 2026 03:35:51 instant0279 maldet(22004): {scan} scan report saved, to view run: maldet --report 260715-0334.22004
Jul 16 2026 03:50:27 instant0279 maldet(17316): {update} checking for available updates...
Jul 16 2026 03:50:28 instant0279 maldet(17316): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Jul 16 2026 03:50:28 instant0279 maldet(17316): {update} hashing install files and checking against server...
Jul 16 2026 03:50:28 instant0279 maldet(17316): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Jul 16 2026 03:50:28 instant0279 maldet(17316): {update} latest version already installed.
Jul 16 2026 03:50:28 instant0279 maldet(17947): {sigup} performing signature update check...
Jul 16 2026 03:50:28 instant0279 maldet(17947): {sigup} local signature set is version 2026052490478
Jul 16 2026 03:50:29 instant0279 maldet(17947): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Jul 16 2026 03:50:29 instant0279 maldet(17947): {sigup} latest signature set already installed
Jul 16 2026 03:50:29 instant0279 maldet(18556): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Jul 16 2026 03:50:49 instant0279 maldet(18556): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Jul 16 2026 03:50:49 instant0279 maldet(18556): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Jul 16 2026 03:50:49 instant0279 maldet(18556): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Jul 16 2026 03:50:49 instant0279 maldet(18556): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Jul 16 2026 03:51:10 instant0279 maldet(18556): {scan} file list completed in 21s, found 417 files...
Jul 16 2026 03:51:10 instant0279 maldet(18556): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Jul 16 2026 03:51:10 instant0279 maldet(18556): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (417 files) in progress...
Jul 16 2026 03:51:56 instant0279 maldet(18556): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 417, malware hits 0, cleaned hits 0, time 87s
Jul 16 2026 03:51:56 instant0279 maldet(18556): {scan} scan report saved, to view run: maldet --report 260716-0350.18556
Jul 17 2026 03:50:44 instant0279 maldet(32676): {update} checking for available updates...
Jul 17 2026 03:50:44 instant0279 maldet(32676): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Jul 17 2026 03:50:44 instant0279 maldet(32676): {update} hashing install files and checking against server...
Jul 17 2026 03:50:45 instant0279 maldet(32676): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Jul 17 2026 03:50:45 instant0279 maldet(32676): {update} latest version already installed.
Jul 17 2026 03:50:45 instant0279 maldet(838): {sigup} performing signature update check...
Jul 17 2026 03:50:45 instant0279 maldet(838): {sigup} local signature set is version 2026052490478
Jul 17 2026 03:50:45 instant0279 maldet(838): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Jul 17 2026 03:50:45 instant0279 maldet(838): {sigup} latest signature set already installed
Jul 17 2026 03:50:46 instant0279 maldet(1434): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Jul 17 2026 03:50:46 instant0279 maldet(1434): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Jul 17 2026 03:50:46 instant0279 maldet(1434): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Jul 17 2026 03:50:46 instant0279 maldet(1434): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Jul 17 2026 03:50:46 instant0279 maldet(1434): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Jul 17 2026 03:51:17 instant0279 maldet(1434): {scan} file list completed in 31s, found 446 files...
Jul 17 2026 03:51:17 instant0279 maldet(1434): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Jul 17 2026 03:51:17 instant0279 maldet(1434): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (446 files) in progress...
Jul 17 2026 03:51:44 instant0279 maldet(1434): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 446, malware hits 0, cleaned hits 0, time 58s
Jul 17 2026 03:51:44 instant0279 maldet(1434): {scan} scan report saved, to view run: maldet --report 260717-0350.1434
Jul 18 2026 03:46:38 instant0279 maldet(14737): {update} checking for available updates...
Jul 18 2026 03:46:39 instant0279 maldet(14737): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Jul 18 2026 03:46:39 instant0279 maldet(14737): {update} hashing install files and checking against server...
Jul 18 2026 03:46:39 instant0279 maldet(14737): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Jul 18 2026 03:46:39 instant0279 maldet(14737): {update} latest version already installed.
Jul 18 2026 03:46:39 instant0279 maldet(15371): {sigup} performing signature update check...
Jul 18 2026 03:46:39 instant0279 maldet(15371): {sigup} local signature set is version 2026052490478
Jul 18 2026 03:46:39 instant0279 maldet(15371): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Jul 18 2026 03:46:39 instant0279 maldet(15371): {sigup} latest signature set already installed
Jul 18 2026 03:46:40 instant0279 maldet(15984): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Jul 18 2026 03:46:40 instant0279 maldet(15984): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Jul 18 2026 03:46:40 instant0279 maldet(15984): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Jul 18 2026 03:46:40 instant0279 maldet(15984): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Jul 18 2026 03:46:40 instant0279 maldet(15984): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Jul 18 2026 03:47:11 instant0279 maldet(15984): {scan} file list completed in 31s, found 426 files...
Jul 18 2026 03:47:11 instant0279 maldet(15984): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Jul 18 2026 03:47:11 instant0279 maldet(15984): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (426 files) in progress...
Jul 18 2026 03:47:53 instant0279 maldet(15984): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 426, malware hits 0, cleaned hits 0, time 73s
Jul 18 2026 03:47:53 instant0279 maldet(15984): {scan} scan report saved, to view run: maldet --report 260718-0346.15984
Jul 19 2026 03:37:52 instant0279 maldet(6507): {update} checking for available updates...
Jul 19 2026 03:37:53 instant0279 maldet(6507): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Jul 19 2026 03:37:53 instant0279 maldet(6507): {update} hashing install files and checking against server...
Jul 19 2026 03:37:53 instant0279 maldet(6507): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Jul 19 2026 03:37:53 instant0279 maldet(6507): {update} latest version already installed.
Jul 19 2026 03:37:53 instant0279 maldet(7125): {sigup} performing signature update check...
Jul 19 2026 03:37:53 instant0279 maldet(7125): {sigup} local signature set is version 2026052490478
Jul 19 2026 03:37:53 instant0279 maldet(7125): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Jul 19 2026 03:37:53 instant0279 maldet(7125): {sigup} latest signature set already installed
Jul 19 2026 03:37:54 instant0279 maldet(7718): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Jul 19 2026 03:37:54 instant0279 maldet(7718): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Jul 19 2026 03:37:54 instant0279 maldet(7718): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Jul 19 2026 03:37:54 instant0279 maldet(7718): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Jul 19 2026 03:37:54 instant0279 maldet(7718): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Jul 19 2026 03:38:26 instant0279 maldet(7718): {scan} file list completed in 32s, found 345 files...
Jul 19 2026 03:38:26 instant0279 maldet(7718): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Jul 19 2026 03:38:26 instant0279 maldet(7718): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (345 files) in progress...
Jul 19 2026 03:39:17 instant0279 maldet(7718): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 345, malware hits 0, cleaned hits 0, time 83s
Jul 19 2026 03:39:17 instant0279 maldet(7718): {scan} scan report saved, to view run: maldet --report 260719-0337.7718
Jul 20 2026 03:31:43 instant0279 maldet(8317): {update} checking for available updates...
Jul 20 2026 03:31:44 instant0279 maldet(8317): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Jul 20 2026 03:31:44 instant0279 maldet(8317): {update} hashing install files and checking against server...
Jul 20 2026 03:31:44 instant0279 maldet(8317): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Jul 20 2026 03:31:44 instant0279 maldet(8317): {update} latest version already installed.
Jul 20 2026 03:31:44 instant0279 maldet(8951): {sigup} performing signature update check...
Jul 20 2026 03:31:44 instant0279 maldet(8951): {sigup} local signature set is version 2026052490478
Jul 20 2026 03:31:45 instant0279 maldet(8951): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Jul 20 2026 03:31:45 instant0279 maldet(8951): {sigup} latest signature set already installed
Jul 20 2026 03:31:45 instant0279 maldet(9569): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Jul 20 2026 03:32:06 instant0279 maldet(9569): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Jul 20 2026 03:32:06 instant0279 maldet(9569): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Jul 20 2026 03:32:06 instant0279 maldet(9569): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Jul 20 2026 03:32:06 instant0279 maldet(9569): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Jul 20 2026 03:32:29 instant0279 maldet(9569): {scan} file list completed in 23s, found 2283 files...
Jul 20 2026 03:32:29 instant0279 maldet(9569): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Jul 20 2026 03:32:29 instant0279 maldet(9569): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2283 files) in progress...
Jul 20 2026 03:34:29 instant0279 maldet(9569): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2283, malware hits 0, cleaned hits 0, time 164s
Jul 20 2026 03:34:29 instant0279 maldet(9569): {scan} scan report saved, to view run: maldet --report 260720-0331.9569
Jul 21 2026 03:15:37 instant0279 maldet(27256): {update} checking for available updates...
Jul 21 2026 03:15:37 instant0279 maldet(27256): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Jul 21 2026 03:15:37 instant0279 maldet(27256): {update} hashing install files and checking against server...
Jul 21 2026 03:15:37 instant0279 maldet(27256): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Jul 21 2026 03:15:37 instant0279 maldet(27256): {update} latest version already installed.
Jul 21 2026 03:15:37 instant0279 maldet(27876): {sigup} performing signature update check...
Jul 21 2026 03:15:37 instant0279 maldet(27876): {sigup} local signature set is version 2026052490478
Jul 21 2026 03:15:38 instant0279 maldet(27876): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Jul 21 2026 03:15:38 instant0279 maldet(27876): {sigup} latest signature set already installed
Jul 21 2026 03:15:38 instant0279 maldet(28478): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Jul 21 2026 03:15:38 instant0279 maldet(28478): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Jul 21 2026 03:15:38 instant0279 maldet(28478): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Jul 21 2026 03:15:38 instant0279 maldet(28478): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Jul 21 2026 03:15:38 instant0279 maldet(28478): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Jul 21 2026 03:16:12 instant0279 maldet(28478): {scan} file list completed in 34s, found 531 files...
Jul 21 2026 03:16:12 instant0279 maldet(28478): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Jul 21 2026 03:16:12 instant0279 maldet(28478): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (531 files) in progress...
Jul 21 2026 03:16:48 instant0279 maldet(28478): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 531, malware hits 0, cleaned hits 0, time 70s
Jul 21 2026 03:16:48 instant0279 maldet(28478): {scan} scan report saved, to view run: maldet --report 260721-0315.28478
Jul 22 2026 03:51:07 instant0279 maldet(11102): {update} checking for available updates...
Jul 22 2026 03:51:07 instant0279 maldet(11102): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Jul 22 2026 03:51:07 instant0279 maldet(11102): {update} hashing install files and checking against server...
Jul 22 2026 03:51:07 instant0279 maldet(11102): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Jul 22 2026 03:51:07 instant0279 maldet(11102): {update} latest version already installed.
Jul 22 2026 03:51:08 instant0279 maldet(11727): {sigup} performing signature update check...
Jul 22 2026 03:51:08 instant0279 maldet(11727): {sigup} local signature set is version 2026052490478
Jul 22 2026 03:51:08 instant0279 maldet(11727): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Jul 22 2026 03:51:08 instant0279 maldet(11727): {sigup} latest signature set already installed
Jul 22 2026 03:51:08 instant0279 maldet(12338): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Jul 22 2026 03:51:09 instant0279 maldet(12338): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Jul 22 2026 03:51:09 instant0279 maldet(12338): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Jul 22 2026 03:51:09 instant0279 maldet(12338): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Jul 22 2026 03:51:09 instant0279 maldet(12338): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Jul 22 2026 03:51:41 instant0279 maldet(12338): {scan} file list completed in 32s, found 529 files...
Jul 22 2026 03:51:41 instant0279 maldet(12338): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Jul 22 2026 03:51:41 instant0279 maldet(12338): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (529 files) in progress...
Jul 22 2026 03:52:36 instant0279 maldet(12338): {hit} malware hit {CAV}Win.Trojan.Hide-1 found for /home/eternalbonus/public_html/wp-content/plugins/wp2p_f1f34fd0/f7dcb3b59d11.php
Jul 22 2026 03:52:36 instant0279 maldet(12338): {quar} malware quarantined from '/home/eternalbonus/public_html/wp-content/plugins/wp2p_f1f34fd0/f7dcb3b59d11.php' to '/usr/local/maldetect/quarantine/f7dcb3b59d11.php.2396426077'
Jul 22 2026 03:52:36 instant0279 maldet(12338): {clean} could not find clean rule for hit Win.Trojan.Hide-1 or file /usr/local/maldetect/quarantine/f7dcb3b59d11.php.2396426077 no longer exists.
Jul 22 2026 03:52:36 instant0279 maldet(12338): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 529, malware hits 1, cleaned hits 0, time 88s
Jul 22 2026 03:52:36 instant0279 maldet(12338): {scan} scan report saved, to view run: maldet --report 260722-0351.12338
Jul 22 2026 03:52:36 instant0279 maldet(12338): {alert} sent scan report to [email protected]
Jul 23 2026 03:25:19 instant0279 maldet(18261): {update} checking for available updates...
Jul 23 2026 03:25:19 instant0279 maldet(18261): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Jul 23 2026 03:25:19 instant0279 maldet(18261): {update} hashing install files and checking against server...
Jul 23 2026 03:25:19 instant0279 maldet(18261): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Jul 23 2026 03:25:19 instant0279 maldet(18261): {update} latest version already installed.
Jul 23 2026 03:25:19 instant0279 maldet(18911): {sigup} performing signature update check...
Jul 23 2026 03:25:20 instant0279 maldet(18911): {sigup} local signature set is version 2026052490478
Jul 23 2026 03:25:20 instant0279 maldet(18911): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Jul 23 2026 03:25:20 instant0279 maldet(18911): {sigup} latest signature set already installed
Jul 23 2026 03:25:20 instant0279 maldet(19529): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Jul 23 2026 03:25:20 instant0279 maldet(19529): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Jul 23 2026 03:25:20 instant0279 maldet(19529): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Jul 23 2026 03:25:20 instant0279 maldet(19529): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Jul 23 2026 03:25:20 instant0279 maldet(19529): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Jul 23 2026 03:25:52 instant0279 maldet(19529): {scan} file list completed in 32s, found 4367 files...
Jul 23 2026 03:25:52 instant0279 maldet(19529): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Jul 23 2026 03:25:52 instant0279 maldet(19529): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (4367 files) in progress...
Jul 23 2026 03:27:57 instant0279 maldet(19529): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 4367, malware hits 0, cleaned hits 0, time 157s
Jul 23 2026 03:27:57 instant0279 maldet(19529): {scan} scan report saved, to view run: maldet --report 260723-0325.19529
Jul 24 2026 03:48:58 instant0279 maldet(3335): {update} checking for available updates...
Jul 24 2026 03:48:59 instant0279 maldet(3335): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Jul 24 2026 03:48:59 instant0279 maldet(3335): {update} hashing install files and checking against server...
Jul 24 2026 03:48:59 instant0279 maldet(3335): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Jul 24 2026 03:48:59 instant0279 maldet(3335): {update} latest version already installed.
Jul 24 2026 03:48:59 instant0279 maldet(3987): {sigup} performing signature update check...
Jul 24 2026 03:48:59 instant0279 maldet(3987): {sigup} local signature set is version 2026052490478
Jul 24 2026 03:48:59 instant0279 maldet(3987): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Jul 24 2026 03:48:59 instant0279 maldet(3987): {sigup} latest signature set already installed
Jul 24 2026 03:49:00 instant0279 maldet(4615): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Jul 24 2026 03:49:25 instant0279 maldet(4615): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Jul 24 2026 03:49:25 instant0279 maldet(4615): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Jul 24 2026 03:49:25 instant0279 maldet(4615): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Jul 24 2026 03:49:25 instant0279 maldet(4615): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Jul 24 2026 03:49:43 instant0279 maldet(4615): {scan} file list completed in 18s, found 337 files...
Jul 24 2026 03:49:43 instant0279 maldet(4615): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Jul 24 2026 03:49:43 instant0279 maldet(4615): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (337 files) in progress...
Jul 24 2026 03:50:22 instant0279 maldet(4615): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 337, malware hits 0, cleaned hits 0, time 81s
Jul 24 2026 03:50:22 instant0279 maldet(4615): {scan} scan report saved, to view run: maldet --report 260724-0348.4615
Jul 25 2026 04:30:34 instant0279 maldet(18630): {update} checking for available updates...
Jul 25 2026 04:30:35 instant0279 maldet(18630): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Jul 25 2026 04:30:35 instant0279 maldet(18630): {update} hashing install files and checking against server...
Jul 25 2026 04:30:35 instant0279 maldet(18630): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Jul 25 2026 04:30:35 instant0279 maldet(18630): {update} latest version already installed.
Jul 25 2026 04:30:35 instant0279 maldet(19267): {sigup} performing signature update check...
Jul 25 2026 04:30:35 instant0279 maldet(19267): {sigup} local signature set is version 2026052490478
Jul 25 2026 04:30:36 instant0279 maldet(19267): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Jul 25 2026 04:30:36 instant0279 maldet(19267): {sigup} latest signature set already installed
Jul 25 2026 04:30:36 instant0279 maldet(19883): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Jul 25 2026 04:31:06 instant0279 maldet(19883): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Jul 25 2026 04:31:06 instant0279 maldet(19883): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Jul 25 2026 04:31:06 instant0279 maldet(19883): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Jul 25 2026 04:31:06 instant0279 maldet(19883): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Jul 25 2026 04:31:31 instant0279 maldet(19883): {scan} file list completed in 25s, found 289 files...
Jul 25 2026 04:31:31 instant0279 maldet(19883): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Jul 25 2026 04:31:31 instant0279 maldet(19883): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (289 files) in progress...
Jul 25 2026 04:32:05 instant0279 maldet(19883): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 289, malware hits 0, cleaned hits 0, time 89s
Jul 25 2026 04:32:05 instant0279 maldet(19883): {scan} scan report saved, to view run: maldet --report 260725-0430.19883
Jul 26 2026 03:42:01 instant0279 maldet(25591): {update} checking for available updates...
Jul 26 2026 03:42:02 instant0279 maldet(25591): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Jul 26 2026 03:42:02 instant0279 maldet(25591): {update} hashing install files and checking against server...
Jul 26 2026 03:42:02 instant0279 maldet(25591): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Jul 26 2026 03:42:02 instant0279 maldet(25591): {update} latest version already installed.
Jul 26 2026 03:42:02 instant0279 maldet(26235): {sigup} performing signature update check...
Jul 26 2026 03:42:02 instant0279 maldet(26235): {sigup} local signature set is version 2026052490478
Jul 26 2026 03:42:02 instant0279 maldet(26235): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Jul 26 2026 03:42:02 instant0279 maldet(26235): {sigup} latest signature set already installed
Jul 26 2026 03:42:03 instant0279 maldet(26834): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Jul 26 2026 03:42:03 instant0279 maldet(26834): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Jul 26 2026 03:42:03 instant0279 maldet(26834): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Jul 26 2026 03:42:03 instant0279 maldet(26834): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Jul 26 2026 03:42:03 instant0279 maldet(26834): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Jul 26 2026 03:42:34 instant0279 maldet(26834): {scan} file list completed in 31s, found 1334 files...
Jul 26 2026 03:42:34 instant0279 maldet(26834): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Jul 26 2026 03:42:34 instant0279 maldet(26834): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1334 files) in progress...
Jul 26 2026 03:44:08 instant0279 maldet(26834): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details!
Jul 26 2026 03:44:08 instant0279 maldet(26834): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1334, malware hits 0, cleaned hits 0, time 125s
Jul 26 2026 03:44:08 instant0279 maldet(26834): {scan} scan report saved, to view run: maldet --report 260726-0342.26834
Jul 27 2026 03:08:51 instant0279 maldet(31349): {update} checking for available updates...
Jul 27 2026 03:08:51 instant0279 maldet(31349): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Jul 27 2026 03:08:51 instant0279 maldet(31349): {update} hashing install files and checking against server...
Jul 27 2026 03:08:51 instant0279 maldet(31349): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Jul 27 2026 03:08:51 instant0279 maldet(31349): {update} latest version already installed.
Jul 27 2026 03:08:52 instant0279 maldet(31992): {sigup} performing signature update check...
Jul 27 2026 03:08:52 instant0279 maldet(31992): {sigup} local signature set is version 2026052490478
Jul 27 2026 03:08:52 instant0279 maldet(31992): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Jul 27 2026 03:08:52 instant0279 maldet(31992): {sigup} latest signature set already installed
Jul 27 2026 03:08:52 instant0279 maldet(32591): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Jul 27 2026 03:08:53 instant0279 maldet(32591): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Jul 27 2026 03:08:53 instant0279 maldet(32591): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Jul 27 2026 03:08:53 instant0279 maldet(32591): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Jul 27 2026 03:08:53 instant0279 maldet(32591): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Jul 27 2026 03:09:23 instant0279 maldet(32591): {scan} file list completed in 30s, found 375 files...
Jul 27 2026 03:09:23 instant0279 maldet(32591): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Jul 27 2026 03:09:23 instant0279 maldet(32591): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (375 files) in progress...
Jul 27 2026 03:09:42 instant0279 maldet(32591): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 375, malware hits 0, cleaned hits 0, time 50s
Jul 27 2026 03:09:42 instant0279 maldet(32591): {scan} scan report saved, to view run: maldet --report 260727-0308.32591
Jul 28 2026 03:32:51 instant0279 maldet(16369): {update} checking for available updates...
Jul 28 2026 03:32:51 instant0279 maldet(16369): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Jul 28 2026 03:32:51 instant0279 maldet(16369): {update} hashing install files and checking against server...
Jul 28 2026 03:32:51 instant0279 maldet(16369): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Jul 28 2026 03:32:51 instant0279 maldet(16369): {update} latest version already installed.
Jul 28 2026 03:32:52 instant0279 maldet(17046): {sigup} performing signature update check...
Jul 28 2026 03:32:52 instant0279 maldet(17046): {sigup} local signature set is version 2026052490478
Jul 28 2026 03:32:52 instant0279 maldet(17046): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Jul 28 2026 03:32:52 instant0279 maldet(17046): {sigup} latest signature set already installed
Jul 28 2026 03:32:52 instant0279 maldet(17691): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Jul 28 2026 03:32:53 instant0279 maldet(17691): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Jul 28 2026 03:32:53 instant0279 maldet(17691): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Jul 28 2026 03:32:53 instant0279 maldet(17691): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Jul 28 2026 03:32:53 instant0279 maldet(17691): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Jul 28 2026 03:33:26 instant0279 maldet(17691): {scan} file list completed in 33s, found 446 files...
Jul 28 2026 03:33:26 instant0279 maldet(17691): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Jul 28 2026 03:33:26 instant0279 maldet(17691): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (446 files) in progress...
Jul 28 2026 03:34:06 instant0279 maldet(17691): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 446, malware hits 0, cleaned hits 0, time 74s
Jul 28 2026 03:34:06 instant0279 maldet(17691): {scan} scan report saved, to view run: maldet --report 260728-0332.17691
Jul 29 2026 03:50:39 instant0279 maldet(30590): {update} checking for available updates...
Jul 29 2026 03:50:40 instant0279 maldet(30590): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Jul 29 2026 03:50:40 instant0279 maldet(30590): {update} hashing install files and checking against server...
Jul 29 2026 03:50:40 instant0279 maldet(30590): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Jul 29 2026 03:50:40 instant0279 maldet(30590): {update} latest version already installed.
Jul 29 2026 03:50:40 instant0279 maldet(31244): {sigup} performing signature update check...
Jul 29 2026 03:50:40 instant0279 maldet(31244): {sigup} local signature set is version 2026052490478
Jul 29 2026 03:50:41 instant0279 maldet(31244): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Jul 29 2026 03:50:41 instant0279 maldet(31244): {sigup} latest signature set already installed
Jul 29 2026 03:50:41 instant0279 maldet(31850): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Jul 29 2026 03:50:41 instant0279 maldet(31850): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Jul 29 2026 03:50:41 instant0279 maldet(31850): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Jul 29 2026 03:50:41 instant0279 maldet(31850): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Jul 29 2026 03:50:41 instant0279 maldet(31850): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Jul 29 2026 03:51:14 instant0279 maldet(31850): {scan} file list completed in 33s, found 359 files...
Jul 29 2026 03:51:14 instant0279 maldet(31850): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Jul 29 2026 03:51:14 instant0279 maldet(31850): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (359 files) in progress...
Jul 29 2026 03:52:07 instant0279 maldet(31850): {hit} malware hit {HEX}php.cpanel.d0mains.403 found for /home/ptgoldenvisa/public_html/topinvestorvisa.com/wp-content/uploads/2026/07/H3W71qd.zip
Jul 29 2026 03:52:07 instant0279 maldet(31850): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/topinvestorvisa.com/wp-content/uploads/2026/07/H3W71qd.zip' to '/usr/local/maldetect/quarantine/H3W71qd.zip.173936057'
Jul 29 2026 03:52:07 instant0279 maldet(31850): {clean} could not find clean rule for hit php.cpanel.d0mains or file /usr/local/maldetect/quarantine/H3W71qd.zip.173936057 no longer exists.
Jul 29 2026 03:52:07 instant0279 maldet(31850): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 359, malware hits 1, cleaned hits 0, time 86s
Jul 29 2026 03:52:07 instant0279 maldet(31850): {scan} scan report saved, to view run: maldet --report 260729-0350.31850
Jul 29 2026 03:52:07 instant0279 maldet(31850): {alert} sent scan report to [email protected]
Jul 30 2026 03:52:58 instant0279 maldet(13963): {update} checking for available updates...
Jul 30 2026 03:52:58 instant0279 maldet(13963): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Jul 30 2026 03:52:58 instant0279 maldet(13963): {update} hashing install files and checking against server...
Jul 30 2026 03:52:58 instant0279 maldet(13963): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Jul 30 2026 03:52:58 instant0279 maldet(13963): {update} latest version already installed.
Jul 30 2026 03:52:59 instant0279 maldet(14608): {sigup} performing signature update check...
Jul 30 2026 03:52:59 instant0279 maldet(14608): {sigup} local signature set is version 2026052490478
Jul 30 2026 03:52:59 instant0279 maldet(14608): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Jul 30 2026 03:52:59 instant0279 maldet(14608): {sigup} latest signature set already installed
Jul 30 2026 03:52:59 instant0279 maldet(15228): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Jul 30 2026 03:53:22 instant0279 maldet(15228): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Jul 30 2026 03:53:22 instant0279 maldet(15228): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Jul 30 2026 03:53:22 instant0279 maldet(15228): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Jul 30 2026 03:53:22 instant0279 maldet(15228): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Jul 30 2026 03:53:39 instant0279 maldet(15228): {scan} file list completed in 17s, found 250 files...
Jul 30 2026 03:53:39 instant0279 maldet(15228): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Jul 30 2026 03:53:39 instant0279 maldet(15228): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (250 files) in progress...
Jul 30 2026 03:54:05 instant0279 maldet(15228): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 250, malware hits 0, cleaned hits 0, time 66s
Jul 30 2026 03:54:05 instant0279 maldet(15228): {scan} scan report saved, to view run: maldet --report 260730-0352.15228
Jul 31 2026 03:15:46 instant0279 maldet(27856): {update} checking for available updates...
Jul 31 2026 03:15:46 instant0279 maldet(27856): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Jul 31 2026 03:15:46 instant0279 maldet(27856): {update} hashing install files and checking against server...
Jul 31 2026 03:15:47 instant0279 maldet(27856): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Jul 31 2026 03:15:47 instant0279 maldet(27856): {update} latest version already installed.
Jul 31 2026 03:15:47 instant0279 maldet(28516): {sigup} performing signature update check...
Jul 31 2026 03:15:47 instant0279 maldet(28516): {sigup} local signature set is version 2026052490478
Jul 31 2026 03:15:47 instant0279 maldet(28516): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Jul 31 2026 03:15:47 instant0279 maldet(28516): {sigup} latest signature set already installed
Jul 31 2026 03:15:48 instant0279 maldet(29134): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Jul 31 2026 03:15:48 instant0279 maldet(29134): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Jul 31 2026 03:15:48 instant0279 maldet(29134): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Jul 31 2026 03:15:48 instant0279 maldet(29134): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Jul 31 2026 03:15:48 instant0279 maldet(29134): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Jul 31 2026 03:16:19 instant0279 maldet(29134): {scan} file list completed in 31s, found 455 files...
Jul 31 2026 03:16:19 instant0279 maldet(29134): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Jul 31 2026 03:16:19 instant0279 maldet(29134): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (455 files) in progress...
Jul 31 2026 03:16:43 instant0279 maldet(29134): {hit} malware hit {HEX}php.cpanel.d0mains.403 found for /home/ptgoldenvisa/public_html/topinvestorvisa.com/wp-content/uploads/2026/07/O3FzxDv.zip
Jul 31 2026 03:16:43 instant0279 maldet(29134): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/topinvestorvisa.com/wp-content/uploads/2026/07/O3FzxDv.zip' to '/usr/local/maldetect/quarantine/O3FzxDv.zip.2025511238'
Jul 31 2026 03:16:43 instant0279 maldet(29134): {clean} could not find clean rule for hit php.cpanel.d0mains or file /usr/local/maldetect/quarantine/O3FzxDv.zip.2025511238 no longer exists.
Jul 31 2026 03:16:43 instant0279 maldet(29134): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 455, malware hits 1, cleaned hits 0, time 55s
Jul 31 2026 03:16:43 instant0279 maldet(29134): {scan} scan report saved, to view run: maldet --report 260731-0315.29134
Jul 31 2026 03:16:43 instant0279 maldet(29134): {alert} sent scan report to [email protected]
Aug 01 2026 03:13:11 instant0279 maldet(22458): {update} checking for available updates...
Aug 01 2026 03:13:12 instant0279 maldet(22458): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Aug 01 2026 03:13:12 instant0279 maldet(22458): {update} hashing install files and checking against server...
Aug 01 2026 03:13:12 instant0279 maldet(22458): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Aug 01 2026 03:13:12 instant0279 maldet(22458): {update} latest version already installed.
Aug 01 2026 03:13:12 instant0279 maldet(23086): {sigup} performing signature update check...
Aug 01 2026 03:13:12 instant0279 maldet(23086): {sigup} local signature set is version 2026052490478
Aug 01 2026 03:13:12 instant0279 maldet(23086): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Aug 01 2026 03:13:12 instant0279 maldet(23086): {sigup} latest signature set already installed
Aug 01 2026 03:13:13 instant0279 maldet(23712): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Aug 01 2026 03:13:13 instant0279 maldet(23712): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Aug 01 2026 03:13:13 instant0279 maldet(23712): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Aug 01 2026 03:13:13 instant0279 maldet(23712): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Aug 01 2026 03:13:13 instant0279 maldet(23712): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Aug 01 2026 03:13:45 instant0279 maldet(23712): {scan} file list completed in 32s, found 411 files...
Aug 01 2026 03:13:45 instant0279 maldet(23712): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Aug 01 2026 03:13:45 instant0279 maldet(23712): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (411 files) in progress...
Aug 01 2026 03:14:21 instant0279 maldet(23712): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 411, malware hits 0, cleaned hits 0, time 68s
Aug 01 2026 03:14:21 instant0279 maldet(23712): {scan} scan report saved, to view run: maldet --report 260801-0313.23712
Aug 02 2026 03:33:53 instant0279 maldet(4313): {update} checking for available updates...
Aug 02 2026 03:33:53 instant0279 maldet(4313): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Aug 02 2026 03:33:53 instant0279 maldet(4313): {update} hashing install files and checking against server...
Aug 02 2026 03:33:53 instant0279 maldet(4313): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Aug 02 2026 03:33:53 instant0279 maldet(4313): {update} latest version already installed.
Aug 02 2026 03:33:53 instant0279 maldet(4941): {sigup} performing signature update check...
Aug 02 2026 03:33:53 instant0279 maldet(4941): {sigup} local signature set is version 2026052490478
Aug 02 2026 03:33:54 instant0279 maldet(4941): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Aug 02 2026 03:33:54 instant0279 maldet(4941): {sigup} latest signature set already installed
Aug 02 2026 03:33:54 instant0279 maldet(5586): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Aug 02 2026 03:34:17 instant0279 maldet(5586): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Aug 02 2026 03:34:17 instant0279 maldet(5586): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Aug 02 2026 03:34:17 instant0279 maldet(5586): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Aug 02 2026 03:34:17 instant0279 maldet(5586): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Aug 02 2026 03:34:32 instant0279 maldet(5586): {scan} file list completed in 15s, found 653 files...
Aug 02 2026 03:34:32 instant0279 maldet(5586): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Aug 02 2026 03:34:32 instant0279 maldet(5586): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (653 files) in progress...
Aug 02 2026 03:35:24 instant0279 maldet(5586): {hit} malware hit {HEX}php.cpanel.d0mains.403 found for /home/ptgoldenvisa/public_html/topinvestorvisa.com/wp-content/uploads/2026/08/LIBb7Du.zip
Aug 02 2026 03:35:24 instant0279 maldet(5586): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/topinvestorvisa.com/wp-content/uploads/2026/08/LIBb7Du.zip' to '/usr/local/maldetect/quarantine/LIBb7Du.zip.1307312466'
Aug 02 2026 03:35:24 instant0279 maldet(5586): {clean} could not find clean rule for hit php.cpanel.d0mains or file /usr/local/maldetect/quarantine/LIBb7Du.zip.1307312466 no longer exists.
Aug 02 2026 03:35:24 instant0279 maldet(5586): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 653, malware hits 1, cleaned hits 0, time 90s
Aug 02 2026 03:35:24 instant0279 maldet(5586): {scan} scan report saved, to view run: maldet --report 260802-0333.5586
Aug 02 2026 03:35:24 instant0279 maldet(5586): {alert} sent scan report to [email protected]
Aug 03 2026 03:33:12 instant0279 maldet(25106): {update} checking for available updates...
Aug 03 2026 03:33:12 instant0279 maldet(25106): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Aug 03 2026 03:33:12 instant0279 maldet(25106): {update} hashing install files and checking against server...
Aug 03 2026 03:33:13 instant0279 maldet(25106): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Aug 03 2026 03:33:13 instant0279 maldet(25106): {update} latest version already installed.
Aug 03 2026 03:33:13 instant0279 maldet(25733): {sigup} performing signature update check...
Aug 03 2026 03:33:13 instant0279 maldet(25733): {sigup} local signature set is version 2026052490478
Aug 03 2026 03:33:13 instant0279 maldet(25733): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Aug 03 2026 03:33:13 instant0279 maldet(25733): {sigup} latest signature set already installed
Aug 03 2026 03:33:14 instant0279 maldet(26352): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Aug 03 2026 03:33:14 instant0279 maldet(26352): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Aug 03 2026 03:33:14 instant0279 maldet(26352): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Aug 03 2026 03:33:14 instant0279 maldet(26352): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Aug 03 2026 03:33:14 instant0279 maldet(26352): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Aug 03 2026 03:33:44 instant0279 maldet(26352): {scan} file list completed in 30s, found 694 files...
Aug 03 2026 03:33:44 instant0279 maldet(26352): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Aug 03 2026 03:33:44 instant0279 maldet(26352): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (694 files) in progress...
Aug 03 2026 03:34:18 instant0279 maldet(26352): {hit} malware hit {HEX}php.cpanel.d0mains.403 found for /home/ptgoldenvisa/public_html/topinvestorvisa.com/wp-content/uploads/2026/08/v6yUzTS.zip
Aug 03 2026 03:34:18 instant0279 maldet(26352): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/topinvestorvisa.com/wp-content/uploads/2026/08/v6yUzTS.zip' to '/usr/local/maldetect/quarantine/v6yUzTS.zip.1046616718'
Aug 03 2026 03:34:18 instant0279 maldet(26352): {clean} could not find clean rule for hit php.cpanel.d0mains or file /usr/local/maldetect/quarantine/v6yUzTS.zip.1046616718 no longer exists.
Aug 03 2026 03:34:18 instant0279 maldet(26352): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 694, malware hits 1, cleaned hits 0, time 64s
Aug 03 2026 03:34:18 instant0279 maldet(26352): {scan} scan report saved, to view run: maldet --report 260803-0333.26352
Aug 03 2026 03:34:18 instant0279 maldet(26352): {alert} sent scan report to [email protected]
Aug 04 2026 03:34:51 instant0279 maldet(7148): {update} checking for available updates...
Aug 04 2026 03:34:52 instant0279 maldet(7148): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Aug 04 2026 03:34:52 instant0279 maldet(7148): {update} hashing install files and checking against server...
Aug 04 2026 03:34:52 instant0279 maldet(7148): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Aug 04 2026 03:34:52 instant0279 maldet(7148): {update} latest version already installed.
Aug 04 2026 03:34:52 instant0279 maldet(7824): {sigup} performing signature update check...
Aug 04 2026 03:34:52 instant0279 maldet(7824): {sigup} local signature set is version 2026052490478
Aug 04 2026 03:34:53 instant0279 maldet(7824): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Aug 04 2026 03:34:53 instant0279 maldet(7824): {sigup} latest signature set already installed
Aug 04 2026 03:34:53 instant0279 maldet(8490): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Aug 04 2026 03:34:53 instant0279 maldet(8490): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Aug 04 2026 03:34:53 instant0279 maldet(8490): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Aug 04 2026 03:34:53 instant0279 maldet(8490): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Aug 04 2026 03:34:53 instant0279 maldet(8490): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Aug 04 2026 03:35:23 instant0279 maldet(8490): {scan} file list completed in 30s, found 463 files...
Aug 04 2026 03:35:23 instant0279 maldet(8490): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Aug 04 2026 03:35:23 instant0279 maldet(8490): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (463 files) in progress...
Aug 04 2026 03:36:02 instant0279 maldet(8490): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 463, malware hits 0, cleaned hits 0, time 69s
Aug 04 2026 03:36:02 instant0279 maldet(8490): {scan} scan report saved, to view run: maldet --report 260804-0334.8490
Aug 05 2026 03:23:03 instant0279 maldet(5618): {update} checking for available updates...
Aug 05 2026 03:23:03 instant0279 maldet(5618): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Aug 05 2026 03:23:03 instant0279 maldet(5618): {update} hashing install files and checking against server...
Aug 05 2026 03:23:03 instant0279 maldet(5618): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Aug 05 2026 03:23:03 instant0279 maldet(5618): {update} latest version already installed.
Aug 05 2026 03:23:04 instant0279 maldet(6282): {sigup} performing signature update check...
Aug 05 2026 03:23:04 instant0279 maldet(6282): {sigup} local signature set is version 2026052490478
Aug 05 2026 03:23:04 instant0279 maldet(6282): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Aug 05 2026 03:23:04 instant0279 maldet(6282): {sigup} latest signature set already installed
Aug 05 2026 03:23:04 instant0279 maldet(6907): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Aug 05 2026 03:23:05 instant0279 maldet(6907): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Aug 05 2026 03:23:05 instant0279 maldet(6907): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Aug 05 2026 03:23:05 instant0279 maldet(6907): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Aug 05 2026 03:23:05 instant0279 maldet(6907): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Aug 05 2026 03:23:35 instant0279 maldet(6907): {scan} file list completed in 30s, found 469 files...
Aug 05 2026 03:23:35 instant0279 maldet(6907): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Aug 05 2026 03:23:35 instant0279 maldet(6907): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (469 files) in progress...
Aug 05 2026 03:24:16 instant0279 maldet(6907): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 469, malware hits 0, cleaned hits 0, time 72s
Aug 05 2026 03:24:16 instant0279 maldet(6907): {scan} scan report saved, to view run: maldet --report 260805-0323.6907
Aug 06 2026 03:14:13 instant0279 maldet(3712): {update} checking for available updates...
Aug 06 2026 03:14:13 instant0279 maldet(3712): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Aug 06 2026 03:14:13 instant0279 maldet(3712): {update} hashing install files and checking against server...
Aug 06 2026 03:14:13 instant0279 maldet(3712): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Aug 06 2026 03:14:13 instant0279 maldet(3712): {update} latest version already installed.
Aug 06 2026 03:14:14 instant0279 maldet(4393): {sigup} performing signature update check...
Aug 06 2026 03:14:14 instant0279 maldet(4393): {sigup} local signature set is version 2026052490478
Aug 06 2026 03:14:14 instant0279 maldet(4393): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Aug 06 2026 03:14:14 instant0279 maldet(4393): {sigup} latest signature set already installed
Aug 06 2026 03:14:14 instant0279 maldet(5025): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Aug 06 2026 03:14:15 instant0279 maldet(5025): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Aug 06 2026 03:14:15 instant0279 maldet(5025): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Aug 06 2026 03:14:15 instant0279 maldet(5025): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Aug 06 2026 03:14:15 instant0279 maldet(5025): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Aug 06 2026 03:14:45 instant0279 maldet(5025): {scan} file list completed in 30s, found 421 files...
Aug 06 2026 03:14:45 instant0279 maldet(5025): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Aug 06 2026 03:14:45 instant0279 maldet(5025): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (421 files) in progress...
Aug 06 2026 03:15:23 instant0279 maldet(5025): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 421, malware hits 0, cleaned hits 0, time 69s
Aug 06 2026 03:15:23 instant0279 maldet(5025): {scan} scan report saved, to view run: maldet --report 260806-0314.5025
Aug 07 2026 03:15:02 instant0279 maldet(21057): {update} checking for available updates...
Aug 07 2026 03:15:03 instant0279 maldet(21057): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Aug 07 2026 03:15:03 instant0279 maldet(21057): {update} hashing install files and checking against server...
Aug 07 2026 03:15:03 instant0279 maldet(21057): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Aug 07 2026 03:15:03 instant0279 maldet(21057): {update} latest version already installed.
Aug 07 2026 03:15:03 instant0279 maldet(21731): {sigup} performing signature update check...
Aug 07 2026 03:15:03 instant0279 maldet(21731): {sigup} local signature set is version 2026052490478
Aug 07 2026 03:15:04 instant0279 maldet(21731): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Aug 07 2026 03:15:04 instant0279 maldet(21731): {sigup} latest signature set already installed
Aug 07 2026 03:15:04 instant0279 maldet(22374): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Aug 07 2026 03:15:04 instant0279 maldet(22374): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Aug 07 2026 03:15:04 instant0279 maldet(22374): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Aug 07 2026 03:15:04 instant0279 maldet(22374): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Aug 07 2026 03:15:04 instant0279 maldet(22374): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Aug 07 2026 03:15:36 instant0279 maldet(22374): {scan} file list completed in 32s, found 350 files...
Aug 07 2026 03:15:36 instant0279 maldet(22374): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Aug 07 2026 03:15:36 instant0279 maldet(22374): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (350 files) in progress...
Aug 07 2026 03:16:05 instant0279 maldet(22374): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 350, malware hits 0, cleaned hits 0, time 61s
Aug 07 2026 03:16:05 instant0279 maldet(22374): {scan} scan report saved, to view run: maldet --report 260807-0315.22374
Aug 08 2026 03:29:46 instant0279 maldet(20318): {update} checking for available updates...
Aug 08 2026 03:29:46 instant0279 maldet(20318): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Aug 08 2026 03:29:46 instant0279 maldet(20318): {update} hashing install files and checking against server...
Aug 08 2026 03:29:46 instant0279 maldet(20318): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Aug 08 2026 03:29:46 instant0279 maldet(20318): {update} latest version already installed.
Aug 08 2026 03:29:46 instant0279 maldet(20993): {sigup} performing signature update check...
Aug 08 2026 03:29:46 instant0279 maldet(20993): {sigup} local signature set is version 2026052490478
Aug 08 2026 03:29:47 instant0279 maldet(20993): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Aug 08 2026 03:29:47 instant0279 maldet(20993): {sigup} latest signature set already installed
Aug 08 2026 03:29:47 instant0279 maldet(21622): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Aug 08 2026 03:29:47 instant0279 maldet(21622): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Aug 08 2026 03:29:47 instant0279 maldet(21622): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Aug 08 2026 03:29:47 instant0279 maldet(21622): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Aug 08 2026 03:29:47 instant0279 maldet(21622): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Aug 08 2026 03:30:22 instant0279 maldet(21622): {scan} file list completed in 35s, found 91 files...
Aug 08 2026 03:30:22 instant0279 maldet(21622): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Aug 08 2026 03:30:22 instant0279 maldet(21622): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (91 files) in progress...
Aug 08 2026 03:30:40 instant0279 maldet(21622): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 91, malware hits 0, cleaned hits 0, time 53s
Aug 08 2026 03:30:40 instant0279 maldet(21622): {scan} scan report saved, to view run: maldet --report 260808-0329.21622
Aug 09 2026 03:56:13 instant0279 maldet(12002): {update} checking for available updates...
Aug 09 2026 03:56:13 instant0279 maldet(12002): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Aug 09 2026 03:56:13 instant0279 maldet(12002): {update} hashing install files and checking against server...
Aug 09 2026 03:56:13 instant0279 maldet(12002): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Aug 09 2026 03:56:13 instant0279 maldet(12002): {update} latest version already installed.
Aug 09 2026 03:56:14 instant0279 maldet(12646): {sigup} performing signature update check...
Aug 09 2026 03:56:14 instant0279 maldet(12646): {sigup} local signature set is version 2026052490478
Aug 09 2026 03:56:14 instant0279 maldet(12646): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Aug 09 2026 03:56:14 instant0279 maldet(12646): {sigup} latest signature set already installed
Aug 09 2026 03:56:14 instant0279 maldet(13270): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Aug 09 2026 03:56:35 instant0279 maldet(13270): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Aug 09 2026 03:56:35 instant0279 maldet(13270): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Aug 09 2026 03:56:35 instant0279 maldet(13270): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Aug 09 2026 03:56:35 instant0279 maldet(13270): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Aug 09 2026 03:56:57 instant0279 maldet(13270): {scan} file list completed in 22s, found 96 files...
Aug 09 2026 03:56:57 instant0279 maldet(13270): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Aug 09 2026 03:56:57 instant0279 maldet(13270): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (96 files) in progress...
Aug 09 2026 03:57:09 instant0279 maldet(13270): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 96, malware hits 0, cleaned hits 0, time 55s
Aug 09 2026 03:57:09 instant0279 maldet(13270): {scan} scan report saved, to view run: maldet --report 260809-0356.13270
Aug 10 2026 03:25:29 instant0279 maldet(25710): {update} checking for available updates...
Aug 10 2026 03:25:29 instant0279 maldet(25710): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Aug 10 2026 03:25:29 instant0279 maldet(25710): {update} hashing install files and checking against server...
Aug 10 2026 03:25:30 instant0279 maldet(25710): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Aug 10 2026 03:25:30 instant0279 maldet(25710): {update} latest version already installed.
Aug 10 2026 03:25:30 instant0279 maldet(26358): {sigup} performing signature update check...
Aug 10 2026 03:25:30 instant0279 maldet(26358): {sigup} local signature set is version 2026052490478
Aug 10 2026 03:25:30 instant0279 maldet(26358): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Aug 10 2026 03:25:30 instant0279 maldet(26358): {sigup} latest signature set already installed
Aug 10 2026 03:25:31 instant0279 maldet(27001): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Aug 10 2026 03:25:31 instant0279 maldet(27001): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Aug 10 2026 03:25:31 instant0279 maldet(27001): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Aug 10 2026 03:25:31 instant0279 maldet(27001): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Aug 10 2026 03:25:31 instant0279 maldet(27001): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Aug 10 2026 03:26:03 instant0279 maldet(27001): {scan} file list completed in 32s, found 132 files...
Aug 10 2026 03:26:03 instant0279 maldet(27001): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Aug 10 2026 03:26:03 instant0279 maldet(27001): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (132 files) in progress...
Aug 10 2026 03:26:08 instant0279 maldet(27001): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 132, malware hits 0, cleaned hits 0, time 37s
Aug 10 2026 03:26:08 instant0279 maldet(27001): {scan} scan report saved, to view run: maldet --report 260810-0325.27001
Aug 11 2026 03:29:26 instant0279 maldet(32028): {update} checking for available updates...
Aug 11 2026 03:29:26 instant0279 maldet(32028): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Aug 11 2026 03:29:26 instant0279 maldet(32028): {update} hashing install files and checking against server...
Aug 11 2026 03:29:26 instant0279 maldet(32028): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Aug 11 2026 03:29:26 instant0279 maldet(32028): {update} latest version already installed.
Aug 11 2026 03:29:27 instant0279 maldet(32636): {sigup} performing signature update check...
Aug 11 2026 03:29:27 instant0279 maldet(32636): {sigup} local signature set is version 2026052490478
Aug 11 2026 03:29:27 instant0279 maldet(32636): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Aug 11 2026 03:29:27 instant0279 maldet(32636): {sigup} latest signature set already installed
Aug 11 2026 03:29:27 instant0279 maldet(776): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Aug 11 2026 03:29:28 instant0279 maldet(776): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Aug 11 2026 03:29:28 instant0279 maldet(776): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Aug 11 2026 03:29:28 instant0279 maldet(776): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Aug 11 2026 03:29:28 instant0279 maldet(776): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Aug 11 2026 03:30:00 instant0279 maldet(776): {scan} file list completed in 32s, found 68 files...
Aug 11 2026 03:30:00 instant0279 maldet(776): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Aug 11 2026 03:30:00 instant0279 maldet(776): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (68 files) in progress...
Aug 11 2026 03:30:42 instant0279 maldet(776): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 68, malware hits 0, cleaned hits 0, time 75s
Aug 11 2026 03:30:42 instant0279 maldet(776): {scan} scan report saved, to view run: maldet --report 260811-0329.776
Aug 12 2026 03:14:47 instant0279 maldet(4494): {update} checking for available updates...
Aug 12 2026 03:14:47 instant0279 maldet(4494): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Aug 12 2026 03:14:47 instant0279 maldet(4494): {update} hashing install files and checking against server...
Aug 12 2026 03:14:47 instant0279 maldet(4494): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Aug 12 2026 03:14:47 instant0279 maldet(4494): {update} latest version already installed.
Aug 12 2026 03:14:48 instant0279 maldet(5119): {sigup} performing signature update check...
Aug 12 2026 03:14:48 instant0279 maldet(5119): {sigup} local signature set is version 2026052490478
Aug 12 2026 03:14:48 instant0279 maldet(5119): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Aug 12 2026 03:14:48 instant0279 maldet(5119): {sigup} latest signature set already installed
Aug 12 2026 03:14:48 instant0279 maldet(5735): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Aug 12 2026 03:14:49 instant0279 maldet(5735): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Aug 12 2026 03:14:49 instant0279 maldet(5735): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Aug 12 2026 03:14:49 instant0279 maldet(5735): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Aug 12 2026 03:14:49 instant0279 maldet(5735): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Aug 12 2026 03:15:29 instant0279 maldet(5735): {scan} file list completed in 40s, found 37 files...
Aug 12 2026 03:15:29 instant0279 maldet(5735): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Aug 12 2026 03:15:29 instant0279 maldet(5735): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (37 files) in progress...
Aug 12 2026 03:15:41 instant0279 maldet(5735): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 37, malware hits 0, cleaned hits 0, time 53s
Aug 12 2026 03:15:41 instant0279 maldet(5735): {scan} scan report saved, to view run: maldet --report 260812-0314.5735
Aug 13 2026 03:25:05 instant0279 maldet(9445): {update} checking for available updates...
Aug 13 2026 03:25:06 instant0279 maldet(9445): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Aug 13 2026 03:25:06 instant0279 maldet(9445): {update} hashing install files and checking against server...
Aug 13 2026 03:25:06 instant0279 maldet(9445): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Aug 13 2026 03:25:06 instant0279 maldet(9445): {update} latest version already installed.
Aug 13 2026 03:25:06 instant0279 maldet(10145): {sigup} performing signature update check...
Aug 13 2026 03:25:06 instant0279 maldet(10145): {sigup} local signature set is version 2026052490478
Aug 13 2026 03:25:07 instant0279 maldet(10145): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Aug 13 2026 03:25:07 instant0279 maldet(10145): {sigup} latest signature set already installed
Aug 13 2026 03:25:07 instant0279 maldet(10829): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Aug 13 2026 03:25:07 instant0279 maldet(10829): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Aug 13 2026 03:25:07 instant0279 maldet(10829): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Aug 13 2026 03:25:07 instant0279 maldet(10829): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Aug 13 2026 03:25:07 instant0279 maldet(10829): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Aug 13 2026 03:25:42 instant0279 maldet(10829): {scan} file list completed in 35s, found 158 files...
Aug 13 2026 03:25:42 instant0279 maldet(10829): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Aug 13 2026 03:25:42 instant0279 maldet(10829): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (158 files) in progress...
Aug 13 2026 03:26:27 instant0279 maldet(10829): {hit} malware hit {HEX}php.cmdshell.gifheader.396 found for /home/eternalbonus/public_html/cgi-bin/wk/index.php
Aug 13 2026 03:26:27 instant0279 maldet(10829): {quar} malware quarantined from '/home/eternalbonus/public_html/cgi-bin/wk/index.php' to '/usr/local/maldetect/quarantine/index.php.272522387'
Aug 13 2026 03:26:27 instant0279 maldet(10829): {clean} could not find clean rule for hit php.cmdshell.gifheader or file /usr/local/maldetect/quarantine/index.php.272522387 no longer exists.
Aug 13 2026 03:26:27 instant0279 maldet(10829): {hit} malware hit {HEX}php.cmdshell.gifheader.396 found for /home/eternalbonus/public_html/wp-admin/css/wk/index.php
Aug 13 2026 03:26:27 instant0279 maldet(10829): {quar} malware quarantined from '/home/eternalbonus/public_html/wp-admin/css/wk/index.php' to '/usr/local/maldetect/quarantine/index.php.2054212416'
Aug 13 2026 03:26:27 instant0279 maldet(10829): {clean} could not find clean rule for hit php.cmdshell.gifheader or file /usr/local/maldetect/quarantine/index.php.2054212416 no longer exists.
Aug 13 2026 03:26:27 instant0279 maldet(10829): {hit} malware hit {HEX}php.cmdshell.gifheader.396 found for /home/eternalbonus/public_html/wp-admin/wk/index.php
Aug 13 2026 03:26:27 instant0279 maldet(10829): {quar} malware quarantined from '/home/eternalbonus/public_html/wp-admin/wk/index.php' to '/usr/local/maldetect/quarantine/index.php.1387811815'
Aug 13 2026 03:26:27 instant0279 maldet(10829): {clean} could not find clean rule for hit php.cmdshell.gifheader or file /usr/local/maldetect/quarantine/index.php.1387811815 no longer exists.
Aug 13 2026 03:26:27 instant0279 maldet(10829): {hit} malware hit {HEX}php.cmdshell.gifheader.396 found for /home/eternalbonus/public_html/wp-admin/maint/wk/index.php
Aug 13 2026 03:26:27 instant0279 maldet(10829): {quar} malware quarantined from '/home/eternalbonus/public_html/wp-admin/maint/wk/index.php' to '/usr/local/maldetect/quarantine/index.php.150987001'
Aug 13 2026 03:26:27 instant0279 maldet(10829): {clean} could not find clean rule for hit php.cmdshell.gifheader or file /usr/local/maldetect/quarantine/index.php.150987001 no longer exists.
Aug 13 2026 03:26:27 instant0279 maldet(10829): {hit} malware hit {HEX}php.cmdshell.gifheader.396 found for /home/eternalbonus/public_html/wp-admin/user/wk/index.php
Aug 13 2026 03:26:27 instant0279 maldet(10829): {quar} malware quarantined from '/home/eternalbonus/public_html/wp-admin/user/wk/index.php' to '/usr/local/maldetect/quarantine/index.php.61926308'
Aug 13 2026 03:26:27 instant0279 maldet(10829): {clean} could not find clean rule for hit php.cmdshell.gifheader or file /usr/local/maldetect/quarantine/index.php.61926308 no longer exists.
Aug 13 2026 03:26:27 instant0279 maldet(10829): {hit} malware hit {HEX}php.cmdshell.gifheader.396 found for /home/eternalbonus/public_html/wp-admin/js/wk/index.php
Aug 13 2026 03:26:27 instant0279 maldet(10829): {quar} malware quarantined from '/home/eternalbonus/public_html/wp-admin/js/wk/index.php' to '/usr/local/maldetect/quarantine/index.php.34816871'
Aug 13 2026 03:26:27 instant0279 maldet(10829): {clean} could not find clean rule for hit php.cmdshell.gifheader or file /usr/local/maldetect/quarantine/index.php.34816871 no longer exists.
Aug 13 2026 03:26:27 instant0279 maldet(10829): {hit} malware hit {HEX}php.cmdshell.gifheader.396 found for /home/eternalbonus/public_html/wp-admin/network/wk/index.php
Aug 13 2026 03:26:27 instant0279 maldet(10829): {quar} malware quarantined from '/home/eternalbonus/public_html/wp-admin/network/wk/index.php' to '/usr/local/maldetect/quarantine/index.php.2247614396'
Aug 13 2026 03:26:27 instant0279 maldet(10829): {clean} could not find clean rule for hit php.cmdshell.gifheader or file /usr/local/maldetect/quarantine/index.php.2247614396 no longer exists.
Aug 13 2026 03:26:27 instant0279 maldet(10829): {hit} malware hit {HEX}php.cmdshell.gifheader.396 found for /home/eternalbonus/public_html/wp-admin/includes/wk/index.php
Aug 13 2026 03:26:27 instant0279 maldet(10829): {quar} malware quarantined from '/home/eternalbonus/public_html/wp-admin/includes/wk/index.php' to '/usr/local/maldetect/quarantine/index.php.2265130673'
Aug 13 2026 03:26:27 instant0279 maldet(10829): {clean} could not find clean rule for hit php.cmdshell.gifheader or file /usr/local/maldetect/quarantine/index.php.2265130673 no longer exists.
Aug 13 2026 03:26:27 instant0279 maldet(10829): {hit} malware hit {HEX}php.cmdshell.gifheader.396 found for /home/eternalbonus/public_html/wp-admin/tS7/wk/index.php
Aug 13 2026 03:26:27 instant0279 maldet(10829): {quar} malware quarantined from '/home/eternalbonus/public_html/wp-admin/tS7/wk/index.php' to '/usr/local/maldetect/quarantine/index.php.2559517969'
Aug 13 2026 03:26:27 instant0279 maldet(10829): {clean} could not find clean rule for hit php.cmdshell.gifheader or file /usr/local/maldetect/quarantine/index.php.2559517969 no longer exists.
Aug 13 2026 03:26:27 instant0279 maldet(10829): {hit} malware hit {HEX}php.cmdshell.gifheader.396 found for /home/eternalbonus/public_html/wp-admin/images/wk/index.php
Aug 13 2026 03:26:27 instant0279 maldet(10829): {quar} malware quarantined from '/home/eternalbonus/public_html/wp-admin/images/wk/index.php' to '/usr/local/maldetect/quarantine/index.php.20113752'
Aug 13 2026 03:26:27 instant0279 maldet(10829): {clean} could not find clean rule for hit php.cmdshell.gifheader or file /usr/local/maldetect/quarantine/index.php.20113752 no longer exists.
Aug 13 2026 03:26:27 instant0279 maldet(10829): {hit} malware hit {HEX}php.cmdshell.gifheader.396 found for /home/eternalbonus/public_html/d17b69/wk/index.php
Aug 13 2026 03:26:27 instant0279 maldet(10829): {quar} malware quarantined from '/home/eternalbonus/public_html/d17b69/wk/index.php' to '/usr/local/maldetect/quarantine/index.php.2879120785'
Aug 13 2026 03:26:27 instant0279 maldet(10829): {clean} could not find clean rule for hit php.cmdshell.gifheader or file /usr/local/maldetect/quarantine/index.php.2879120785 no longer exists.
Aug 13 2026 03:26:27 instant0279 maldet(10829): {hit} malware hit {HEX}php.cmdshell.gifheader.396 found for /home/eternalbonus/public_html/wp-includes/sitemaps/wk/index.php
Aug 13 2026 03:26:27 instant0279 maldet(10829): {quar} malware quarantined from '/home/eternalbonus/public_html/wp-includes/sitemaps/wk/index.php' to '/usr/local/maldetect/quarantine/index.php.175398068'
Aug 13 2026 03:26:27 instant0279 maldet(10829): {clean} could not find clean rule for hit php.cmdshell.gifheader or file /usr/local/maldetect/quarantine/index.php.175398068 no longer exists.
Aug 13 2026 03:26:27 instant0279 maldet(10829): {hit} malware hit {HEX}php.cmdshell.gifheader.396 found for /home/eternalbonus/public_html/wp-includes/css/wk/index.php
Aug 13 2026 03:26:27 instant0279 maldet(10829): {quar} malware quarantined from '/home/eternalbonus/public_html/wp-includes/css/wk/index.php' to '/usr/local/maldetect/quarantine/index.php.223074918'
Aug 13 2026 03:26:27 instant0279 maldet(10829): {clean} could not find clean rule for hit php.cmdshell.gifheader or file /usr/local/maldetect/quarantine/index.php.223074918 no longer exists.
Aug 13 2026 03:26:27 instant0279 maldet(10829): {hit} malware hit {HEX}php.cmdshell.gifheader.396 found for /home/eternalbonus/public_html/wp-includes/widgets/wk/index.php
Aug 13 2026 03:26:27 instant0279 maldet(10829): {quar} malware quarantined from '/home/eternalbonus/public_html/wp-includes/widgets/wk/index.php' to '/usr/local/maldetect/quarantine/index.php.2535429779'
Aug 13 2026 03:26:27 instant0279 maldet(10829): {clean} could not find clean rule for hit php.cmdshell.gifheader or file /usr/local/maldetect/quarantine/index.php.2535429779 no longer exists.
Aug 13 2026 03:26:27 instant0279 maldet(10829): {hit} malware hit {HEX}php.cmdshell.gifheader.396 found for /home/eternalbonus/public_html/wp-includes/style-engine/wk/index.php
Aug 13 2026 03:26:27 instant0279 maldet(10829): {quar} malware quarantined from '/home/eternalbonus/public_html/wp-includes/style-engine/wk/index.php' to '/usr/local/maldetect/quarantine/index.php.1200932001'
Aug 13 2026 03:26:27 instant0279 maldet(10829): {clean} could not find clean rule for hit php.cmdshell.gifheader or file /usr/local/maldetect/quarantine/index.php.1200932001 no longer exists.
Aug 13 2026 03:26:27 instant0279 maldet(10829): {hit} malware hit {HEX}php.cmdshell.gifheader.396 found for /home/eternalbonus/public_html/wp-includes/assets/wk/index.php
Aug 13 2026 03:26:27 instant0279 maldet(10829): {quar} malware quarantined from '/home/eternalbonus/public_html/wp-includes/assets/wk/index.php' to '/usr/local/maldetect/quarantine/index.php.90303850'
Aug 13 2026 03:26:27 instant0279 maldet(10829): {clean} could not find clean rule for hit php.cmdshell.gifheader or file /usr/local/maldetect/quarantine/index.php.90303850 no longer exists.
Aug 13 2026 03:26:27 instant0279 maldet(10829): {hit} malware hit {HEX}php.cmdshell.gifheader.396 found for /home/eternalbonus/public_html/wp-includes/interactivity-api/wk/index.php
Aug 13 2026 03:26:27 instant0279 maldet(10829): {quar} malware quarantined from '/home/eternalbonus/public_html/wp-includes/interactivity-api/wk/index.php' to '/usr/local/maldetect/quarantine/index.php.214323795'
Aug 13 2026 03:26:27 instant0279 maldet(10829): {clean} could not find clean rule for hit php.cmdshell.gifheader or file /usr/local/maldetect/quarantine/index.php.214323795 no longer exists.
Aug 13 2026 03:26:27 instant0279 maldet(10829): {hit} malware hit {HEX}php.cmdshell.gifheader.396 found for /home/eternalbonus/public_html/wp-includes/block-bindings/wk/index.php
Aug 13 2026 03:26:27 instant0279 maldet(10829): {quar} malware quarantined from '/home/eternalbonus/public_html/wp-includes/block-bindings/wk/index.php' to '/usr/local/maldetect/quarantine/index.php.140025105'
Aug 13 2026 03:26:27 instant0279 maldet(10829): {clean} could not find clean rule for hit php.cmdshell.gifheader or file /usr/local/maldetect/quarantine/index.php.140025105 no longer exists.
Aug 13 2026 03:26:27 instant0279 maldet(10829): {hit} malware hit {HEX}php.cmdshell.gifheader.396 found for /home/eternalbonus/public_html/wp-includes/wk/index.php
Aug 13 2026 03:26:27 instant0279 maldet(10829): {quar} malware quarantined from '/home/eternalbonus/public_html/wp-includes/wk/index.php' to '/usr/local/maldetect/quarantine/index.php.2766731735'
Aug 13 2026 03:26:27 instant0279 maldet(10829): {clean} could not find clean rule for hit php.cmdshell.gifheader or file /usr/local/maldetect/quarantine/index.php.2766731735 no longer exists.
Aug 13 2026 03:26:28 instant0279 maldet(10829): {hit} malware hit {HEX}php.cmdshell.gifheader.396 found for /home/eternalbonus/public_html/wp-includes/blocks/wk/index.php
Aug 13 2026 03:26:28 instant0279 maldet(10829): {quar} malware quarantined from '/home/eternalbonus/public_html/wp-includes/blocks/wk/index.php' to '/usr/local/maldetect/quarantine/index.php.1498317026'
Aug 13 2026 03:26:28 instant0279 maldet(10829): {clean} could not find clean rule for hit php.cmdshell.gifheader or file /usr/local/maldetect/quarantine/index.php.1498317026 no longer exists.
Aug 13 2026 03:26:28 instant0279 maldet(10829): {hit} malware hit {HEX}php.cmdshell.gifheader.396 found for /home/eternalbonus/public_html/wp-includes/php-compat/wk/index.php
Aug 13 2026 03:26:28 instant0279 maldet(10829): {quar} malware quarantined from '/home/eternalbonus/public_html/wp-includes/php-compat/wk/index.php' to '/usr/local/maldetect/quarantine/index.php.631521947'
Aug 13 2026 03:26:28 instant0279 maldet(10829): {clean} could not find clean rule for hit php.cmdshell.gifheader or file /usr/local/maldetect/quarantine/index.php.631521947 no longer exists.
Aug 13 2026 03:26:28 instant0279 maldet(10829): {hit} malware hit {HEX}php.cmdshell.gifheader.396 found for /home/eternalbonus/public_html/wp-includes/sodium_compat/wk/index.php
Aug 13 2026 03:26:28 instant0279 maldet(10829): {quar} malware quarantined from '/home/eternalbonus/public_html/wp-includes/sodium_compat/wk/index.php' to '/usr/local/maldetect/quarantine/index.php.550618021'
Aug 13 2026 03:26:28 instant0279 maldet(10829): {clean} could not find clean rule for hit php.cmdshell.gifheader or file /usr/local/maldetect/quarantine/index.php.550618021 no longer exists.
Aug 13 2026 03:26:28 instant0279 maldet(10829): {hit} malware hit {HEX}php.cmdshell.gifheader.396 found for /home/eternalbonus/public_html/wp-includes/ID3/wk/index.php
Aug 13 2026 03:26:28 instant0279 maldet(10829): {quar} malware quarantined from '/home/eternalbonus/public_html/wp-includes/ID3/wk/index.php' to '/usr/local/maldetect/quarantine/index.php.150595901'
Aug 13 2026 03:26:28 instant0279 maldet(10829): {clean} could not find clean rule for hit php.cmdshell.gifheader or file /usr/local/maldetect/quarantine/index.php.150595901 no longer exists.
Aug 13 2026 03:26:28 instant0279 maldet(10829): {hit} malware hit {HEX}php.cmdshell.gifheader.396 found for /home/eternalbonus/public_html/wp-includes/PHPMailer/wk/index.php
Aug 13 2026 03:26:28 instant0279 maldet(10829): {quar} malware quarantined from '/home/eternalbonus/public_html/wp-includes/PHPMailer/wk/index.php' to '/usr/local/maldetect/quarantine/index.php.23214385'
Aug 13 2026 03:26:28 instant0279 maldet(10829): {clean} could not find clean rule for hit php.cmdshell.gifheader or file /usr/local/maldetect/quarantine/index.php.23214385 no longer exists.
Aug 13 2026 03:26:28 instant0279 maldet(10829): {hit} malware hit {HEX}php.cmdshell.gifheader.396 found for /home/eternalbonus/public_html/wp-includes/build/wk/index.php
Aug 13 2026 03:26:28 instant0279 maldet(10829): {quar} malware quarantined from '/home/eternalbonus/public_html/wp-includes/build/wk/index.php' to '/usr/local/maldetect/quarantine/index.php.2313925054'
Aug 13 2026 03:26:28 instant0279 maldet(10829): {clean} could not find clean rule for hit php.cmdshell.gifheader or file /usr/local/maldetect/quarantine/index.php.2313925054 no longer exists.
Aug 13 2026 03:26:28 instant0279 maldet(10829): {hit} malware hit {HEX}php.cmdshell.gifheader.396 found for /home/eternalbonus/public_html/wp-includes/certificates/wk/index.php
Aug 13 2026 03:26:28 instant0279 maldet(10829): {quar} malware quarantined from '/home/eternalbonus/public_html/wp-includes/certificates/wk/index.php' to '/usr/local/maldetect/quarantine/index.php.446629657'
Aug 13 2026 03:26:28 instant0279 maldet(10829): {clean} could not find clean rule for hit php.cmdshell.gifheader or file /usr/local/maldetect/quarantine/index.php.446629657 no longer exists.
Aug 13 2026 03:26:28 instant0279 maldet(10829): {hit} malware hit {HEX}php.cmdshell.gifheader.396 found for /home/eternalbonus/public_html/wp-includes/rest-api/wk/index.php
Aug 13 2026 03:26:28 instant0279 maldet(10829): {quar} malware quarantined from '/home/eternalbonus/public_html/wp-includes/rest-api/wk/index.php' to '/usr/local/maldetect/quarantine/index.php.1986115845'
Aug 13 2026 03:26:28 instant0279 maldet(10829): {clean} could not find clean rule for hit php.cmdshell.gifheader or file /usr/local/maldetect/quarantine/index.php.1986115845 no longer exists.
Aug 13 2026 03:26:28 instant0279 maldet(10829): {hit} malware hit {HEX}php.cmdshell.gifheader.396 found for /home/eternalbonus/public_html/wp-includes/theme-compat/wk/index.php
Aug 13 2026 03:26:28 instant0279 maldet(10829): {quar} malware quarantined from '/home/eternalbonus/public_html/wp-includes/theme-compat/wk/index.php' to '/usr/local/maldetect/quarantine/index.php.1431331865'
Aug 13 2026 03:26:28 instant0279 maldet(10829): {clean} could not find clean rule for hit php.cmdshell.gifheader or file /usr/local/maldetect/quarantine/index.php.1431331865 no longer exists.
Aug 13 2026 03:26:28 instant0279 maldet(10829): {hit} malware hit {HEX}php.cmdshell.gifheader.396 found for /home/eternalbonus/public_html/wp-includes/block-patterns/wk/index.php
Aug 13 2026 03:26:28 instant0279 maldet(10829): {quar} malware quarantined from '/home/eternalbonus/public_html/wp-includes/block-patterns/wk/index.php' to '/usr/local/maldetect/quarantine/index.php.34992808'
Aug 13 2026 03:26:28 instant0279 maldet(10829): {clean} could not find clean rule for hit php.cmdshell.gifheader or file /usr/local/maldetect/quarantine/index.php.34992808 no longer exists.
Aug 13 2026 03:26:28 instant0279 maldet(10829): {hit} malware hit {HEX}php.cmdshell.gifheader.396 found for /home/eternalbonus/public_html/wp-includes/php-ai-client/wk/index.php
Aug 13 2026 03:26:28 instant0279 maldet(10829): {quar} malware quarantined from '/home/eternalbonus/public_html/wp-includes/php-ai-client/wk/index.php' to '/usr/local/maldetect/quarantine/index.php.3225227029'
Aug 13 2026 03:26:28 instant0279 maldet(10829): {clean} could not find clean rule for hit php.cmdshell.gifheader or file /usr/local/maldetect/quarantine/index.php.3225227029 no longer exists.
Aug 13 2026 03:26:28 instant0279 maldet(10829): {hit} malware hit {HEX}php.cmdshell.gifheader.396 found for /home/eternalbonus/public_html/wp-includes/js/wk/index.php
Aug 13 2026 03:26:28 instant0279 maldet(10829): {quar} malware quarantined from '/home/eternalbonus/public_html/wp-includes/js/wk/index.php' to '/usr/local/maldetect/quarantine/index.php.491318968'
Aug 13 2026 03:26:28 instant0279 maldet(10829): {clean} could not find clean rule for hit php.cmdshell.gifheader or file /usr/local/maldetect/quarantine/index.php.491318968 no longer exists.
Aug 13 2026 03:26:28 instant0279 maldet(10829): {hit} malware hit {HEX}php.cmdshell.gifheader.396 found for /home/eternalbonus/public_html/wp-includes/Requests/wk/index.php
Aug 13 2026 03:26:28 instant0279 maldet(10829): {quar} malware quarantined from '/home/eternalbonus/public_html/wp-includes/Requests/wk/index.php' to '/usr/local/maldetect/quarantine/index.php.1308011963'
Aug 13 2026 03:26:28 instant0279 maldet(10829): {clean} could not find clean rule for hit php.cmdshell.gifheader or file /usr/local/maldetect/quarantine/index.php.1308011963 no longer exists.
Aug 13 2026 03:26:28 instant0279 maldet(10829): {hit} malware hit {HEX}php.cmdshell.gifheader.396 found for /home/eternalbonus/public_html/wp-includes/abilities-api/wk/index.php
Aug 13 2026 03:26:28 instant0279 maldet(10829): {quar} malware quarantined from '/home/eternalbonus/public_html/wp-includes/abilities-api/wk/index.php' to '/usr/local/maldetect/quarantine/index.php.1521825211'
Aug 13 2026 03:26:28 instant0279 maldet(10829): {clean} could not find clean rule for hit php.cmdshell.gifheader or file /usr/local/maldetect/quarantine/index.php.1521825211 no longer exists.
Aug 13 2026 03:26:28 instant0279 maldet(10829): {hit} malware hit {HEX}php.cmdshell.gifheader.396 found for /home/eternalbonus/public_html/wp-includes/IXR/wk/index.php
Aug 13 2026 03:26:28 instant0279 maldet(10829): {quar} malware quarantined from '/home/eternalbonus/public_html/wp-includes/IXR/wk/index.php' to '/usr/local/maldetect/quarantine/index.php.1479816282'
Aug 13 2026 03:26:28 instant0279 maldet(10829): {clean} could not find clean rule for hit php.cmdshell.gifheader or file /usr/local/maldetect/quarantine/index.php.1479816282 no longer exists.
Aug 13 2026 03:26:28 instant0279 maldet(10829): {hit} malware hit {HEX}php.cmdshell.gifheader.396 found for /home/eternalbonus/public_html/wp-includes/pomo/wk/index.php
Aug 13 2026 03:26:28 instant0279 maldet(10829): {quar} malware quarantined from '/home/eternalbonus/public_html/wp-includes/pomo/wk/index.php' to '/usr/local/maldetect/quarantine/index.php.1553323734'
Aug 13 2026 03:26:28 instant0279 maldet(10829): {clean} could not find clean rule for hit php.cmdshell.gifheader or file /usr/local/maldetect/quarantine/index.php.1553323734 no longer exists.
Aug 13 2026 03:26:28 instant0279 maldet(10829): {hit} malware hit {HEX}php.cmdshell.gifheader.396 found for /home/eternalbonus/public_html/wp-includes/block-supports/wk/index.php
Aug 13 2026 03:26:28 instant0279 maldet(10829): {quar} malware quarantined from '/home/eternalbonus/public_html/wp-includes/block-supports/wk/index.php' to '/usr/local/maldetect/quarantine/index.php.42114867'
Aug 13 2026 03:26:28 instant0279 maldet(10829): {clean} could not find clean rule for hit php.cmdshell.gifheader or file /usr/local/maldetect/quarantine/index.php.42114867 no longer exists.
Aug 13 2026 03:26:28 instant0279 maldet(10829): {hit} malware hit {HEX}php.cmdshell.gifheader.396 found for /home/eternalbonus/public_html/wp-includes/fonts/wk/index.php
Aug 13 2026 03:26:28 instant0279 maldet(10829): {quar} malware quarantined from '/home/eternalbonus/public_html/wp-includes/fonts/wk/index.php' to '/usr/local/maldetect/quarantine/index.php.2247129094'
Aug 13 2026 03:26:28 instant0279 maldet(10829): {clean} could not find clean rule for hit php.cmdshell.gifheader or file /usr/local/maldetect/quarantine/index.php.2247129094 no longer exists.
Aug 13 2026 03:26:28 instant0279 maldet(10829): {hit} malware hit {HEX}php.cmdshell.gifheader.396 found for /home/eternalbonus/public_html/wp-includes/l10n/wk/index.php
Aug 13 2026 03:26:28 instant0279 maldet(10829): {quar} malware quarantined from '/home/eternalbonus/public_html/wp-includes/l10n/wk/index.php' to '/usr/local/maldetect/quarantine/index.php.2753632247'
Aug 13 2026 03:26:28 instant0279 maldet(10829): {clean} could not find clean rule for hit php.cmdshell.gifheader or file /usr/local/maldetect/quarantine/index.php.2753632247 no longer exists.
Aug 13 2026 03:26:28 instant0279 maldet(10829): {hit} malware hit {HEX}php.cmdshell.gifheader.396 found for /home/eternalbonus/public_html/wp-includes/images/wk/index.php
Aug 13 2026 03:26:28 instant0279 maldet(10829): {quar} malware quarantined from '/home/eternalbonus/public_html/wp-includes/images/wk/index.php' to '/usr/local/maldetect/quarantine/index.php.1015621809'
Aug 13 2026 03:26:28 instant0279 maldet(10829): {clean} could not find clean rule for hit php.cmdshell.gifheader or file /usr/local/maldetect/quarantine/index.php.1015621809 no longer exists.
Aug 13 2026 03:26:28 instant0279 maldet(10829): {hit} malware hit {HEX}php.cmdshell.gifheader.396 found for /home/eternalbonus/public_html/wp-includes/Text/wk/index.php
Aug 13 2026 03:26:28 instant0279 maldet(10829): {quar} malware quarantined from '/home/eternalbonus/public_html/wp-includes/Text/wk/index.php' to '/usr/local/maldetect/quarantine/index.php.1995610064'
Aug 13 2026 03:26:28 instant0279 maldet(10829): {clean} could not find clean rule for hit php.cmdshell.gifheader or file /usr/local/maldetect/quarantine/index.php.1995610064 no longer exists.
Aug 13 2026 03:26:28 instant0279 maldet(10829): {hit} malware hit {HEX}php.cmdshell.gifheader.396 found for /home/eternalbonus/public_html/wp-includes/customize/wk/index.php
Aug 13 2026 03:26:28 instant0279 maldet(10829): {quar} malware quarantined from '/home/eternalbonus/public_html/wp-includes/customize/wk/index.php' to '/usr/local/maldetect/quarantine/index.php.1337729508'
Aug 13 2026 03:26:28 instant0279 maldet(10829): {clean} could not find clean rule for hit php.cmdshell.gifheader or file /usr/local/maldetect/quarantine/index.php.1337729508 no longer exists.
Aug 13 2026 03:26:28 instant0279 maldet(10829): {hit} malware hit {HEX}php.cmdshell.gifheader.396 found for /home/eternalbonus/public_html/wp-includes/SimplePie/wk/index.php
Aug 13 2026 03:26:28 instant0279 maldet(10829): {quar} malware quarantined from '/home/eternalbonus/public_html/wp-includes/SimplePie/wk/index.php' to '/usr/local/maldetect/quarantine/index.php.1328312603'
Aug 13 2026 03:26:28 instant0279 maldet(10829): {clean} could not find clean rule for hit php.cmdshell.gifheader or file /usr/local/maldetect/quarantine/index.php.1328312603 no longer exists.
Aug 13 2026 03:26:28 instant0279 maldet(10829): {hit} malware hit {HEX}php.cmdshell.gifheader.396 found for /home/eternalbonus/public_html/wp-includes/ai-client/wk/index.php
Aug 13 2026 03:26:28 instant0279 maldet(10829): {quar} malware quarantined from '/home/eternalbonus/public_html/wp-includes/ai-client/wk/index.php' to '/usr/local/maldetect/quarantine/index.php.2328310622'
Aug 13 2026 03:26:28 instant0279 maldet(10829): {clean} could not find clean rule for hit php.cmdshell.gifheader or file /usr/local/maldetect/quarantine/index.php.2328310622 no longer exists.
Aug 13 2026 03:26:28 instant0279 maldet(10829): {hit} malware hit {HEX}php.cmdshell.gifheader.396 found for /home/eternalbonus/public_html/wp-includes/html-api/wk/index.php
Aug 13 2026 03:26:29 instant0279 maldet(10829): {quar} malware quarantined from '/home/eternalbonus/public_html/wp-includes/html-api/wk/index.php' to '/usr/local/maldetect/quarantine/index.php.256657747'
Aug 13 2026 03:26:29 instant0279 maldet(10829): {clean} could not find clean rule for hit php.cmdshell.gifheader or file /usr/local/maldetect/quarantine/index.php.256657747 no longer exists.
Aug 13 2026 03:26:29 instant0279 maldet(10829): {hit} malware hit {HEX}php.cmdshell.gifheader.396 found for /home/eternalbonus/public_html/wp-content/uploads/wk/index.php
Aug 13 2026 03:26:29 instant0279 maldet(10829): {quar} malware quarantined from '/home/eternalbonus/public_html/wp-content/uploads/wk/index.php' to '/usr/local/maldetect/quarantine/index.php.71578165'
Aug 13 2026 03:26:29 instant0279 maldet(10829): {clean} could not find clean rule for hit php.cmdshell.gifheader or file /usr/local/maldetect/quarantine/index.php.71578165 no longer exists.
Aug 13 2026 03:26:29 instant0279 maldet(10829): {hit} malware hit {HEX}php.cmdshell.gifheader.396 found for /home/eternalbonus/public_html/wp-content/mu-plugins/wk/index.php
Aug 13 2026 03:26:29 instant0279 maldet(10829): {quar} malware quarantined from '/home/eternalbonus/public_html/wp-content/mu-plugins/wk/index.php' to '/usr/local/maldetect/quarantine/index.php.1548614762'
Aug 13 2026 03:26:29 instant0279 maldet(10829): {clean} could not find clean rule for hit php.cmdshell.gifheader or file /usr/local/maldetect/quarantine/index.php.1548614762 no longer exists.
Aug 13 2026 03:26:29 instant0279 maldet(10829): {hit} malware hit {HEX}php.cmdshell.gifheader.396 found for /home/eternalbonus/public_html/wp-content/wk/index.php
Aug 13 2026 03:26:29 instant0279 maldet(10829): {quar} malware quarantined from '/home/eternalbonus/public_html/wp-content/wk/index.php' to '/usr/local/maldetect/quarantine/index.php.556618582'
Aug 13 2026 03:26:29 instant0279 maldet(10829): {clean} could not find clean rule for hit php.cmdshell.gifheader or file /usr/local/maldetect/quarantine/index.php.556618582 no longer exists.
Aug 13 2026 03:26:29 instant0279 maldet(10829): {hit} malware hit {HEX}php.cmdshell.gifheader.396 found for /home/eternalbonus/public_html/wp-content/themes/wk/index.php
Aug 13 2026 03:26:29 instant0279 maldet(10829): {quar} malware quarantined from '/home/eternalbonus/public_html/wp-content/themes/wk/index.php' to '/usr/local/maldetect/quarantine/index.php.1628414994'
Aug 13 2026 03:26:29 instant0279 maldet(10829): {clean} could not find clean rule for hit php.cmdshell.gifheader or file /usr/local/maldetect/quarantine/index.php.1628414994 no longer exists.
Aug 13 2026 03:26:29 instant0279 maldet(10829): {hit} malware hit {HEX}php.cmdshell.gifheader.396 found for /home/eternalbonus/public_html/wp-content/cache/wk/index.php
Aug 13 2026 03:26:29 instant0279 maldet(10829): {quar} malware quarantined from '/home/eternalbonus/public_html/wp-content/cache/wk/index.php' to '/usr/local/maldetect/quarantine/index.php.310195835'
Aug 13 2026 03:26:29 instant0279 maldet(10829): {clean} could not find clean rule for hit php.cmdshell.gifheader or file /usr/local/maldetect/quarantine/index.php.310195835 no longer exists.
Aug 13 2026 03:26:29 instant0279 maldet(10829): {hit} malware hit {HEX}php.cmdshell.gifheader.396 found for /home/eternalbonus/public_html/wp-content/addda064/wk/index.php
Aug 13 2026 03:26:29 instant0279 maldet(10829): {quar} malware quarantined from '/home/eternalbonus/public_html/wp-content/addda064/wk/index.php' to '/usr/local/maldetect/quarantine/index.php.18256384'
Aug 13 2026 03:26:29 instant0279 maldet(10829): {clean} could not find clean rule for hit php.cmdshell.gifheader or file /usr/local/maldetect/quarantine/index.php.18256384 no longer exists.
Aug 13 2026 03:26:29 instant0279 maldet(10829): {hit} malware hit {HEX}php.cmdshell.gifheader.396 found for /home/eternalbonus/public_html/wp-content/upgrade/wk/index.php
Aug 13 2026 03:26:29 instant0279 maldet(10829): {quar} malware quarantined from '/home/eternalbonus/public_html/wp-content/upgrade/wk/index.php' to '/usr/local/maldetect/quarantine/index.php.884329170'
Aug 13 2026 03:26:29 instant0279 maldet(10829): {clean} could not find clean rule for hit php.cmdshell.gifheader or file /usr/local/maldetect/quarantine/index.php.884329170 no longer exists.
Aug 13 2026 03:26:29 instant0279 maldet(10829): {hit} malware hit {HEX}php.cmdshell.gifheader.396 found for /home/eternalbonus/public_html/wp-content/ALFA_DATA/wk/index.php
Aug 13 2026 03:26:29 instant0279 maldet(10829): {quar} malware quarantined from '/home/eternalbonus/public_html/wp-content/ALFA_DATA/wk/index.php' to '/usr/local/maldetect/quarantine/index.php.767526541'
Aug 13 2026 03:26:29 instant0279 maldet(10829): {clean} could not find clean rule for hit php.cmdshell.gifheader or file /usr/local/maldetect/quarantine/index.php.767526541 no longer exists.
Aug 13 2026 03:26:29 instant0279 maldet(10829): {hit} malware hit {HEX}php.cmdshell.gifheader.396 found for /home/eternalbonus/public_html/wp-content/w3tc-config/wk/index.php
Aug 13 2026 03:26:29 instant0279 maldet(10829): {quar} malware quarantined from '/home/eternalbonus/public_html/wp-content/w3tc-config/wk/index.php' to '/usr/local/maldetect/quarantine/index.php.1923830527'
Aug 13 2026 03:26:29 instant0279 maldet(10829): {clean} could not find clean rule for hit php.cmdshell.gifheader or file /usr/local/maldetect/quarantine/index.php.1923830527 no longer exists.
Aug 13 2026 03:26:29 instant0279 maldet(10829): {hit} malware hit {HEX}php.cmdshell.gifheader.396 found for /home/eternalbonus/public_html/wp-content/wflogs/wk/index.php
Aug 13 2026 03:26:29 instant0279 maldet(10829): {quar} malware quarantined from '/home/eternalbonus/public_html/wp-content/wflogs/wk/index.php' to '/usr/local/maldetect/quarantine/index.php.2763032517'
Aug 13 2026 03:26:29 instant0279 maldet(10829): {clean} could not find clean rule for hit php.cmdshell.gifheader or file /usr/local/maldetect/quarantine/index.php.2763032517 no longer exists.
Aug 13 2026 03:26:29 instant0279 maldet(10829): {hit} malware hit {HEX}php.cmdshell.gifheader.396 found for /home/eternalbonus/public_html/wp-content/wp-rocket-config/wk/index.php
Aug 13 2026 03:26:29 instant0279 maldet(10829): {quar} malware quarantined from '/home/eternalbonus/public_html/wp-content/wp-rocket-config/wk/index.php' to '/usr/local/maldetect/quarantine/index.php.1779528691'
Aug 13 2026 03:26:29 instant0279 maldet(10829): {clean} could not find clean rule for hit php.cmdshell.gifheader or file /usr/local/maldetect/quarantine/index.php.1779528691 no longer exists.
Aug 13 2026 03:26:29 instant0279 maldet(10829): {hit} malware hit {HEX}php.cmdshell.gifheader.396 found for /home/eternalbonus/public_html/wp-content/languages/wk/index.php
Aug 13 2026 03:26:29 instant0279 maldet(10829): {quar} malware quarantined from '/home/eternalbonus/public_html/wp-content/languages/wk/index.php' to '/usr/local/maldetect/quarantine/index.php.911612533'
Aug 13 2026 03:26:29 instant0279 maldet(10829): {clean} could not find clean rule for hit php.cmdshell.gifheader or file /usr/local/maldetect/quarantine/index.php.911612533 no longer exists.
Aug 13 2026 03:26:29 instant0279 maldet(10829): {hit} malware hit {HEX}php.cmdshell.gifheader.396 found for /home/eternalbonus/public_html/wp-content/plugins/wk/index.php
Aug 13 2026 03:26:29 instant0279 maldet(10829): {quar} malware quarantined from '/home/eternalbonus/public_html/wp-content/plugins/wk/index.php' to '/usr/local/maldetect/quarantine/index.php.244958017'
Aug 13 2026 03:26:29 instant0279 maldet(10829): {clean} could not find clean rule for hit php.cmdshell.gifheader or file /usr/local/maldetect/quarantine/index.php.244958017 no longer exists.
Aug 13 2026 03:26:29 instant0279 maldet(10829): {hit} malware hit {HEX}php.cmdshell.gifheader.396 found for /home/eternalbonus/public_html/wp-content/wptouch-data/wk/index.php
Aug 13 2026 03:26:29 instant0279 maldet(10829): {quar} malware quarantined from '/home/eternalbonus/public_html/wp-content/wptouch-data/wk/index.php' to '/usr/local/maldetect/quarantine/index.php.76548629'
Aug 13 2026 03:26:29 instant0279 maldet(10829): {clean} could not find clean rule for hit php.cmdshell.gifheader or file /usr/local/maldetect/quarantine/index.php.76548629 no longer exists.
Aug 13 2026 03:26:29 instant0279 maldet(10829): {hit} malware hit {HEX}php.cmdshell.gifheader.396 found for /home/eternalbonus/public_html/wp-content/upgrade-temp-backup/wk/index.php
Aug 13 2026 03:26:29 instant0279 maldet(10829): {quar} malware quarantined from '/home/eternalbonus/public_html/wp-content/upgrade-temp-backup/wk/index.php' to '/usr/local/maldetect/quarantine/index.php.947618951'
Aug 13 2026 03:26:29 instant0279 maldet(10829): {clean} could not find clean rule for hit php.cmdshell.gifheader or file /usr/local/maldetect/quarantine/index.php.947618951 no longer exists.
Aug 13 2026 03:26:29 instant0279 maldet(10829): {hit} malware hit {HEX}php.cmdshell.gifheader.396 found for /home/eternalbonus/public_html/wp-content/home/wk/index.php
Aug 13 2026 03:26:29 instant0279 maldet(10829): {quar} malware quarantined from '/home/eternalbonus/public_html/wp-content/home/wk/index.php' to '/usr/local/maldetect/quarantine/index.php.155443829'
Aug 13 2026 03:26:29 instant0279 maldet(10829): {clean} could not find clean rule for hit php.cmdshell.gifheader or file /usr/local/maldetect/quarantine/index.php.155443829 no longer exists.
Aug 13 2026 03:26:29 instant0279 maldet(10829): {hit} malware hit {HEX}php.inject.generic.565 found for /tmp/cfgxkEuXP
Aug 13 2026 03:26:29 instant0279 maldet(10829): {quar} malware quarantined from '/tmp/cfgxkEuXP' to '/usr/local/maldetect/quarantine/cfgxkEuXP.588620735'
Aug 13 2026 03:26:29 instant0279 maldet(10829): {clean} could not find clean rule for hit php.inject.generic or file /usr/local/maldetect/quarantine/cfgxkEuXP.588620735 no longer exists.
Aug 13 2026 03:26:29 instant0279 maldet(10829): {hit} malware hit {HEX}php.inject.generic.565 found for /tmp/cfgcpM84O
Aug 13 2026 03:26:29 instant0279 maldet(10829): {quar} malware quarantined from '/tmp/cfgcpM84O' to '/usr/local/maldetect/quarantine/cfgcpM84O.262035564'
Aug 13 2026 03:26:29 instant0279 maldet(10829): {clean} could not find clean rule for hit php.inject.generic or file /usr/local/maldetect/quarantine/cfgcpM84O.262035564 no longer exists.
Aug 13 2026 03:26:29 instant0279 maldet(10829): {hit} malware hit {HEX}php.inject.generic.565 found for /tmp/cfgG3RCLq
Aug 13 2026 03:26:29 instant0279 maldet(10829): {quar} malware quarantined from '/tmp/cfgG3RCLq' to '/usr/local/maldetect/quarantine/cfgG3RCLq.324121809'
Aug 13 2026 03:26:29 instant0279 maldet(10829): {clean} could not find clean rule for hit php.inject.generic or file /usr/local/maldetect/quarantine/cfgG3RCLq.324121809 no longer exists.
Aug 13 2026 03:26:29 instant0279 maldet(10829): {hit} malware hit {HEX}php.inject.generic.565 found for /tmp/cfgyy4CrG
Aug 13 2026 03:26:29 instant0279 maldet(10829): {quar} malware quarantined from '/tmp/cfgyy4CrG' to '/usr/local/maldetect/quarantine/cfgyy4CrG.2218915569'
Aug 13 2026 03:26:29 instant0279 maldet(10829): {clean} could not find clean rule for hit php.inject.generic or file /usr/local/maldetect/quarantine/cfgyy4CrG.2218915569 no longer exists.
Aug 13 2026 03:26:29 instant0279 maldet(10829): {hit} malware hit {HEX}php.inject.generic.565 found for /tmp/cfgUQ71ed
Aug 13 2026 03:26:29 instant0279 maldet(10829): {quar} malware quarantined from '/tmp/cfgUQ71ed' to '/usr/local/maldetect/quarantine/cfgUQ71ed.2320629772'
Aug 13 2026 03:26:29 instant0279 maldet(10829): {clean} could not find clean rule for hit php.inject.generic or file /usr/local/maldetect/quarantine/cfgUQ71ed.2320629772 no longer exists.
Aug 13 2026 03:26:29 instant0279 maldet(10829): {hit} malware hit {HEX}php.inject.generic.565 found for /tmp/cfgsdzE0r
Aug 13 2026 03:26:29 instant0279 maldet(10829): {quar} malware quarantined from '/tmp/cfgsdzE0r' to '/usr/local/maldetect/quarantine/cfgsdzE0r.2218221079'
Aug 13 2026 03:26:29 instant0279 maldet(10829): {clean} could not find clean rule for hit php.inject.generic or file /usr/local/maldetect/quarantine/cfgsdzE0r.2218221079 no longer exists.
Aug 13 2026 03:26:29 instant0279 maldet(10829): {hit} malware hit {HEX}php.inject.generic.565 found for /tmp/cfg489r3Z
Aug 13 2026 03:26:29 instant0279 maldet(10829): {quar} malware quarantined from '/tmp/cfg489r3Z' to '/usr/local/maldetect/quarantine/cfg489r3Z.920617052'
Aug 13 2026 03:26:29 instant0279 maldet(10829): {clean} could not find clean rule for hit php.inject.generic or file /usr/local/maldetect/quarantine/cfg489r3Z.920617052 no longer exists.
Aug 13 2026 03:26:29 instant0279 maldet(10829): {hit} malware hit {HEX}php.inject.generic.565 found for /tmp/cfgnhfzo5
Aug 13 2026 03:26:29 instant0279 maldet(10829): {quar} malware quarantined from '/tmp/cfgnhfzo5' to '/usr/local/maldetect/quarantine/cfgnhfzo5.2417422046'
Aug 13 2026 03:26:29 instant0279 maldet(10829): {clean} could not find clean rule for hit php.inject.generic or file /usr/local/maldetect/quarantine/cfgnhfzo5.2417422046 no longer exists.
Aug 13 2026 03:26:29 instant0279 maldet(10829): {hit} malware hit {HEX}php.inject.generic.565 found for /tmp/cfg9YsUHQ
Aug 13 2026 03:26:29 instant0279 maldet(10829): {quar} malware quarantined from '/tmp/cfg9YsUHQ' to '/usr/local/maldetect/quarantine/cfg9YsUHQ.323589441'
Aug 13 2026 03:26:29 instant0279 maldet(10829): {clean} could not find clean rule for hit php.inject.generic or file /usr/local/maldetect/quarantine/cfg9YsUHQ.323589441 no longer exists.
Aug 13 2026 03:26:29 instant0279 maldet(10829): {quar} fatal error handling '/var/tmp/cfgxkEuXP'
Aug 13 2026 03:26:30 instant0279 maldet(10829): {quar} fatal error handling '/var/tmp/cfgcpM84O'
Aug 13 2026 03:26:30 instant0279 maldet(10829): {quar} fatal error handling '/var/tmp/cfgG3RCLq'
Aug 13 2026 03:26:30 instant0279 maldet(10829): {quar} fatal error handling '/var/tmp/cfgyy4CrG'
Aug 13 2026 03:26:30 instant0279 maldet(10829): {quar} fatal error handling '/var/tmp/cfgUQ71ed'
Aug 13 2026 03:26:30 instant0279 maldet(10829): {quar} fatal error handling '/var/tmp/cfgsdzE0r'
Aug 13 2026 03:26:30 instant0279 maldet(10829): {quar} fatal error handling '/var/tmp/cfg489r3Z'
Aug 13 2026 03:26:30 instant0279 maldet(10829): {quar} fatal error handling '/var/tmp/cfgnhfzo5'
Aug 13 2026 03:26:30 instant0279 maldet(10829): {quar} fatal error handling '/var/tmp/cfg9YsUHQ'
Aug 13 2026 03:26:30 instant0279 maldet(10829): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 158, malware hits 69, cleaned hits 0, time 83s
Aug 13 2026 03:26:30 instant0279 maldet(10829): {scan} scan report saved, to view run: maldet --report 260813-0325.10829
Aug 13 2026 03:26:30 instant0279 maldet(10829): {alert} sent scan report to [email protected]
Aug 14 2026 03:31:25 instant0279 maldet(6077): {update} checking for available updates...
Aug 14 2026 03:31:25 instant0279 maldet(6077): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Aug 14 2026 03:31:25 instant0279 maldet(6077): {update} hashing install files and checking against server...
Aug 14 2026 03:31:25 instant0279 maldet(6077): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Aug 14 2026 03:31:25 instant0279 maldet(6077): {update} latest version already installed.
Aug 14 2026 03:31:26 instant0279 maldet(6708): {sigup} performing signature update check...
Aug 14 2026 03:31:26 instant0279 maldet(6708): {sigup} local signature set is version 2026052490478
Aug 14 2026 03:31:26 instant0279 maldet(6708): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Aug 14 2026 03:31:26 instant0279 maldet(6708): {sigup} latest signature set already installed
Aug 14 2026 03:31:26 instant0279 maldet(7332): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Aug 14 2026 03:31:27 instant0279 maldet(7332): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Aug 14 2026 03:31:27 instant0279 maldet(7332): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Aug 14 2026 03:31:27 instant0279 maldet(7332): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Aug 14 2026 03:31:27 instant0279 maldet(7332): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Aug 14 2026 03:32:01 instant0279 maldet(7332): {scan} file list completed in 34s, found 94 files...
Aug 14 2026 03:32:01 instant0279 maldet(7332): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Aug 14 2026 03:32:01 instant0279 maldet(7332): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (94 files) in progress...
Aug 14 2026 03:32:24 instant0279 maldet(7332): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 94, malware hits 0, cleaned hits 0, time 58s
Aug 14 2026 03:32:24 instant0279 maldet(7332): {scan} scan report saved, to view run: maldet --report 260814-0331.7332
Aug 15 2026 03:46:55 instant0279 maldet(30925): {update} checking for available updates...
Aug 15 2026 03:46:55 instant0279 maldet(30925): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Aug 15 2026 03:46:55 instant0279 maldet(30925): {update} hashing install files and checking against server...
Aug 15 2026 03:46:55 instant0279 maldet(30925): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Aug 15 2026 03:46:55 instant0279 maldet(30925): {update} latest version already installed.
Aug 15 2026 03:46:56 instant0279 maldet(31743): {sigup} performing signature update check...
Aug 15 2026 03:46:56 instant0279 maldet(31743): {sigup} local signature set is version 2026052490478
Aug 15 2026 03:46:56 instant0279 maldet(31743): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Aug 15 2026 03:46:56 instant0279 maldet(31743): {sigup} latest signature set already installed
Aug 15 2026 03:46:57 instant0279 maldet(32479): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Aug 15 2026 03:46:57 instant0279 maldet(32479): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Aug 15 2026 03:46:57 instant0279 maldet(32479): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Aug 15 2026 03:46:57 instant0279 maldet(32479): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Aug 15 2026 03:46:57 instant0279 maldet(32479): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Aug 15 2026 03:47:31 instant0279 maldet(32479): {scan} file list completed in 34s, found 81 files...
Aug 15 2026 03:47:31 instant0279 maldet(32479): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Aug 15 2026 03:47:31 instant0279 maldet(32479): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (81 files) in progress...
Aug 15 2026 03:47:42 instant0279 maldet(32479): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 81, malware hits 0, cleaned hits 0, time 45s
Aug 15 2026 03:47:42 instant0279 maldet(32479): {scan} scan report saved, to view run: maldet --report 260815-0346.32479
Aug 16 2026 03:36:13 instant0279 maldet(25426): {update} checking for available updates...
Aug 16 2026 03:36:13 instant0279 maldet(25426): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Aug 16 2026 03:36:13 instant0279 maldet(25426): {update} hashing install files and checking against server...
Aug 16 2026 03:36:13 instant0279 maldet(25426): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Aug 16 2026 03:36:13 instant0279 maldet(25426): {update} latest version already installed.
Aug 16 2026 03:36:14 instant0279 maldet(26082): {sigup} performing signature update check...
Aug 16 2026 03:36:14 instant0279 maldet(26082): {sigup} local signature set is version 2026052490478
Aug 16 2026 03:36:14 instant0279 maldet(26082): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Aug 16 2026 03:36:14 instant0279 maldet(26082): {sigup} latest signature set already installed
Aug 16 2026 03:36:14 instant0279 maldet(26716): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Aug 16 2026 03:36:15 instant0279 maldet(26716): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Aug 16 2026 03:36:15 instant0279 maldet(26716): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Aug 16 2026 03:36:15 instant0279 maldet(26716): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Aug 16 2026 03:36:15 instant0279 maldet(26716): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Aug 16 2026 03:36:49 instant0279 maldet(26716): {scan} file list completed in 34s, found 48 files...
Aug 16 2026 03:36:49 instant0279 maldet(26716): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Aug 16 2026 03:36:49 instant0279 maldet(26716): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (48 files) in progress...
Aug 16 2026 03:37:06 instant0279 maldet(26716): {hit} malware hit {HEX}php.inject.generic.562 found for /home/ptgoldenvisa/public_html/topinvestorvisa.com/wp-content/uploads/2026/08/bbpress.2.6.14.zip
Aug 16 2026 03:37:06 instant0279 maldet(26716): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/topinvestorvisa.com/wp-content/uploads/2026/08/bbpress.2.6.14.zip' to '/usr/local/maldetect/quarantine/bbpress.2.6.14.zip.2862219758'
Aug 16 2026 03:37:06 instant0279 maldet(26716): {clean} could not find clean rule for hit php.inject.generic or file /usr/local/maldetect/quarantine/bbpress.2.6.14.zip.2862219758 no longer exists.
Aug 16 2026 03:37:06 instant0279 maldet(26716): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 48, malware hits 1, cleaned hits 0, time 52s
Aug 16 2026 03:37:06 instant0279 maldet(26716): {scan} scan report saved, to view run: maldet --report 260816-0336.26716
Aug 16 2026 03:37:06 instant0279 maldet(26716): {alert} sent scan report to [email protected]
Aug 17 2026 03:48:15 instant0279 maldet(6677): {update} checking for available updates...
Aug 17 2026 03:48:15 instant0279 maldet(6677): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Aug 17 2026 03:48:15 instant0279 maldet(6677): {update} hashing install files and checking against server...
Aug 17 2026 03:48:15 instant0279 maldet(6677): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Aug 17 2026 03:48:15 instant0279 maldet(6677): {update} latest version already installed.
Aug 17 2026 03:48:16 instant0279 maldet(7345): {sigup} performing signature update check...
Aug 17 2026 03:48:16 instant0279 maldet(7345): {sigup} local signature set is version 2026052490478
Aug 17 2026 03:48:16 instant0279 maldet(7345): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Aug 17 2026 03:48:16 instant0279 maldet(7345): {sigup} latest signature set already installed
Aug 17 2026 03:48:16 instant0279 maldet(7986): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Aug 17 2026 03:48:17 instant0279 maldet(7986): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Aug 17 2026 03:48:17 instant0279 maldet(7986): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Aug 17 2026 03:48:17 instant0279 maldet(7986): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Aug 17 2026 03:48:17 instant0279 maldet(7986): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Aug 17 2026 03:48:52 instant0279 maldet(7986): {scan} file list completed in 35s, found 82 files...
Aug 17 2026 03:48:52 instant0279 maldet(7986): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Aug 17 2026 03:48:52 instant0279 maldet(7986): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (82 files) in progress...
Aug 17 2026 03:49:08 instant0279 maldet(7986): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 82, malware hits 0, cleaned hits 0, time 52s
Aug 17 2026 03:49:08 instant0279 maldet(7986): {scan} scan report saved, to view run: maldet --report 260817-0348.7986
Aug 18 2026 03:44:44 instant0279 maldet(3333): {update} checking for available updates...
Aug 18 2026 03:44:44 instant0279 maldet(3333): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Aug 18 2026 03:44:44 instant0279 maldet(3333): {update} hashing install files and checking against server...
Aug 18 2026 03:44:45 instant0279 maldet(3333): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Aug 18 2026 03:44:45 instant0279 maldet(3333): {update} latest version already installed.
Aug 18 2026 03:44:45 instant0279 maldet(3995): {sigup} performing signature update check...
Aug 18 2026 03:44:45 instant0279 maldet(3995): {sigup} local signature set is version 2026052490478
Aug 18 2026 03:44:45 instant0279 maldet(3995): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Aug 18 2026 03:44:45 instant0279 maldet(3995): {sigup} latest signature set already installed
Aug 18 2026 03:44:46 instant0279 maldet(4633): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Aug 18 2026 03:44:46 instant0279 maldet(4633): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Aug 18 2026 03:44:46 instant0279 maldet(4633): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Aug 18 2026 03:44:46 instant0279 maldet(4633): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Aug 18 2026 03:44:46 instant0279 maldet(4633): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Aug 18 2026 03:45:25 instant0279 maldet(4633): {scan} file list completed in 38s, found 17085 files...
Aug 18 2026 03:45:25 instant0279 maldet(4633): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Aug 18 2026 03:45:25 instant0279 maldet(4633): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (17085 files) in progress...
Aug 18 2026 03:57:27 instant0279 maldet(4633): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 17085, malware hits 0, cleaned hits 0, time 761s
Aug 18 2026 03:57:27 instant0279 maldet(4633): {scan} scan report saved, to view run: maldet --report 260818-0344.4633
Aug 19 2026 03:41:01 instant0279 maldet(5562): {update} checking for available updates...
Aug 19 2026 03:41:01 instant0279 maldet(5562): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Aug 19 2026 03:41:01 instant0279 maldet(5562): {update} hashing install files and checking against server...
Aug 19 2026 03:41:01 instant0279 maldet(5562): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Aug 19 2026 03:41:01 instant0279 maldet(5562): {update} latest version already installed.
Aug 19 2026 03:41:02 instant0279 maldet(6219): {sigup} performing signature update check...
Aug 19 2026 03:41:02 instant0279 maldet(6219): {sigup} local signature set is version 2026052490478
Aug 19 2026 03:41:02 instant0279 maldet(6219): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Aug 19 2026 03:41:02 instant0279 maldet(6219): {sigup} latest signature set already installed
Aug 19 2026 03:41:03 instant0279 maldet(6866): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Aug 19 2026 03:41:03 instant0279 maldet(6866): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Aug 19 2026 03:41:03 instant0279 maldet(6866): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Aug 19 2026 03:41:03 instant0279 maldet(6866): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Aug 19 2026 03:41:03 instant0279 maldet(6866): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Aug 19 2026 03:41:36 instant0279 maldet(6866): {scan} file list completed in 33s, found 127 files...
Aug 19 2026 03:41:37 instant0279 maldet(6866): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Aug 19 2026 03:41:37 instant0279 maldet(6866): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (127 files) in progress...
Aug 19 2026 03:41:51 instant0279 maldet(6866): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 127, malware hits 0, cleaned hits 0, time 48s
Aug 19 2026 03:41:51 instant0279 maldet(6866): {scan} scan report saved, to view run: maldet --report 260819-0341.6866
Aug 20 2026 03:45:21 instant0279 maldet(5240): {update} checking for available updates...
Aug 20 2026 03:45:21 instant0279 maldet(5240): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Aug 20 2026 03:45:21 instant0279 maldet(5240): {update} hashing install files and checking against server...
Aug 20 2026 03:45:22 instant0279 maldet(5240): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Aug 20 2026 03:45:22 instant0279 maldet(5240): {update} latest version already installed.
Aug 20 2026 03:45:23 instant0279 maldet(5946): {sigup} performing signature update check...
Aug 20 2026 03:45:23 instant0279 maldet(5946): {sigup} local signature set is version 2026052490478
Aug 20 2026 03:45:23 instant0279 maldet(5946): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Aug 20 2026 03:45:23 instant0279 maldet(5946): {sigup} latest signature set already installed
Aug 20 2026 03:45:24 instant0279 maldet(6605): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Aug 20 2026 03:45:24 instant0279 maldet(6605): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Aug 20 2026 03:45:24 instant0279 maldet(6605): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Aug 20 2026 03:45:24 instant0279 maldet(6605): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Aug 20 2026 03:45:24 instant0279 maldet(6605): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Aug 20 2026 03:46:00 instant0279 maldet(6605): {scan} file list completed in 36s, found 1386 files...
Aug 20 2026 03:46:00 instant0279 maldet(6605): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Aug 20 2026 03:46:00 instant0279 maldet(6605): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1386 files) in progress...
Aug 20 2026 03:47:45 instant0279 maldet(6605): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1386, malware hits 0, cleaned hits 0, time 141s
Aug 20 2026 03:47:45 instant0279 maldet(6605): {scan} scan report saved, to view run: maldet --report 260820-0345.6605
Aug 21 2026 03:23:58 instant0279 maldet(4893): {update} checking for available updates...
Aug 21 2026 03:23:58 instant0279 maldet(4893): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Aug 21 2026 03:23:58 instant0279 maldet(4893): {update} hashing install files and checking against server...
Aug 21 2026 03:23:58 instant0279 maldet(4893): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Aug 21 2026 03:23:58 instant0279 maldet(4893): {update} latest version already installed.
Aug 21 2026 03:23:59 instant0279 maldet(5551): {sigup} performing signature update check...
Aug 21 2026 03:23:59 instant0279 maldet(5551): {sigup} local signature set is version 2026052490478
Aug 21 2026 03:23:59 instant0279 maldet(5551): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Aug 21 2026 03:23:59 instant0279 maldet(5551): {sigup} latest signature set already installed
Aug 21 2026 03:23:59 instant0279 maldet(6189): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Aug 21 2026 03:24:00 instant0279 maldet(6189): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Aug 21 2026 03:24:00 instant0279 maldet(6189): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Aug 21 2026 03:24:00 instant0279 maldet(6189): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Aug 21 2026 03:24:00 instant0279 maldet(6189): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Aug 21 2026 03:24:33 instant0279 maldet(6189): {scan} file list completed in 33s, found 1288 files...
Aug 21 2026 03:24:33 instant0279 maldet(6189): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Aug 21 2026 03:24:33 instant0279 maldet(6189): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1288 files) in progress...
Aug 21 2026 03:25:59 instant0279 maldet(6189): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1288, malware hits 0, cleaned hits 0, time 120s
Aug 21 2026 03:25:59 instant0279 maldet(6189): {scan} scan report saved, to view run: maldet --report 260821-0323.6189
Aug 22 2026 03:25:14 instant0279 maldet(9704): {update} checking for available updates...
Aug 22 2026 03:25:15 instant0279 maldet(9704): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Aug 22 2026 03:25:15 instant0279 maldet(9704): {update} hashing install files and checking against server...
Aug 22 2026 03:25:15 instant0279 maldet(9704): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Aug 22 2026 03:25:15 instant0279 maldet(9704): {update} latest version already installed.
Aug 22 2026 03:25:15 instant0279 maldet(10466): {sigup} performing signature update check...
Aug 22 2026 03:25:15 instant0279 maldet(10466): {sigup} local signature set is version 2026052490478
Aug 22 2026 03:25:15 instant0279 maldet(10466): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Aug 22 2026 03:25:15 instant0279 maldet(10466): {sigup} latest signature set already installed
Aug 22 2026 03:25:16 instant0279 maldet(11115): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Aug 22 2026 03:25:36 instant0279 maldet(11115): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Aug 22 2026 03:25:36 instant0279 maldet(11115): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Aug 22 2026 03:25:36 instant0279 maldet(11115): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Aug 22 2026 03:25:36 instant0279 maldet(11115): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Aug 22 2026 03:26:01 instant0279 maldet(11115): {scan} file list completed in 25s, found 61 files...
Aug 22 2026 03:26:01 instant0279 maldet(11115): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Aug 22 2026 03:26:01 instant0279 maldet(11115): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (61 files) in progress...
Aug 22 2026 03:26:13 instant0279 maldet(11115): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 61, malware hits 0, cleaned hits 0, time 57s
Aug 22 2026 03:26:13 instant0279 maldet(11115): {scan} scan report saved, to view run: maldet --report 260822-0325.11115
Aug 23 2026 03:20:31 instant0279 maldet(30880): {update} checking for available updates...
Aug 23 2026 03:20:32 instant0279 maldet(30880): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Aug 23 2026 03:20:32 instant0279 maldet(30880): {update} hashing install files and checking against server...
Aug 23 2026 03:20:32 instant0279 maldet(30880): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Aug 23 2026 03:20:32 instant0279 maldet(30880): {update} latest version already installed.
Aug 23 2026 03:20:33 instant0279 maldet(31800): {sigup} performing signature update check...
Aug 23 2026 03:20:33 instant0279 maldet(31800): {sigup} local signature set is version 2026052490478
Aug 23 2026 03:20:33 instant0279 maldet(31800): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Aug 23 2026 03:20:33 instant0279 maldet(31800): {sigup} latest signature set already installed
Aug 23 2026 03:20:34 instant0279 maldet(32525): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Aug 23 2026 03:20:35 instant0279 maldet(32525): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Aug 23 2026 03:20:35 instant0279 maldet(32525): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Aug 23 2026 03:20:35 instant0279 maldet(32525): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Aug 23 2026 03:20:35 instant0279 maldet(32525): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Aug 23 2026 03:21:15 instant0279 maldet(32525): {scan} file list completed in 40s, found 36 files...
Aug 23 2026 03:21:15 instant0279 maldet(32525): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Aug 23 2026 03:21:15 instant0279 maldet(32525): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (36 files) in progress...
Aug 23 2026 03:21:24 instant0279 maldet(32525): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 36, malware hits 0, cleaned hits 0, time 50s
Aug 23 2026 03:21:24 instant0279 maldet(32525): {scan} scan report saved, to view run: maldet --report 260823-0320.32525
Aug 24 2026 03:12:48 instant0279 maldet(22804): {update} checking for available updates...
Aug 24 2026 03:12:48 instant0279 maldet(22804): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Aug 24 2026 03:12:48 instant0279 maldet(22804): {update} hashing install files and checking against server...
Aug 24 2026 03:12:48 instant0279 maldet(22804): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Aug 24 2026 03:12:48 instant0279 maldet(22804): {update} latest version already installed.
Aug 24 2026 03:12:48 instant0279 maldet(23475): {sigup} performing signature update check...
Aug 24 2026 03:12:48 instant0279 maldet(23475): {sigup} local signature set is version 2026052490478
Aug 24 2026 03:12:49 instant0279 maldet(23475): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Aug 24 2026 03:12:49 instant0279 maldet(23475): {sigup} latest signature set already installed
Aug 24 2026 03:12:49 instant0279 maldet(24118): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Aug 24 2026 03:12:50 instant0279 maldet(24118): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Aug 24 2026 03:12:50 instant0279 maldet(24118): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Aug 24 2026 03:12:50 instant0279 maldet(24118): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Aug 24 2026 03:12:50 instant0279 maldet(24118): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Aug 24 2026 03:13:27 instant0279 maldet(24118): {scan} file list completed in 37s, found 103 files...
Aug 24 2026 03:13:27 instant0279 maldet(24118): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Aug 24 2026 03:13:27 instant0279 maldet(24118): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (103 files) in progress...
Aug 24 2026 03:13:45 instant0279 maldet(24118): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 103, malware hits 0, cleaned hits 0, time 56s
Aug 24 2026 03:13:45 instant0279 maldet(24118): {scan} scan report saved, to view run: maldet --report 260824-0312.24118
Aug 25 2026 04:19:47 instant0279 maldet(10440): {update} checking for available updates...
Aug 25 2026 04:19:47 instant0279 maldet(10440): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Aug 25 2026 04:19:47 instant0279 maldet(10440): {update} hashing install files and checking against server...
Aug 25 2026 04:19:47 instant0279 maldet(10440): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Aug 25 2026 04:19:47 instant0279 maldet(10440): {update} latest version already installed.
Aug 25 2026 04:19:47 instant0279 maldet(11128): {sigup} performing signature update check...
Aug 25 2026 04:19:47 instant0279 maldet(11128): {sigup} local signature set is version 2026052490478
Aug 25 2026 04:19:48 instant0279 maldet(11128): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Aug 25 2026 04:19:48 instant0279 maldet(11128): {sigup} latest signature set already installed
Aug 25 2026 04:19:48 instant0279 maldet(11810): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Aug 25 2026 04:19:48 instant0279 maldet(11810): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Aug 25 2026 04:19:48 instant0279 maldet(11810): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Aug 25 2026 04:19:48 instant0279 maldet(11810): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Aug 25 2026 04:19:48 instant0279 maldet(11810): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Aug 25 2026 04:20:26 instant0279 maldet(11810): {scan} file list completed in 38s, found 503 files...
Aug 25 2026 04:20:26 instant0279 maldet(11810): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Aug 25 2026 04:20:26 instant0279 maldet(11810): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (503 files) in progress...
Aug 25 2026 04:20:51 instant0279 maldet(11810): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/topportugalproperties.com/.well-known/index.php
Aug 25 2026 04:20:51 instant0279 maldet(11810): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/topportugalproperties.com/.well-known/index.php' to '/usr/local/maldetect/quarantine/index.php.57592238'
Aug 25 2026 04:20:51 instant0279 maldet(11810): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.57592238 no longer exists.
Aug 25 2026 04:20:51 instant0279 maldet(11810): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/Doha/ptgoldenvisa/index.php
Aug 25 2026 04:20:51 instant0279 maldet(11810): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/Doha/ptgoldenvisa/index.php' to '/usr/local/maldetect/quarantine/index.php.6119885'
Aug 25 2026 04:20:51 instant0279 maldet(11810): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.6119885 no longer exists.
Aug 25 2026 04:20:51 instant0279 maldet(11810): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/Doha/index.php
Aug 25 2026 04:20:51 instant0279 maldet(11810): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/Doha/index.php' to '/usr/local/maldetect/quarantine/index.php.2204621290'
Aug 25 2026 04:20:51 instant0279 maldet(11810): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.2204621290 no longer exists.
Aug 25 2026 04:20:51 instant0279 maldet(11810): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/wp-includes/blocks/index.php
Aug 25 2026 04:20:51 instant0279 maldet(11810): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/wp-includes/blocks/index.php' to '/usr/local/maldetect/quarantine/index.php.472726737'
Aug 25 2026 04:20:51 instant0279 maldet(11810): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.472726737 no longer exists.
Aug 25 2026 04:20:52 instant0279 maldet(11810): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/scheduleyourcall/index.php
Aug 25 2026 04:20:52 instant0279 maldet(11810): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/scheduleyourcall/index.php' to '/usr/local/maldetect/quarantine/index.php.282975014'
Aug 25 2026 04:20:52 instant0279 maldet(11810): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.282975014 no longer exists.
Aug 25 2026 04:20:52 instant0279 maldet(11810): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/scheduleyourcall/backup/index.php
Aug 25 2026 04:20:52 instant0279 maldet(11810): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/scheduleyourcall/backup/index.php' to '/usr/local/maldetect/quarantine/index.php.3105410745'
Aug 25 2026 04:20:52 instant0279 maldet(11810): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.3105410745 no longer exists.
Aug 25 2026 04:20:52 instant0279 maldet(11810): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/PTvisa1/index.php
Aug 25 2026 04:20:52 instant0279 maldet(11810): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/PTvisa1/index.php' to '/usr/local/maldetect/quarantine/index.php.1989631947'
Aug 25 2026 04:20:52 instant0279 maldet(11810): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.1989631947 no longer exists.
Aug 25 2026 04:20:52 instant0279 maldet(11810): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/europeinvestorvisa/index.php
Aug 25 2026 04:20:52 instant0279 maldet(11810): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/europeinvestorvisa/index.php' to '/usr/local/maldetect/quarantine/index.php.697128178'
Aug 25 2026 04:20:52 instant0279 maldet(11810): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.697128178 no longer exists.
Aug 25 2026 04:20:52 instant0279 maldet(11810): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/Ptvisa2/index.php
Aug 25 2026 04:20:52 instant0279 maldet(11810): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/Ptvisa2/index.php' to '/usr/local/maldetect/quarantine/index.php.2667511394'
Aug 25 2026 04:20:52 instant0279 maldet(11810): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.2667511394 no longer exists.
Aug 25 2026 04:20:52 instant0279 maldet(11810): {hit} malware hit {HEX}php.generic.globals.500 found for /home/ptgoldenvisa/public_html/ptvisainvestment/wp-includes/fnehix.php
Aug 25 2026 04:20:52 instant0279 maldet(11810): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/ptvisainvestment/wp-includes/fnehix.php' to '/usr/local/maldetect/quarantine/fnehix.php.1729416354'
Aug 25 2026 04:20:52 instant0279 maldet(11810): {clean} could not find clean rule for hit php.generic.globals or file /usr/local/maldetect/quarantine/fnehix.php.1729416354 no longer exists.
Aug 25 2026 04:20:52 instant0279 maldet(11810): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/verchaves/index.php
Aug 25 2026 04:20:52 instant0279 maldet(11810): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/verchaves/index.php' to '/usr/local/maldetect/quarantine/index.php.661830793'
Aug 25 2026 04:20:52 instant0279 maldet(11810): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.661830793 no longer exists.
Aug 25 2026 04:20:52 instant0279 maldet(11810): {hit} malware hit {HEX}php.generic.globals.500 found for /home/ptgoldenvisa/public_html/citizenshipvisa/wp-includes/kwtbtg.php
Aug 25 2026 04:20:52 instant0279 maldet(11810): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/citizenshipvisa/wp-includes/kwtbtg.php' to '/usr/local/maldetect/quarantine/kwtbtg.php.14629263'
Aug 25 2026 04:20:52 instant0279 maldet(11810): {clean} could not find clean rule for hit php.generic.globals or file /usr/local/maldetect/quarantine/kwtbtg.php.14629263 no longer exists.
Aug 25 2026 04:20:52 instant0279 maldet(11810): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/Dubai/ptgoldenvisa/index.php
Aug 25 2026 04:20:52 instant0279 maldet(11810): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/Dubai/ptgoldenvisa/index.php' to '/usr/local/maldetect/quarantine/index.php.152892029'
Aug 25 2026 04:20:52 instant0279 maldet(11810): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.152892029 no longer exists.
Aug 25 2026 04:20:52 instant0279 maldet(11810): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/Dubai/Dubaiold/index.php
Aug 25 2026 04:20:52 instant0279 maldet(11810): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/Dubai/Dubaiold/index.php' to '/usr/local/maldetect/quarantine/index.php.289414712'
Aug 25 2026 04:20:52 instant0279 maldet(11810): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.289414712 no longer exists.
Aug 25 2026 04:20:52 instant0279 maldet(11810): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/Dubai/index.php
Aug 25 2026 04:20:52 instant0279 maldet(11810): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/Dubai/index.php' to '/usr/local/maldetect/quarantine/index.php.45074291'
Aug 25 2026 04:20:52 instant0279 maldet(11810): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.45074291 no longer exists.
Aug 25 2026 04:20:52 instant0279 maldet(11810): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/topportugalpropertiesnow.com/index.php
Aug 25 2026 04:20:52 instant0279 maldet(11810): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/topportugalpropertiesnow.com/index.php' to '/usr/local/maldetect/quarantine/index.php.879618436'
Aug 25 2026 04:20:52 instant0279 maldet(11810): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.879618436 no longer exists.
Aug 25 2026 04:20:52 instant0279 maldet(11810): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/chat/index.php
Aug 25 2026 04:20:52 instant0279 maldet(11810): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/chat/index.php' to '/usr/local/maldetect/quarantine/index.php.745725465'
Aug 25 2026 04:20:52 instant0279 maldet(11810): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.745725465 no longer exists.
Aug 25 2026 04:20:52 instant0279 maldet(11810): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/chat/mobile/index.php
Aug 25 2026 04:20:52 instant0279 maldet(11810): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/chat/mobile/index.php' to '/usr/local/maldetect/quarantine/index.php.132791292'
Aug 25 2026 04:20:52 instant0279 maldet(11810): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.132791292 no longer exists.
Aug 25 2026 04:20:52 instant0279 maldet(11810): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/chat/mobile/php/index.php
Aug 25 2026 04:20:52 instant0279 maldet(11810): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/chat/mobile/php/index.php' to '/usr/local/maldetect/quarantine/index.php.299251694'
Aug 25 2026 04:20:52 instant0279 maldet(11810): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.299251694 no longer exists.
Aug 25 2026 04:20:52 instant0279 maldet(11810): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/farsi-persian/index.php
Aug 25 2026 04:20:52 instant0279 maldet(11810): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/farsi-persian/index.php' to '/usr/local/maldetect/quarantine/index.php.67035989'
Aug 25 2026 04:20:52 instant0279 maldet(11810): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.67035989 no longer exists.
Aug 25 2026 04:20:52 instant0279 maldet(11810): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/portugalpropertiesnow.com/wp-includes/blocks/index.php
Aug 25 2026 04:20:52 instant0279 maldet(11810): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/portugalpropertiesnow.com/wp-includes/blocks/index.php' to '/usr/local/maldetect/quarantine/index.php.1021112840'
Aug 25 2026 04:20:52 instant0279 maldet(11810): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.1021112840 no longer exists.
Aug 25 2026 04:20:52 instant0279 maldet(11810): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/portugalpropertiesnow.com/Old/index.php
Aug 25 2026 04:20:52 instant0279 maldet(11810): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/portugalpropertiesnow.com/Old/index.php' to '/usr/local/maldetect/quarantine/index.php.28675323'
Aug 25 2026 04:20:52 instant0279 maldet(11810): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.28675323 no longer exists.
Aug 25 2026 04:20:52 instant0279 maldet(11810): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/studentsresidencepermit.com/index.php
Aug 25 2026 04:20:52 instant0279 maldet(11810): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/studentsresidencepermit.com/index.php' to '/usr/local/maldetect/quarantine/index.php.51248360'
Aug 25 2026 04:20:52 instant0279 maldet(11810): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.51248360 no longer exists.
Aug 25 2026 04:20:52 instant0279 maldet(11810): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/secondpassportnow.com/vendor__09e7112/composer/index.php
Aug 25 2026 04:20:52 instant0279 maldet(11810): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/secondpassportnow.com/vendor__09e7112/composer/index.php' to '/usr/local/maldetect/quarantine/index.php.23969153'
Aug 25 2026 04:20:52 instant0279 maldet(11810): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.23969153 no longer exists.
Aug 25 2026 04:20:52 instant0279 maldet(11810): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/investorvisa/index.php
Aug 25 2026 04:20:52 instant0279 maldet(11810): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/investorvisa/index.php' to '/usr/local/maldetect/quarantine/index.php.217954109'
Aug 25 2026 04:20:52 instant0279 maldet(11810): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.217954109 no longer exists.
Aug 25 2026 04:20:52 instant0279 maldet(11810): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/visabyinvestment/ptgoldenvisa/index.php
Aug 25 2026 04:20:52 instant0279 maldet(11810): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/visabyinvestment/ptgoldenvisa/index.php' to '/usr/local/maldetect/quarantine/index.php.1919630404'
Aug 25 2026 04:20:52 instant0279 maldet(11810): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.1919630404 no longer exists.
Aug 25 2026 04:20:52 instant0279 maldet(11810): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/visabyinvestment/webinar/index.php
Aug 25 2026 04:20:52 instant0279 maldet(11810): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/visabyinvestment/webinar/index.php' to '/usr/local/maldetect/quarantine/index.php.2706110606'
Aug 25 2026 04:20:52 instant0279 maldet(11810): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.2706110606 no longer exists.
Aug 25 2026 04:20:52 instant0279 maldet(11810): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 503, malware hits 27, cleaned hits 0, time 64s
Aug 25 2026 04:20:52 instant0279 maldet(11810): {scan} scan report saved, to view run: maldet --report 260825-0419.11810
Aug 25 2026 04:20:52 instant0279 maldet(11810): {alert} sent scan report to [email protected]
Aug 26 2026 03:27:08 instant0279 maldet(30290): {update} checking for available updates...
Aug 26 2026 03:27:08 instant0279 maldet(30290): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Aug 26 2026 03:27:08 instant0279 maldet(30290): {update} hashing install files and checking against server...
Aug 26 2026 03:27:08 instant0279 maldet(30290): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Aug 26 2026 03:27:08 instant0279 maldet(30290): {update} latest version already installed.
Aug 26 2026 03:27:08 instant0279 maldet(31068): {sigup} performing signature update check...
Aug 26 2026 03:27:08 instant0279 maldet(31068): {sigup} local signature set is version 2026052490478
Aug 26 2026 03:27:09 instant0279 maldet(31068): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Aug 26 2026 03:27:09 instant0279 maldet(31068): {sigup} latest signature set already installed
Aug 26 2026 03:27:09 instant0279 maldet(31818): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Aug 26 2026 03:27:10 instant0279 maldet(31818): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Aug 26 2026 03:27:10 instant0279 maldet(31818): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Aug 26 2026 03:27:10 instant0279 maldet(31818): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Aug 26 2026 03:27:10 instant0279 maldet(31818): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Aug 26 2026 03:27:43 instant0279 maldet(31818): {scan} file list completed in 33s, found 601 files...
Aug 26 2026 03:27:43 instant0279 maldet(31818): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Aug 26 2026 03:27:43 instant0279 maldet(31818): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (601 files) in progress...
Aug 26 2026 03:28:03 instant0279 maldet(31818): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/scheduleyourcall/index.php
Aug 26 2026 03:28:03 instant0279 maldet(31818): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/scheduleyourcall/index.php' to '/usr/local/maldetect/quarantine/index.php.43113131'
Aug 26 2026 03:28:03 instant0279 maldet(31818): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.43113131 no longer exists.
Aug 26 2026 03:28:03 instant0279 maldet(31818): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/scheduleyourcall/backup/index.php
Aug 26 2026 03:28:03 instant0279 maldet(31818): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/scheduleyourcall/backup/index.php' to '/usr/local/maldetect/quarantine/index.php.1160320643'
Aug 26 2026 03:28:03 instant0279 maldet(31818): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.1160320643 no longer exists.
Aug 26 2026 03:28:03 instant0279 maldet(31818): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/PTvisa1/index.php
Aug 26 2026 03:28:03 instant0279 maldet(31818): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/PTvisa1/index.php' to '/usr/local/maldetect/quarantine/index.php.3213611032'
Aug 26 2026 03:28:03 instant0279 maldet(31818): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.3213611032 no longer exists.
Aug 26 2026 03:28:03 instant0279 maldet(31818): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/Ptvisa2/index.php
Aug 26 2026 03:28:03 instant0279 maldet(31818): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/Ptvisa2/index.php' to '/usr/local/maldetect/quarantine/index.php.2765522165'
Aug 26 2026 03:28:03 instant0279 maldet(31818): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.2765522165 no longer exists.
Aug 26 2026 03:28:03 instant0279 maldet(31818): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/ptvisainvestment/vendor/composer/index.php
Aug 26 2026 03:28:03 instant0279 maldet(31818): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/ptvisainvestment/vendor/composer/index.php' to '/usr/local/maldetect/quarantine/index.php.2917431848'
Aug 26 2026 03:28:03 instant0279 maldet(31818): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.2917431848 no longer exists.
Aug 26 2026 03:28:03 instant0279 maldet(31818): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/verchaves/index.php
Aug 26 2026 03:28:03 instant0279 maldet(31818): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/verchaves/index.php' to '/usr/local/maldetect/quarantine/index.php.142611073'
Aug 26 2026 03:28:03 instant0279 maldet(31818): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.142611073 no longer exists.
Aug 26 2026 03:28:03 instant0279 maldet(31818): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/realestateinvestorvisa/index.php
Aug 26 2026 03:28:03 instant0279 maldet(31818): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/realestateinvestorvisa/index.php' to '/usr/local/maldetect/quarantine/index.php.2312332721'
Aug 26 2026 03:28:03 instant0279 maldet(31818): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.2312332721 no longer exists.
Aug 26 2026 03:28:03 instant0279 maldet(31818): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/realestateinvestorvisa/index.php0
Aug 26 2026 03:28:03 instant0279 maldet(31818): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/realestateinvestorvisa/index.php0' to '/usr/local/maldetect/quarantine/index.php0.9056664'
Aug 26 2026 03:28:03 instant0279 maldet(31818): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php0.9056664 no longer exists.
Aug 26 2026 03:28:03 instant0279 maldet(31818): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/citizenshipvisa/wp-includes/images/index.php
Aug 26 2026 03:28:03 instant0279 maldet(31818): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/citizenshipvisa/wp-includes/images/index.php' to '/usr/local/maldetect/quarantine/index.php.162788597'
Aug 26 2026 03:28:03 instant0279 maldet(31818): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.162788597 no longer exists.
Aug 26 2026 03:28:03 instant0279 maldet(31818): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/citizenshipvisa/vendor/composer/index.php
Aug 26 2026 03:28:03 instant0279 maldet(31818): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/citizenshipvisa/vendor/composer/index.php' to '/usr/local/maldetect/quarantine/index.php.185823289'
Aug 26 2026 03:28:03 instant0279 maldet(31818): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.185823289 no longer exists.
Aug 26 2026 03:28:03 instant0279 maldet(31818): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/citizenshipvisa/vendor/google/index.php
Aug 26 2026 03:28:03 instant0279 maldet(31818): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/citizenshipvisa/vendor/google/index.php' to '/usr/local/maldetect/quarantine/index.php.23041405'
Aug 26 2026 03:28:03 instant0279 maldet(31818): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.23041405 no longer exists.
Aug 26 2026 03:28:03 instant0279 maldet(31818): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/bestcitizenshipinvestment/index.php
Aug 26 2026 03:28:03 instant0279 maldet(31818): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/bestcitizenshipinvestment/index.php' to '/usr/local/maldetect/quarantine/index.php.2516313861'
Aug 26 2026 03:28:03 instant0279 maldet(31818): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.2516313861 no longer exists.
Aug 26 2026 03:28:03 instant0279 maldet(31818): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/bestcitizenshipinvestment/index.php0
Aug 26 2026 03:28:03 instant0279 maldet(31818): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/bestcitizenshipinvestment/index.php0' to '/usr/local/maldetect/quarantine/index.php0.2562720582'
Aug 26 2026 03:28:03 instant0279 maldet(31818): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php0.2562720582 no longer exists.
Aug 26 2026 03:28:03 instant0279 maldet(31818): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/visabyinvestment/index.php
Aug 26 2026 03:28:03 instant0279 maldet(31818): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/visabyinvestment/index.php' to '/usr/local/maldetect/quarantine/index.php.2322522675'
Aug 26 2026 03:28:03 instant0279 maldet(31818): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.2322522675 no longer exists.
Aug 26 2026 03:28:03 instant0279 maldet(31818): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/visabyinvestment/index.php0
Aug 26 2026 03:28:03 instant0279 maldet(31818): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/visabyinvestment/index.php0' to '/usr/local/maldetect/quarantine/index.php0.18625193'
Aug 26 2026 03:28:03 instant0279 maldet(31818): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php0.18625193 no longer exists.
Aug 26 2026 03:28:03 instant0279 maldet(31818): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/visabyinvestment/vendor/composer/index.php
Aug 26 2026 03:28:03 instant0279 maldet(31818): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/visabyinvestment/vendor/composer/index.php' to '/usr/local/maldetect/quarantine/index.php.103398119'
Aug 26 2026 03:28:03 instant0279 maldet(31818): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.103398119 no longer exists.
Aug 26 2026 03:28:03 instant0279 maldet(31818): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/visabyinvestment/vendor/google/index.php
Aug 26 2026 03:28:03 instant0279 maldet(31818): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/visabyinvestment/vendor/google/index.php' to '/usr/local/maldetect/quarantine/index.php.1669513819'
Aug 26 2026 03:28:03 instant0279 maldet(31818): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.1669513819 no longer exists.
Aug 26 2026 03:28:04 instant0279 maldet(31818): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 601, malware hits 17, cleaned hits 0, time 54s
Aug 26 2026 03:28:04 instant0279 maldet(31818): {scan} scan report saved, to view run: maldet --report 260826-0327.31818
Aug 26 2026 03:28:04 instant0279 maldet(31818): {alert} sent scan report to [email protected]
Aug 27 2026 03:14:07 instant0279 maldet(10385): {update} checking for available updates...
Aug 27 2026 03:14:07 instant0279 maldet(10385): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Aug 27 2026 03:14:08 instant0279 maldet(10385): {update} hashing install files and checking against server...
Aug 27 2026 03:14:08 instant0279 maldet(10385): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Aug 27 2026 03:14:08 instant0279 maldet(10385): {update} latest version already installed.
Aug 27 2026 03:14:08 instant0279 maldet(11158): {sigup} performing signature update check...
Aug 27 2026 03:14:08 instant0279 maldet(11158): {sigup} local signature set is version 2026052490478
Aug 27 2026 03:14:08 instant0279 maldet(11158): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Aug 27 2026 03:14:09 instant0279 maldet(11158): {sigup} latest signature set already installed
Aug 27 2026 03:14:09 instant0279 maldet(11888): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Aug 27 2026 03:14:09 instant0279 maldet(11888): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Aug 27 2026 03:14:09 instant0279 maldet(11888): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Aug 27 2026 03:14:09 instant0279 maldet(11888): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Aug 27 2026 03:14:09 instant0279 maldet(11888): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Aug 27 2026 03:14:44 instant0279 maldet(11888): {scan} file list completed in 35s, found 3973 files...
Aug 27 2026 03:14:44 instant0279 maldet(11888): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Aug 27 2026 03:14:44 instant0279 maldet(11888): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (3973 files) in progress...
Aug 27 2026 03:16:58 instant0279 maldet(11888): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/realestateinvestorvisa/index.php
Aug 27 2026 03:16:58 instant0279 maldet(11888): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/realestateinvestorvisa/index.php' to '/usr/local/maldetect/quarantine/index.php.27115738'
Aug 27 2026 03:16:58 instant0279 maldet(11888): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.27115738 no longer exists.
Aug 27 2026 03:16:58 instant0279 maldet(11888): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/bestcitizenshipinvestment/index.php
Aug 27 2026 03:16:58 instant0279 maldet(11888): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/bestcitizenshipinvestment/index.php' to '/usr/local/maldetect/quarantine/index.php.3222324627'
Aug 27 2026 03:16:58 instant0279 maldet(11888): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.3222324627 no longer exists.
Aug 27 2026 03:16:58 instant0279 maldet(11888): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/visabyinvestment/index.php
Aug 27 2026 03:16:58 instant0279 maldet(11888): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/visabyinvestment/index.php' to '/usr/local/maldetect/quarantine/index.php.1986625966'
Aug 27 2026 03:16:58 instant0279 maldet(11888): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.1986625966 no longer exists.
Aug 27 2026 03:16:58 instant0279 maldet(11888): {hit} malware hit {MD5}multi.coinminer.miner.16702 found for /home/tempovalido/public_html/wp-content/plugins/media-optimization-core-9c22ba/.c360299420/.ld-linux.so
Aug 27 2026 03:16:58 instant0279 maldet(11888): {quar} malware quarantined from '/home/tempovalido/public_html/wp-content/plugins/media-optimization-core-9c22ba/.c360299420/.ld-linux.so' to '/usr/local/maldetect/quarantine/.ld-linux.so.2260516203'
Aug 27 2026 03:16:58 instant0279 maldet(11888): {clean} could not find clean rule for hit multi.coinminer.miner or file /usr/local/maldetect/quarantine/.ld-linux.so.2260516203 no longer exists.
Aug 27 2026 03:16:58 instant0279 maldet(11888): {hit} malware hit {MD5}multi.coinminer.miner.16702 found for /tmp/.c365300477/.ld-linux.so
Aug 27 2026 03:16:58 instant0279 maldet(11888): {quar} malware quarantined from '/tmp/.c365300477/.ld-linux.so' to '/usr/local/maldetect/quarantine/.ld-linux.so.548719466'
Aug 27 2026 03:16:58 instant0279 maldet(11888): {clean} could not find clean rule for hit multi.coinminer.miner or file /usr/local/maldetect/quarantine/.ld-linux.so.548719466 no longer exists.
Aug 27 2026 03:16:58 instant0279 maldet(11888): {hit} malware hit {MD5}multi.coinminer.miner.16702 found for /tmp/.c382486654/.ld-linux.so
Aug 27 2026 03:16:58 instant0279 maldet(11888): {quar} malware quarantined from '/tmp/.c382486654/.ld-linux.so' to '/usr/local/maldetect/quarantine/.ld-linux.so.2165826256'
Aug 27 2026 03:16:58 instant0279 maldet(11888): {clean} could not find clean rule for hit multi.coinminer.miner or file /usr/local/maldetect/quarantine/.ld-linux.so.2165826256 no longer exists.
Aug 27 2026 03:16:58 instant0279 maldet(11888): {quar} fatal error handling '/var/tmp/.c365300477/.ld-linux.so'
Aug 27 2026 03:16:58 instant0279 maldet(11888): {quar} fatal error handling '/var/tmp/.c382486654/.ld-linux.so'
Aug 27 2026 03:16:58 instant0279 maldet(11888): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 3973, malware hits 6, cleaned hits 0, time 169s
Aug 27 2026 03:16:58 instant0279 maldet(11888): {scan} scan report saved, to view run: maldet --report 260827-0314.11888
Aug 27 2026 03:16:59 instant0279 maldet(11888): {alert} sent scan report to [email protected]
Aug 28 2026 03:51:19 instant0279 maldet(18182): {update} checking for available updates...
Aug 28 2026 03:51:20 instant0279 maldet(18182): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Aug 28 2026 03:51:20 instant0279 maldet(18182): {update} hashing install files and checking against server...
Aug 28 2026 03:51:20 instant0279 maldet(18182): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Aug 28 2026 03:51:20 instant0279 maldet(18182): {update} latest version already installed.
Aug 28 2026 03:51:20 instant0279 maldet(18985): {sigup} performing signature update check...
Aug 28 2026 03:51:20 instant0279 maldet(18985): {sigup} local signature set is version 2026052490478
Aug 28 2026 03:51:21 instant0279 maldet(18985): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Aug 28 2026 03:51:21 instant0279 maldet(18985): {sigup} latest signature set already installed
Aug 28 2026 03:51:21 instant0279 maldet(19700): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Aug 28 2026 03:51:22 instant0279 maldet(19700): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Aug 28 2026 03:51:22 instant0279 maldet(19700): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Aug 28 2026 03:51:22 instant0279 maldet(19700): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Aug 28 2026 03:51:22 instant0279 maldet(19700): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Aug 28 2026 03:51:58 instant0279 maldet(19700): {scan} file list completed in 36s, found 726 files...
Aug 28 2026 03:51:58 instant0279 maldet(19700): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Aug 28 2026 03:51:58 instant0279 maldet(19700): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (726 files) in progress...
Aug 28 2026 03:52:27 instant0279 maldet(19700): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/realestateinvestorvisa/index.php
Aug 28 2026 03:52:27 instant0279 maldet(19700): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/realestateinvestorvisa/index.php' to '/usr/local/maldetect/quarantine/index.php.236103021'
Aug 28 2026 03:52:27 instant0279 maldet(19700): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.236103021 no longer exists.
Aug 28 2026 03:52:27 instant0279 maldet(19700): {hit} malware hit {HEX}php.inject.generic.565 found for /home/ptgoldenvisa/public_html/citizenshipvisa/saiga.php
Aug 28 2026 03:52:27 instant0279 maldet(19700): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/citizenshipvisa/saiga.php' to '/usr/local/maldetect/quarantine/saiga.php.2363923235'
Aug 28 2026 03:52:27 instant0279 maldet(19700): {clean} could not find clean rule for hit php.inject.generic or file /usr/local/maldetect/quarantine/saiga.php.2363923235 no longer exists.
Aug 28 2026 03:52:27 instant0279 maldet(19700): {hit} malware hit {HEX}php.generic.globals.500 found for /home/ptgoldenvisa/public_html/citizenshipvisa/wp-includes/xvlcph.php
Aug 28 2026 03:52:27 instant0279 maldet(19700): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/citizenshipvisa/wp-includes/xvlcph.php' to '/usr/local/maldetect/quarantine/xvlcph.php.2873123667'
Aug 28 2026 03:52:27 instant0279 maldet(19700): {clean} could not find clean rule for hit php.generic.globals or file /usr/local/maldetect/quarantine/xvlcph.php.2873123667 no longer exists.
Aug 28 2026 03:52:27 instant0279 maldet(19700): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/bestcitizenshipinvestment/index.php
Aug 28 2026 03:52:27 instant0279 maldet(19700): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/bestcitizenshipinvestment/index.php' to '/usr/local/maldetect/quarantine/index.php.1375428014'
Aug 28 2026 03:52:27 instant0279 maldet(19700): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.1375428014 no longer exists.
Aug 28 2026 03:52:27 instant0279 maldet(19700): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/visabyinvestment/index.php
Aug 28 2026 03:52:27 instant0279 maldet(19700): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/visabyinvestment/index.php' to '/usr/local/maldetect/quarantine/index.php.2907219374'
Aug 28 2026 03:52:27 instant0279 maldet(19700): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.2907219374 no longer exists.
Aug 28 2026 03:52:27 instant0279 maldet(19700): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 726, malware hits 5, cleaned hits 0, time 66s
Aug 28 2026 03:52:27 instant0279 maldet(19700): {scan} scan report saved, to view run: maldet --report 260828-0351.19700
Aug 28 2026 03:52:28 instant0279 maldet(19700): {alert} sent scan report to [email protected]
Aug 29 2026 03:15:00 instant0279 maldet(402): {update} checking for available updates...
Aug 29 2026 03:15:00 instant0279 maldet(402): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Aug 29 2026 03:15:00 instant0279 maldet(402): {update} hashing install files and checking against server...
Aug 29 2026 03:15:00 instant0279 maldet(402): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Aug 29 2026 03:15:00 instant0279 maldet(402): {update} latest version already installed.
Aug 29 2026 03:15:00 instant0279 maldet(1248): {sigup} performing signature update check...
Aug 29 2026 03:15:00 instant0279 maldet(1248): {sigup} local signature set is version 2026052490478
Aug 29 2026 03:15:01 instant0279 maldet(1248): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Aug 29 2026 03:15:01 instant0279 maldet(1248): {sigup} latest signature set already installed
Aug 29 2026 03:15:01 instant0279 maldet(2093): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Aug 29 2026 03:15:02 instant0279 maldet(2093): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Aug 29 2026 03:15:02 instant0279 maldet(2093): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Aug 29 2026 03:15:02 instant0279 maldet(2093): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Aug 29 2026 03:15:02 instant0279 maldet(2093): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Aug 29 2026 03:15:35 instant0279 maldet(2093): {scan} file list completed in 33s, found 296 files...
Aug 29 2026 03:15:36 instant0279 maldet(2093): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Aug 29 2026 03:15:36 instant0279 maldet(2093): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (296 files) in progress...
Aug 29 2026 03:15:57 instant0279 maldet(2093): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/realestateinvestorvisa/index.php
Aug 29 2026 03:15:57 instant0279 maldet(2093): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/realestateinvestorvisa/index.php' to '/usr/local/maldetect/quarantine/index.php.1003515275'
Aug 29 2026 03:15:57 instant0279 maldet(2093): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.1003515275 no longer exists.
Aug 29 2026 03:15:57 instant0279 maldet(2093): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/bestcitizenshipinvestment/index.php
Aug 29 2026 03:15:57 instant0279 maldet(2093): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/bestcitizenshipinvestment/index.php' to '/usr/local/maldetect/quarantine/index.php.3219419955'
Aug 29 2026 03:15:57 instant0279 maldet(2093): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.3219419955 no longer exists.
Aug 29 2026 03:15:57 instant0279 maldet(2093): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/visabyinvestment/index.php
Aug 29 2026 03:15:57 instant0279 maldet(2093): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/visabyinvestment/index.php' to '/usr/local/maldetect/quarantine/index.php.105099207'
Aug 29 2026 03:15:57 instant0279 maldet(2093): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.105099207 no longer exists.
Aug 29 2026 03:15:57 instant0279 maldet(2093): {hit} malware hit {MD5}multi.coinminer.miner.16702 found for /home/tempovalido/public_html/wp-content/plugins/media-optimization-core-9c22ba/.c399749596/.ld-linux.so
Aug 29 2026 03:15:57 instant0279 maldet(2093): {quar} malware quarantined from '/home/tempovalido/public_html/wp-content/plugins/media-optimization-core-9c22ba/.c399749596/.ld-linux.so' to '/usr/local/maldetect/quarantine/.ld-linux.so.1752614812'
Aug 29 2026 03:15:57 instant0279 maldet(2093): {clean} could not find clean rule for hit multi.coinminer.miner or file /usr/local/maldetect/quarantine/.ld-linux.so.1752614812 no longer exists.
Aug 29 2026 03:15:57 instant0279 maldet(2093): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 296, malware hits 4, cleaned hits 0, time 56s
Aug 29 2026 03:15:57 instant0279 maldet(2093): {scan} scan report saved, to view run: maldet --report 260829-0315.2093
Aug 29 2026 03:15:57 instant0279 maldet(2093): {alert} sent scan report to [email protected]
Aug 30 2026 03:51:33 instant0279 maldet(6379): {update} checking for available updates...
Aug 30 2026 03:51:33 instant0279 maldet(6379): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Aug 30 2026 03:51:33 instant0279 maldet(6379): {update} hashing install files and checking against server...
Aug 30 2026 03:51:33 instant0279 maldet(6379): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Aug 30 2026 03:51:33 instant0279 maldet(6379): {update} latest version already installed.
Aug 30 2026 03:51:34 instant0279 maldet(7163): {sigup} performing signature update check...
Aug 30 2026 03:51:34 instant0279 maldet(7163): {sigup} local signature set is version 2026052490478
Aug 30 2026 03:51:34 instant0279 maldet(7163): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Aug 30 2026 03:51:34 instant0279 maldet(7163): {sigup} latest signature set already installed
Aug 30 2026 03:51:34 instant0279 maldet(7892): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Aug 30 2026 03:51:35 instant0279 maldet(7892): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Aug 30 2026 03:51:35 instant0279 maldet(7892): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Aug 30 2026 03:51:35 instant0279 maldet(7892): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Aug 30 2026 03:51:35 instant0279 maldet(7892): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Aug 30 2026 03:52:10 instant0279 maldet(7892): {scan} file list completed in 35s, found 273 files...
Aug 30 2026 03:52:10 instant0279 maldet(7892): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Aug 30 2026 03:52:10 instant0279 maldet(7892): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (273 files) in progress...
Aug 30 2026 03:52:24 instant0279 maldet(7892): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/realestateinvestorvisa/index.php
Aug 30 2026 03:52:24 instant0279 maldet(7892): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/realestateinvestorvisa/index.php' to '/usr/local/maldetect/quarantine/index.php.2092927300'
Aug 30 2026 03:52:24 instant0279 maldet(7892): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.2092927300 no longer exists.
Aug 30 2026 03:52:24 instant0279 maldet(7892): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/bestcitizenshipinvestment/index.php
Aug 30 2026 03:52:24 instant0279 maldet(7892): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/bestcitizenshipinvestment/index.php' to '/usr/local/maldetect/quarantine/index.php.2696015642'
Aug 30 2026 03:52:24 instant0279 maldet(7892): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.2696015642 no longer exists.
Aug 30 2026 03:52:24 instant0279 maldet(7892): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/visabyinvestment/index.php
Aug 30 2026 03:52:24 instant0279 maldet(7892): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/visabyinvestment/index.php' to '/usr/local/maldetect/quarantine/index.php.342523401'
Aug 30 2026 03:52:24 instant0279 maldet(7892): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.342523401 no longer exists.
Aug 30 2026 03:52:24 instant0279 maldet(7892): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 273, malware hits 3, cleaned hits 0, time 50s
Aug 30 2026 03:52:24 instant0279 maldet(7892): {scan} scan report saved, to view run: maldet --report 260830-0351.7892
Aug 30 2026 03:52:24 instant0279 maldet(7892): {alert} sent scan report to [email protected]
Aug 31 2026 03:10:21 instant0279 maldet(27272): {update} checking for available updates...
Aug 31 2026 03:10:22 instant0279 maldet(27272): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Aug 31 2026 03:10:22 instant0279 maldet(27272): {update} hashing install files and checking against server...
Aug 31 2026 03:10:22 instant0279 maldet(27272): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Aug 31 2026 03:10:22 instant0279 maldet(27272): {update} latest version already installed.
Aug 31 2026 03:10:24 instant0279 maldet(29469): {sigup} performing signature update check...
Aug 31 2026 03:10:24 instant0279 maldet(29469): {sigup} local signature set is version 2026052490478
Aug 31 2026 03:10:24 instant0279 maldet(29469): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Aug 31 2026 03:10:24 instant0279 maldet(29469): {sigup} latest signature set already installed
Aug 31 2026 03:10:30 instant0279 maldet(31245): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Aug 31 2026 03:10:58 instant0279 maldet(31245): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Aug 31 2026 03:10:58 instant0279 maldet(31245): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Aug 31 2026 03:10:58 instant0279 maldet(31245): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Aug 31 2026 03:10:58 instant0279 maldet(31245): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Aug 31 2026 03:11:29 instant0279 maldet(31245): {scan} file list completed in 31s, found 87 files...
Aug 31 2026 03:11:29 instant0279 maldet(31245): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Aug 31 2026 03:11:29 instant0279 maldet(31245): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (87 files) in progress...
Aug 31 2026 03:11:40 instant0279 maldet(31245): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/realestateinvestorvisa/index.php
Aug 31 2026 03:11:40 instant0279 maldet(31245): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/realestateinvestorvisa/index.php' to '/usr/local/maldetect/quarantine/index.php.322451650'
Aug 31 2026 03:11:40 instant0279 maldet(31245): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.322451650 no longer exists.
Aug 31 2026 03:11:40 instant0279 maldet(31245): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/bestcitizenshipinvestment/index.php
Aug 31 2026 03:11:40 instant0279 maldet(31245): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/bestcitizenshipinvestment/index.php' to '/usr/local/maldetect/quarantine/index.php.1556011495'
Aug 31 2026 03:11:40 instant0279 maldet(31245): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.1556011495 no longer exists.
Aug 31 2026 03:11:40 instant0279 maldet(31245): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/visabyinvestment/index.php
Aug 31 2026 03:11:40 instant0279 maldet(31245): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/visabyinvestment/index.php' to '/usr/local/maldetect/quarantine/index.php.289216322'
Aug 31 2026 03:11:40 instant0279 maldet(31245): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.289216322 no longer exists.
Aug 31 2026 03:11:40 instant0279 maldet(31245): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 87, malware hits 3, cleaned hits 0, time 70s
Aug 31 2026 03:11:40 instant0279 maldet(31245): {scan} scan report saved, to view run: maldet --report 260831-0310.31245
Aug 31 2026 03:11:40 instant0279 maldet(31245): {alert} sent scan report to [email protected]
Sep 01 2026 03:41:02 instant0279 maldet(10152): {update} checking for available updates...
Sep 01 2026 03:41:02 instant0279 maldet(10152): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Sep 01 2026 03:41:02 instant0279 maldet(10152): {update} hashing install files and checking against server...
Sep 01 2026 03:41:03 instant0279 maldet(10152): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Sep 01 2026 03:41:03 instant0279 maldet(10152): {update} latest version already installed.
Sep 01 2026 03:41:05 instant0279 maldet(11178): {sigup} performing signature update check...
Sep 01 2026 03:41:05 instant0279 maldet(11178): {sigup} local signature set is version 2026052490478
Sep 01 2026 03:41:05 instant0279 maldet(11178): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Sep 01 2026 03:41:05 instant0279 maldet(11178): {sigup} latest signature set already installed
Sep 01 2026 03:41:06 instant0279 maldet(12299): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Sep 01 2026 03:41:07 instant0279 maldet(12299): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Sep 01 2026 03:41:07 instant0279 maldet(12299): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Sep 01 2026 03:41:07 instant0279 maldet(12299): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Sep 01 2026 03:41:07 instant0279 maldet(12299): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Sep 01 2026 03:41:42 instant0279 maldet(12299): {scan} file list completed in 35s, found 433 files...
Sep 01 2026 03:41:42 instant0279 maldet(12299): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Sep 01 2026 03:41:42 instant0279 maldet(12299): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (433 files) in progress...
Sep 01 2026 03:42:20 instant0279 maldet(12299): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/realestateinvestorvisa/index.php
Sep 01 2026 03:42:20 instant0279 maldet(12299): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/realestateinvestorvisa/index.php' to '/usr/local/maldetect/quarantine/index.php.2717520619'
Sep 01 2026 03:42:20 instant0279 maldet(12299): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.2717520619 no longer exists.
Sep 01 2026 03:42:20 instant0279 maldet(12299): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/bestcitizenshipinvestment/index.php
Sep 01 2026 03:42:20 instant0279 maldet(12299): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/bestcitizenshipinvestment/index.php' to '/usr/local/maldetect/quarantine/index.php.156010825'
Sep 01 2026 03:42:20 instant0279 maldet(12299): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.156010825 no longer exists.
Sep 01 2026 03:42:20 instant0279 maldet(12299): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/visabyinvestment/index.php
Sep 01 2026 03:42:20 instant0279 maldet(12299): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/visabyinvestment/index.php' to '/usr/local/maldetect/quarantine/index.php.1554022440'
Sep 01 2026 03:42:20 instant0279 maldet(12299): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.1554022440 no longer exists.
Sep 01 2026 03:42:20 instant0279 maldet(12299): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 433, malware hits 3, cleaned hits 0, time 74s
Sep 01 2026 03:42:21 instant0279 maldet(12299): {scan} scan report saved, to view run: maldet --report 260901-0341.12299
Sep 01 2026 03:42:21 instant0279 maldet(12299): {alert} sent scan report to [email protected]
Sep 02 2026 03:21:07 instant0279 maldet(27724): {update} checking for available updates...
Sep 02 2026 03:21:08 instant0279 maldet(27724): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Sep 02 2026 03:21:08 instant0279 maldet(27724): {update} hashing install files and checking against server...
Sep 02 2026 03:21:08 instant0279 maldet(27724): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Sep 02 2026 03:21:08 instant0279 maldet(27724): {update} latest version already installed.
Sep 02 2026 03:21:08 instant0279 maldet(28503): {sigup} performing signature update check...
Sep 02 2026 03:21:08 instant0279 maldet(28503): {sigup} local signature set is version 2026052490478
Sep 02 2026 03:21:09 instant0279 maldet(28503): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Sep 02 2026 03:21:09 instant0279 maldet(28503): {sigup} latest signature set already installed
Sep 02 2026 03:21:09 instant0279 maldet(29246): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Sep 02 2026 03:21:09 instant0279 maldet(29246): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Sep 02 2026 03:21:09 instant0279 maldet(29246): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Sep 02 2026 03:21:09 instant0279 maldet(29246): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Sep 02 2026 03:21:09 instant0279 maldet(29246): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Sep 02 2026 03:21:44 instant0279 maldet(29246): {scan} file list completed in 35s, found 165 files...
Sep 02 2026 03:21:44 instant0279 maldet(29246): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Sep 02 2026 03:21:44 instant0279 maldet(29246): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (165 files) in progress...
Sep 02 2026 03:22:07 instant0279 maldet(29246): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/realestateinvestorvisa/index.php
Sep 02 2026 03:22:07 instant0279 maldet(29246): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/realestateinvestorvisa/index.php' to '/usr/local/maldetect/quarantine/index.php.879910558'
Sep 02 2026 03:22:07 instant0279 maldet(29246): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.879910558 no longer exists.
Sep 02 2026 03:22:08 instant0279 maldet(29246): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/bestcitizenshipinvestment/index.php
Sep 02 2026 03:22:08 instant0279 maldet(29246): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/bestcitizenshipinvestment/index.php' to '/usr/local/maldetect/quarantine/index.php.1121716361'
Sep 02 2026 03:22:08 instant0279 maldet(29246): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.1121716361 no longer exists.
Sep 02 2026 03:22:08 instant0279 maldet(29246): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/visabyinvestment/index.php
Sep 02 2026 03:22:08 instant0279 maldet(29246): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/visabyinvestment/index.php' to '/usr/local/maldetect/quarantine/index.php.2882931665'
Sep 02 2026 03:22:08 instant0279 maldet(29246): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.2882931665 no longer exists.
Sep 02 2026 03:22:08 instant0279 maldet(29246): {hit} malware hit {MD5}multi.coinminer.miner.16702 found for /home/tempovalido/public_html/wp-content/plugins/widget-accessibility-helper-197cf7/.c326157928/.ld-linux.so
Sep 02 2026 03:22:08 instant0279 maldet(29246): {quar} malware quarantined from '/home/tempovalido/public_html/wp-content/plugins/widget-accessibility-helper-197cf7/.c326157928/.ld-linux.so' to '/usr/local/maldetect/quarantine/.ld-linux.so.2068529642'
Sep 02 2026 03:22:08 instant0279 maldet(29246): {clean} could not find clean rule for hit multi.coinminer.miner or file /usr/local/maldetect/quarantine/.ld-linux.so.2068529642 no longer exists.
Sep 02 2026 03:22:08 instant0279 maldet(29246): {hit} malware hit {MD5}multi.coinminer.miner.16702 found for /home/tempovalido/public_html/wp-content/plugins/media-optimization-core-9c22ba/.c335575058/.ld-linux.so
Sep 02 2026 03:22:08 instant0279 maldet(29246): {quar} malware quarantined from '/home/tempovalido/public_html/wp-content/plugins/media-optimization-core-9c22ba/.c335575058/.ld-linux.so' to '/usr/local/maldetect/quarantine/.ld-linux.so.464228599'
Sep 02 2026 03:22:08 instant0279 maldet(29246): {clean} could not find clean rule for hit multi.coinminer.miner or file /usr/local/maldetect/quarantine/.ld-linux.so.464228599 no longer exists.
Sep 02 2026 03:22:08 instant0279 maldet(29246): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 165, malware hits 5, cleaned hits 0, time 59s
Sep 02 2026 03:22:08 instant0279 maldet(29246): {scan} scan report saved, to view run: maldet --report 260902-0321.29246
Sep 02 2026 03:22:08 instant0279 maldet(29246): {alert} sent scan report to [email protected]
Sep 03 2026 03:40:21 instant0279 maldet(1100): {update} checking for available updates...
Sep 03 2026 03:40:21 instant0279 maldet(1100): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Sep 03 2026 03:40:21 instant0279 maldet(1100): {update} hashing install files and checking against server...
Sep 03 2026 03:40:22 instant0279 maldet(1100): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Sep 03 2026 03:40:22 instant0279 maldet(1100): {update} latest version already installed.
Sep 03 2026 03:40:22 instant0279 maldet(1811): {sigup} performing signature update check...
Sep 03 2026 03:40:22 instant0279 maldet(1811): {sigup} local signature set is version 2026052490478
Sep 03 2026 03:40:22 instant0279 maldet(1811): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Sep 03 2026 03:40:22 instant0279 maldet(1811): {sigup} latest signature set already installed
Sep 03 2026 03:40:23 instant0279 maldet(2494): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Sep 03 2026 03:40:44 instant0279 maldet(2494): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Sep 03 2026 03:40:44 instant0279 maldet(2494): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Sep 03 2026 03:40:44 instant0279 maldet(2494): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Sep 03 2026 03:40:44 instant0279 maldet(2494): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Sep 03 2026 03:41:03 instant0279 maldet(2494): {scan} file list completed in 19s, found 82 files...
Sep 03 2026 03:41:03 instant0279 maldet(2494): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Sep 03 2026 03:41:03 instant0279 maldet(2494): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (82 files) in progress...
Sep 03 2026 03:41:15 instant0279 maldet(2494): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/realestateinvestorvisa/index.php
Sep 03 2026 03:41:15 instant0279 maldet(2494): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/realestateinvestorvisa/index.php' to '/usr/local/maldetect/quarantine/index.php.98039703'
Sep 03 2026 03:41:15 instant0279 maldet(2494): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.98039703 no longer exists.
Sep 03 2026 03:41:15 instant0279 maldet(2494): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/bestcitizenshipinvestment/index.php
Sep 03 2026 03:41:15 instant0279 maldet(2494): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/bestcitizenshipinvestment/index.php' to '/usr/local/maldetect/quarantine/index.php.3080019770'
Sep 03 2026 03:41:15 instant0279 maldet(2494): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.3080019770 no longer exists.
Sep 03 2026 03:41:15 instant0279 maldet(2494): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/visabyinvestment/index.php
Sep 03 2026 03:41:15 instant0279 maldet(2494): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/visabyinvestment/index.php' to '/usr/local/maldetect/quarantine/index.php.996824255'
Sep 03 2026 03:41:15 instant0279 maldet(2494): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.996824255 no longer exists.
Sep 03 2026 03:41:15 instant0279 maldet(2494): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 82, malware hits 3, cleaned hits 0, time 52s
Sep 03 2026 03:41:15 instant0279 maldet(2494): {scan} scan report saved, to view run: maldet --report 260903-0340.2494
Sep 03 2026 03:41:15 instant0279 maldet(2494): {alert} sent scan report to [email protected]
Sep 04 2026 04:10:24 instant0279 maldet(19640): {update} checking for available updates...
Sep 04 2026 04:10:24 instant0279 maldet(19640): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Sep 04 2026 04:10:24 instant0279 maldet(19640): {update} hashing install files and checking against server...
Sep 04 2026 04:10:25 instant0279 maldet(19640): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Sep 04 2026 04:10:25 instant0279 maldet(19640): {update} latest version already installed.
Sep 04 2026 04:10:25 instant0279 maldet(20346): {sigup} performing signature update check...
Sep 04 2026 04:10:25 instant0279 maldet(20346): {sigup} local signature set is version 2026052490478
Sep 04 2026 04:10:25 instant0279 maldet(20346): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Sep 04 2026 04:10:25 instant0279 maldet(20346): {sigup} latest signature set already installed
Sep 04 2026 04:10:26 instant0279 maldet(20975): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Sep 04 2026 04:10:46 instant0279 maldet(20975): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Sep 04 2026 04:10:46 instant0279 maldet(20975): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Sep 04 2026 04:10:46 instant0279 maldet(20975): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Sep 04 2026 04:10:46 instant0279 maldet(20975): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Sep 04 2026 04:11:04 instant0279 maldet(20975): {scan} scan returned empty file list; check that path exists, contains files in days range or files in scope of configuration.
Sep 05 2026 03:43:28 instant0279 maldet(23728): {update} checking for available updates...
Sep 05 2026 03:43:39 instant0279 maldet(23728): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Sep 05 2026 03:43:39 instant0279 maldet(23728): {update} hashing install files and checking against server...
Sep 05 2026 03:43:44 instant0279 maldet(23728): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Sep 05 2026 03:43:44 instant0279 maldet(23728): {update} latest version already installed.
Sep 05 2026 03:43:44 instant0279 maldet(25211): {sigup} performing signature update check...
Sep 05 2026 03:43:44 instant0279 maldet(25211): {sigup} local signature set is version 2026052490478
Sep 05 2026 03:43:50 instant0279 maldet(25211): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Sep 05 2026 03:43:50 instant0279 maldet(25211): {sigup} latest signature set already installed
Sep 05 2026 03:43:50 instant0279 maldet(26119): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Sep 05 2026 03:43:50 instant0279 maldet(26119): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Sep 05 2026 03:43:50 instant0279 maldet(26119): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Sep 05 2026 03:43:50 instant0279 maldet(26119): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Sep 05 2026 03:43:50 instant0279 maldet(26119): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Sep 05 2026 03:44:23 instant0279 maldet(26119): {scan} file list completed in 33s, found 62 files...
Sep 05 2026 03:44:23 instant0279 maldet(26119): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Sep 05 2026 03:44:23 instant0279 maldet(26119): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (62 files) in progress...
Sep 05 2026 03:44:33 instant0279 maldet(26119): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/realestateinvestorvisa/index.php
Sep 05 2026 03:44:33 instant0279 maldet(26119): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/realestateinvestorvisa/index.php' to '/usr/local/maldetect/quarantine/index.php.2458412942'
Sep 05 2026 03:44:33 instant0279 maldet(26119): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.2458412942 no longer exists.
Sep 05 2026 03:44:33 instant0279 maldet(26119): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/bestcitizenshipinvestment/index.php
Sep 05 2026 03:44:33 instant0279 maldet(26119): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/bestcitizenshipinvestment/index.php' to '/usr/local/maldetect/quarantine/index.php.1198832277'
Sep 05 2026 03:44:33 instant0279 maldet(26119): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.1198832277 no longer exists.
Sep 05 2026 03:44:33 instant0279 maldet(26119): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/visabyinvestment/index.php
Sep 05 2026 03:44:33 instant0279 maldet(26119): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/visabyinvestment/index.php' to '/usr/local/maldetect/quarantine/index.php.957631220'
Sep 05 2026 03:44:33 instant0279 maldet(26119): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.957631220 no longer exists.
Sep 05 2026 03:44:33 instant0279 maldet(26119): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 62, malware hits 3, cleaned hits 0, time 43s
Sep 05 2026 03:44:33 instant0279 maldet(26119): {scan} scan report saved, to view run: maldet --report 260905-0343.26119
Sep 05 2026 03:44:34 instant0279 maldet(26119): {alert} sent scan report to [email protected]
Sep 06 2026 03:28:23 instant0279 maldet(1007): {update} checking for available updates...
Sep 06 2026 03:28:23 instant0279 maldet(1007): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Sep 06 2026 03:28:23 instant0279 maldet(1007): {update} hashing install files and checking against server...
Sep 06 2026 03:28:24 instant0279 maldet(1007): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Sep 06 2026 03:28:24 instant0279 maldet(1007): {update} latest version already installed.
Sep 06 2026 03:28:24 instant0279 maldet(1732): {sigup} performing signature update check...
Sep 06 2026 03:28:24 instant0279 maldet(1732): {sigup} local signature set is version 2026052490478
Sep 06 2026 03:28:24 instant0279 maldet(1732): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Sep 06 2026 03:28:24 instant0279 maldet(1732): {sigup} latest signature set already installed
Sep 06 2026 03:28:25 instant0279 maldet(2431): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Sep 06 2026 03:28:25 instant0279 maldet(2431): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Sep 06 2026 03:28:25 instant0279 maldet(2431): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Sep 06 2026 03:28:25 instant0279 maldet(2431): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Sep 06 2026 03:28:25 instant0279 maldet(2431): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Sep 06 2026 03:29:00 instant0279 maldet(2431): {scan} scan returned empty file list; check that path exists, contains files in days range or files in scope of configuration.
Sep 07 2026 03:22:26 instant0279 maldet(9803): {update} checking for available updates...
Sep 07 2026 03:22:26 instant0279 maldet(9803): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Sep 07 2026 03:22:26 instant0279 maldet(9803): {update} hashing install files and checking against server...
Sep 07 2026 03:22:27 instant0279 maldet(9803): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Sep 07 2026 03:22:27 instant0279 maldet(9803): {update} latest version already installed.
Sep 07 2026 03:22:27 instant0279 maldet(10480): {sigup} performing signature update check...
Sep 07 2026 03:22:27 instant0279 maldet(10480): {sigup} local signature set is version 2026052490478
Sep 07 2026 03:22:27 instant0279 maldet(10480): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Sep 07 2026 03:22:27 instant0279 maldet(10480): {sigup} latest signature set already installed
Sep 07 2026 03:22:28 instant0279 maldet(11083): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Sep 07 2026 03:22:28 instant0279 maldet(11083): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Sep 07 2026 03:22:28 instant0279 maldet(11083): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Sep 07 2026 03:22:28 instant0279 maldet(11083): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Sep 07 2026 03:22:28 instant0279 maldet(11083): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Sep 07 2026 03:23:03 instant0279 maldet(11083): {scan} scan returned empty file list; check that path exists, contains files in days range or files in scope of configuration.
Sep 08 2026 03:49:30 instant0279 maldet(4981): {update} checking for available updates...
Sep 08 2026 03:49:30 instant0279 maldet(4981): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Sep 08 2026 03:49:30 instant0279 maldet(4981): {update} hashing install files and checking against server...
Sep 08 2026 03:49:30 instant0279 maldet(4981): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Sep 08 2026 03:49:30 instant0279 maldet(4981): {update} latest version already installed.
Sep 08 2026 03:49:30 instant0279 maldet(5631): {sigup} performing signature update check...
Sep 08 2026 03:49:30 instant0279 maldet(5631): {sigup} local signature set is version 2026052490478
Sep 08 2026 03:49:31 instant0279 maldet(5631): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Sep 08 2026 03:49:31 instant0279 maldet(5631): {sigup} latest signature set already installed
Sep 08 2026 03:49:31 instant0279 maldet(6297): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Sep 08 2026 03:49:31 instant0279 maldet(6297): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Sep 08 2026 03:49:31 instant0279 maldet(6297): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Sep 08 2026 03:49:31 instant0279 maldet(6297): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Sep 08 2026 03:49:31 instant0279 maldet(6297): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Sep 08 2026 03:50:07 instant0279 maldet(6297): {scan} scan returned empty file list; check that path exists, contains files in days range or files in scope of configuration.
Sep 09 2026 03:26:54 instant0279 maldet(8241): {update} checking for available updates...
Sep 09 2026 03:26:55 instant0279 maldet(8241): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Sep 09 2026 03:26:55 instant0279 maldet(8241): {update} hashing install files and checking against server...
Sep 09 2026 03:26:55 instant0279 maldet(8241): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Sep 09 2026 03:26:55 instant0279 maldet(8241): {update} latest version already installed.
Sep 09 2026 03:26:55 instant0279 maldet(8981): {sigup} performing signature update check...
Sep 09 2026 03:26:55 instant0279 maldet(8981): {sigup} local signature set is version 2026052490478
Sep 09 2026 03:26:56 instant0279 maldet(8981): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Sep 09 2026 03:26:56 instant0279 maldet(8981): {sigup} latest signature set already installed
Sep 09 2026 03:26:56 instant0279 maldet(9677): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Sep 09 2026 03:26:56 instant0279 maldet(9677): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Sep 09 2026 03:26:57 instant0279 maldet(9677): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Sep 09 2026 03:26:57 instant0279 maldet(9677): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Sep 09 2026 03:26:57 instant0279 maldet(9677): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Sep 09 2026 03:27:32 instant0279 maldet(9677): {scan} file list completed in 35s, found 4877 files...
Sep 09 2026 03:27:32 instant0279 maldet(9677): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Sep 09 2026 03:27:32 instant0279 maldet(9677): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (4877 files) in progress...
Sep 09 2026 03:29:51 instant0279 maldet(9677): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/realestateinvestorvisa/index.php
Sep 09 2026 03:29:51 instant0279 maldet(9677): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/realestateinvestorvisa/index.php' to '/usr/local/maldetect/quarantine/index.php.2055215437'
Sep 09 2026 03:29:51 instant0279 maldet(9677): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.2055215437 no longer exists.
Sep 09 2026 03:29:51 instant0279 maldet(9677): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/bestcitizenshipinvestment/index.php
Sep 09 2026 03:29:51 instant0279 maldet(9677): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/bestcitizenshipinvestment/index.php' to '/usr/local/maldetect/quarantine/index.php.3143230836'
Sep 09 2026 03:29:51 instant0279 maldet(9677): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.3143230836 no longer exists.
Sep 09 2026 03:29:51 instant0279 maldet(9677): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/visabyinvestment/index.php
Sep 09 2026 03:29:51 instant0279 maldet(9677): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/visabyinvestment/index.php' to '/usr/local/maldetect/quarantine/index.php.109612805'
Sep 09 2026 03:29:51 instant0279 maldet(9677): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.109612805 no longer exists.
Sep 09 2026 03:29:51 instant0279 maldet(9677): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 4877, malware hits 3, cleaned hits 0, time 175s
Sep 09 2026 03:29:51 instant0279 maldet(9677): {scan} scan report saved, to view run: maldet --report 260909-0326.9677
Sep 09 2026 03:29:51 instant0279 maldet(9677): {alert} sent scan report to [email protected]
Sep 10 2026 03:17:33 instant0279 maldet(15095): {update} checking for available updates...
Sep 10 2026 03:17:33 instant0279 maldet(15095): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Sep 10 2026 03:17:33 instant0279 maldet(15095): {update} hashing install files and checking against server...
Sep 10 2026 03:17:33 instant0279 maldet(15095): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Sep 10 2026 03:17:33 instant0279 maldet(15095): {update} latest version already installed.
Sep 10 2026 03:17:34 instant0279 maldet(15785): {sigup} performing signature update check...
Sep 10 2026 03:17:34 instant0279 maldet(15785): {sigup} local signature set is version 2026052490478
Sep 10 2026 03:17:34 instant0279 maldet(15785): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Sep 10 2026 03:17:34 instant0279 maldet(15785): {sigup} latest signature set already installed
Sep 10 2026 03:17:34 instant0279 maldet(16436): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Sep 10 2026 03:17:54 instant0279 maldet(16436): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Sep 10 2026 03:17:54 instant0279 maldet(16436): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Sep 10 2026 03:17:54 instant0279 maldet(16436): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Sep 10 2026 03:17:54 instant0279 maldet(16436): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Sep 10 2026 03:18:16 instant0279 maldet(16436): {scan} file list completed in 22s, found 85 files...
Sep 10 2026 03:18:16 instant0279 maldet(16436): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Sep 10 2026 03:18:16 instant0279 maldet(16436): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (85 files) in progress...
Sep 10 2026 03:18:27 instant0279 maldet(16436): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/realestateinvestorvisa/index.php
Sep 10 2026 03:18:27 instant0279 maldet(16436): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/realestateinvestorvisa/index.php' to '/usr/local/maldetect/quarantine/index.php.2693311267'
Sep 10 2026 03:18:27 instant0279 maldet(16436): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.2693311267 no longer exists.
Sep 10 2026 03:18:27 instant0279 maldet(16436): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/bestcitizenshipinvestment/index.php
Sep 10 2026 03:18:27 instant0279 maldet(16436): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/bestcitizenshipinvestment/index.php' to '/usr/local/maldetect/quarantine/index.php.1247121748'
Sep 10 2026 03:18:27 instant0279 maldet(16436): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.1247121748 no longer exists.
Sep 10 2026 03:18:27 instant0279 maldet(16436): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/visabyinvestment/index.php
Sep 10 2026 03:18:27 instant0279 maldet(16436): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/visabyinvestment/index.php' to '/usr/local/maldetect/quarantine/index.php.2938911358'
Sep 10 2026 03:18:27 instant0279 maldet(16436): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.2938911358 no longer exists.
Sep 10 2026 03:18:27 instant0279 maldet(16436): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 85, malware hits 3, cleaned hits 0, time 53s
Sep 10 2026 03:18:27 instant0279 maldet(16436): {scan} scan report saved, to view run: maldet --report 260910-0317.16436
Sep 10 2026 03:18:27 instant0279 maldet(16436): {alert} sent scan report to [email protected]
Sep 11 2026 04:03:56 instant0279 maldet(18570): {update} checking for available updates...
Sep 11 2026 04:03:57 instant0279 maldet(18570): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Sep 11 2026 04:03:57 instant0279 maldet(18570): {update} hashing install files and checking against server...
Sep 11 2026 04:03:57 instant0279 maldet(18570): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Sep 11 2026 04:03:57 instant0279 maldet(18570): {update} latest version already installed.
Sep 11 2026 04:03:57 instant0279 maldet(19336): {sigup} performing signature update check...
Sep 11 2026 04:03:57 instant0279 maldet(19336): {sigup} local signature set is version 2026052490478
Sep 11 2026 04:03:58 instant0279 maldet(19336): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Sep 11 2026 04:03:58 instant0279 maldet(19336): {sigup} latest signature set already installed
Sep 11 2026 04:03:58 instant0279 maldet(20047): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Sep 11 2026 04:03:58 instant0279 maldet(20047): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Sep 11 2026 04:03:58 instant0279 maldet(20047): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Sep 11 2026 04:03:58 instant0279 maldet(20047): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Sep 11 2026 04:03:58 instant0279 maldet(20047): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Sep 11 2026 04:04:35 instant0279 maldet(20047): {scan} file list completed in 37s, found 72 files...
Sep 11 2026 04:04:35 instant0279 maldet(20047): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Sep 11 2026 04:04:35 instant0279 maldet(20047): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (72 files) in progress...
Sep 11 2026 04:04:36 instant0279 maldet(20047): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/realestateinvestorvisa/index.php
Sep 11 2026 04:04:36 instant0279 maldet(20047): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/realestateinvestorvisa/index.php' to '/usr/local/maldetect/quarantine/index.php.2828611780'
Sep 11 2026 04:04:36 instant0279 maldet(20047): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.2828611780 no longer exists.
Sep 11 2026 04:04:37 instant0279 maldet(20047): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/bestcitizenshipinvestment/index.php
Sep 11 2026 04:04:37 instant0279 maldet(20047): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/bestcitizenshipinvestment/index.php' to '/usr/local/maldetect/quarantine/index.php.1880515262'
Sep 11 2026 04:04:37 instant0279 maldet(20047): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.1880515262 no longer exists.
Sep 11 2026 04:04:37 instant0279 maldet(20047): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/visabyinvestment/index.php
Sep 11 2026 04:04:37 instant0279 maldet(20047): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/visabyinvestment/index.php' to '/usr/local/maldetect/quarantine/index.php.167353035'
Sep 11 2026 04:04:37 instant0279 maldet(20047): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.167353035 no longer exists.
Sep 11 2026 04:04:37 instant0279 maldet(20047): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 72, malware hits 3, cleaned hits 0, time 39s
Sep 11 2026 04:04:37 instant0279 maldet(20047): {scan} scan report saved, to view run: maldet --report 260911-0403.20047
Sep 11 2026 04:04:37 instant0279 maldet(20047): {alert} sent scan report to [email protected]
Sep 12 2026 03:21:07 instant0279 maldet(13468): {update} checking for available updates...
Sep 12 2026 03:21:07 instant0279 maldet(13468): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Sep 12 2026 03:21:07 instant0279 maldet(13468): {update} hashing install files and checking against server...
Sep 12 2026 03:21:07 instant0279 maldet(13468): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Sep 12 2026 03:21:07 instant0279 maldet(13468): {update} latest version already installed.
Sep 12 2026 03:21:08 instant0279 maldet(14208): {sigup} performing signature update check...
Sep 12 2026 03:21:08 instant0279 maldet(14208): {sigup} local signature set is version 2026052490478
Sep 12 2026 03:21:08 instant0279 maldet(14208): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Sep 12 2026 03:21:08 instant0279 maldet(14208): {sigup} latest signature set already installed
Sep 12 2026 03:21:08 instant0279 maldet(14939): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Sep 12 2026 03:21:09 instant0279 maldet(14939): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Sep 12 2026 03:21:09 instant0279 maldet(14939): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Sep 12 2026 03:21:09 instant0279 maldet(14939): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Sep 12 2026 03:21:09 instant0279 maldet(14939): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Sep 12 2026 03:21:43 instant0279 maldet(14939): {scan} file list completed in 34s, found 77 files...
Sep 12 2026 03:21:43 instant0279 maldet(14939): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Sep 12 2026 03:21:43 instant0279 maldet(14939): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (77 files) in progress...
Sep 12 2026 03:21:56 instant0279 maldet(14939): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/realestateinvestorvisa/index.php
Sep 12 2026 03:21:56 instant0279 maldet(14939): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/realestateinvestorvisa/index.php' to '/usr/local/maldetect/quarantine/index.php.2100618998'
Sep 12 2026 03:21:56 instant0279 maldet(14939): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.2100618998 no longer exists.
Sep 12 2026 03:21:56 instant0279 maldet(14939): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/bestcitizenshipinvestment/index.php
Sep 12 2026 03:21:56 instant0279 maldet(14939): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/bestcitizenshipinvestment/index.php' to '/usr/local/maldetect/quarantine/index.php.2341021771'
Sep 12 2026 03:21:56 instant0279 maldet(14939): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.2341021771 no longer exists.
Sep 12 2026 03:21:56 instant0279 maldet(14939): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/visabyinvestment/index.php
Sep 12 2026 03:21:56 instant0279 maldet(14939): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/visabyinvestment/index.php' to '/usr/local/maldetect/quarantine/index.php.82714141'
Sep 12 2026 03:21:56 instant0279 maldet(14939): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.82714141 no longer exists.
Sep 12 2026 03:21:56 instant0279 maldet(14939): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 77, malware hits 3, cleaned hits 0, time 48s
Sep 12 2026 03:21:56 instant0279 maldet(14939): {scan} scan report saved, to view run: maldet --report 260912-0321.14939
Sep 12 2026 03:21:56 instant0279 maldet(14939): {alert} sent scan report to [email protected]
Sep 13 2026 03:51:32 instant0279 maldet(19148): {update} checking for available updates...
Sep 13 2026 03:51:33 instant0279 maldet(19148): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Sep 13 2026 03:51:33 instant0279 maldet(19148): {update} hashing install files and checking against server...
Sep 13 2026 03:51:33 instant0279 maldet(19148): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Sep 13 2026 03:51:33 instant0279 maldet(19148): {update} latest version already installed.
Sep 13 2026 03:51:34 instant0279 maldet(19965): {sigup} performing signature update check...
Sep 13 2026 03:51:34 instant0279 maldet(19965): {sigup} local signature set is version 2026052490478
Sep 13 2026 03:51:34 instant0279 maldet(19965): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Sep 13 2026 03:51:34 instant0279 maldet(19965): {sigup} latest signature set already installed
Sep 13 2026 03:51:35 instant0279 maldet(20705): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Sep 13 2026 03:51:35 instant0279 maldet(20705): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Sep 13 2026 03:51:35 instant0279 maldet(20705): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Sep 13 2026 03:51:35 instant0279 maldet(20705): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Sep 13 2026 03:51:35 instant0279 maldet(20705): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Sep 13 2026 03:52:13 instant0279 maldet(20705): {scan} file list completed in 38s, found 89 files...
Sep 13 2026 03:52:13 instant0279 maldet(20705): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Sep 13 2026 03:52:13 instant0279 maldet(20705): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (89 files) in progress...
Sep 13 2026 03:52:26 instant0279 maldet(20705): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/realestateinvestorvisa/index.php
Sep 13 2026 03:52:26 instant0279 maldet(20705): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/realestateinvestorvisa/index.php' to '/usr/local/maldetect/quarantine/index.php.267983051'
Sep 13 2026 03:52:26 instant0279 maldet(20705): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.267983051 no longer exists.
Sep 13 2026 03:52:26 instant0279 maldet(20705): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/bestcitizenshipinvestment/index.php
Sep 13 2026 03:52:26 instant0279 maldet(20705): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/bestcitizenshipinvestment/index.php' to '/usr/local/maldetect/quarantine/index.php.412811588'
Sep 13 2026 03:52:26 instant0279 maldet(20705): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.412811588 no longer exists.
Sep 13 2026 03:52:27 instant0279 maldet(20705): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/visabyinvestment/index.php
Sep 13 2026 03:52:27 instant0279 maldet(20705): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/visabyinvestment/index.php' to '/usr/local/maldetect/quarantine/index.php.105021269'
Sep 13 2026 03:52:27 instant0279 maldet(20705): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.105021269 no longer exists.
Sep 13 2026 03:52:27 instant0279 maldet(20705): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 89, malware hits 3, cleaned hits 0, time 52s
Sep 13 2026 03:52:27 instant0279 maldet(20705): {scan} scan report saved, to view run: maldet --report 260913-0351.20705
Sep 13 2026 03:52:27 instant0279 maldet(20705): {alert} sent scan report to [email protected]
Sep 14 2026 03:55:37 instant0279 maldet(14194): {update} checking for available updates...
Sep 14 2026 03:55:37 instant0279 maldet(14194): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Sep 14 2026 03:55:37 instant0279 maldet(14194): {update} hashing install files and checking against server...
Sep 14 2026 03:55:38 instant0279 maldet(14194): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Sep 14 2026 03:55:38 instant0279 maldet(14194): {update} latest version already installed.
Sep 14 2026 03:55:38 instant0279 maldet(14961): {sigup} performing signature update check...
Sep 14 2026 03:55:38 instant0279 maldet(14961): {sigup} local signature set is version 2026052490478
Sep 14 2026 03:55:38 instant0279 maldet(14961): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Sep 14 2026 03:55:38 instant0279 maldet(14961): {sigup} latest signature set already installed
Sep 14 2026 03:55:39 instant0279 maldet(15660): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Sep 14 2026 03:55:39 instant0279 maldet(15660): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Sep 14 2026 03:55:39 instant0279 maldet(15660): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Sep 14 2026 03:55:39 instant0279 maldet(15660): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Sep 14 2026 03:55:39 instant0279 maldet(15660): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Sep 14 2026 03:56:16 instant0279 maldet(15660): {scan} file list completed in 37s, found 70 files...
Sep 14 2026 03:56:16 instant0279 maldet(15660): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Sep 14 2026 03:56:16 instant0279 maldet(15660): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (70 files) in progress...
Sep 14 2026 03:56:31 instant0279 maldet(15660): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/realestateinvestorvisa/index.php
Sep 14 2026 03:56:31 instant0279 maldet(15660): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/realestateinvestorvisa/index.php' to '/usr/local/maldetect/quarantine/index.php.116658993'
Sep 14 2026 03:56:31 instant0279 maldet(15660): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.116658993 no longer exists.
Sep 14 2026 03:56:31 instant0279 maldet(15660): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/bestcitizenshipinvestment/index.php
Sep 14 2026 03:56:31 instant0279 maldet(15660): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/bestcitizenshipinvestment/index.php' to '/usr/local/maldetect/quarantine/index.php.2269521954'
Sep 14 2026 03:56:31 instant0279 maldet(15660): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.2269521954 no longer exists.
Sep 14 2026 03:56:31 instant0279 maldet(15660): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/visabyinvestment/index.php
Sep 14 2026 03:56:31 instant0279 maldet(15660): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/visabyinvestment/index.php' to '/usr/local/maldetect/quarantine/index.php.2628414384'
Sep 14 2026 03:56:31 instant0279 maldet(15660): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.2628414384 no longer exists.
Sep 14 2026 03:56:31 instant0279 maldet(15660): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 70, malware hits 3, cleaned hits 0, time 52s
Sep 14 2026 03:56:31 instant0279 maldet(15660): {scan} scan report saved, to view run: maldet --report 260914-0355.15660
Sep 14 2026 03:56:32 instant0279 maldet(15660): {alert} sent scan report to [email protected]
Sep 15 2026 03:47:08 instant0279 maldet(7500): {update} checking for available updates...
Sep 15 2026 03:47:08 instant0279 maldet(7500): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Sep 15 2026 03:47:08 instant0279 maldet(7500): {update} hashing install files and checking against server...
Sep 15 2026 03:47:08 instant0279 maldet(7500): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Sep 15 2026 03:47:08 instant0279 maldet(7500): {update} latest version already installed.
Sep 15 2026 03:47:09 instant0279 maldet(8305): {sigup} performing signature update check...
Sep 15 2026 03:47:09 instant0279 maldet(8305): {sigup} local signature set is version 2026052490478
Sep 15 2026 03:47:09 instant0279 maldet(8305): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Sep 15 2026 03:47:09 instant0279 maldet(8305): {sigup} latest signature set already installed
Sep 15 2026 03:47:10 instant0279 maldet(9052): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Sep 15 2026 03:47:10 instant0279 maldet(9052): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Sep 15 2026 03:47:10 instant0279 maldet(9052): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Sep 15 2026 03:47:10 instant0279 maldet(9052): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Sep 15 2026 03:47:10 instant0279 maldet(9052): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Sep 15 2026 03:47:45 instant0279 maldet(9052): {scan} file list completed in 35s, found 125 files...
Sep 15 2026 03:47:45 instant0279 maldet(9052): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Sep 15 2026 03:47:45 instant0279 maldet(9052): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (125 files) in progress...
Sep 15 2026 03:48:09 instant0279 maldet(9052): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/realestateinvestorvisa/index.php
Sep 15 2026 03:48:09 instant0279 maldet(9052): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/realestateinvestorvisa/index.php' to '/usr/local/maldetect/quarantine/index.php.1414716433'
Sep 15 2026 03:48:09 instant0279 maldet(9052): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.1414716433 no longer exists.
Sep 15 2026 03:48:09 instant0279 maldet(9052): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/realestateinvestorvisa/index.php0
Sep 15 2026 03:48:09 instant0279 maldet(9052): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/realestateinvestorvisa/index.php0' to '/usr/local/maldetect/quarantine/index.php0.2924711172'
Sep 15 2026 03:48:09 instant0279 maldet(9052): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php0.2924711172 no longer exists.
Sep 15 2026 03:48:09 instant0279 maldet(9052): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/bestcitizenshipinvestment/index.php
Sep 15 2026 03:48:09 instant0279 maldet(9052): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/bestcitizenshipinvestment/index.php' to '/usr/local/maldetect/quarantine/index.php.91222573'
Sep 15 2026 03:48:09 instant0279 maldet(9052): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.91222573 no longer exists.
Sep 15 2026 03:48:09 instant0279 maldet(9052): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/visabyinvestment/index.php
Sep 15 2026 03:48:09 instant0279 maldet(9052): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/visabyinvestment/index.php' to '/usr/local/maldetect/quarantine/index.php.573318415'
Sep 15 2026 03:48:09 instant0279 maldet(9052): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.573318415 no longer exists.
Sep 15 2026 03:48:09 instant0279 maldet(9052): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 125, malware hits 4, cleaned hits 0, time 59s
Sep 15 2026 03:48:09 instant0279 maldet(9052): {scan} scan report saved, to view run: maldet --report 260915-0347.9052
Sep 15 2026 03:48:09 instant0279 maldet(9052): {alert} sent scan report to [email protected]
Sep 16 2026 03:10:38 instant0279 maldet(26229): {update} checking for available updates...
Sep 16 2026 03:10:38 instant0279 maldet(26229): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Sep 16 2026 03:10:38 instant0279 maldet(26229): {update} hashing install files and checking against server...
Sep 16 2026 03:10:38 instant0279 maldet(26229): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Sep 16 2026 03:10:38 instant0279 maldet(26229): {update} latest version already installed.
Sep 16 2026 03:10:39 instant0279 maldet(27059): {sigup} performing signature update check...
Sep 16 2026 03:10:39 instant0279 maldet(27059): {sigup} local signature set is version 2026052490478
Sep 16 2026 03:10:39 instant0279 maldet(27059): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Sep 16 2026 03:10:39 instant0279 maldet(27059): {sigup} latest signature set already installed
Sep 16 2026 03:10:40 instant0279 maldet(27861): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Sep 16 2026 03:10:40 instant0279 maldet(27861): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Sep 16 2026 03:10:40 instant0279 maldet(27861): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Sep 16 2026 03:10:40 instant0279 maldet(27861): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Sep 16 2026 03:10:40 instant0279 maldet(27861): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Sep 16 2026 03:11:14 instant0279 maldet(27861): {scan} file list completed in 34s, found 107 files...
Sep 16 2026 03:11:14 instant0279 maldet(27861): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Sep 16 2026 03:11:14 instant0279 maldet(27861): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (107 files) in progress...
Sep 16 2026 03:11:54 instant0279 maldet(27861): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/realestateinvestorvisa/index.php
Sep 16 2026 03:11:54 instant0279 maldet(27861): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/realestateinvestorvisa/index.php' to '/usr/local/maldetect/quarantine/index.php.86831010'
Sep 16 2026 03:11:54 instant0279 maldet(27861): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.86831010 no longer exists.
Sep 16 2026 03:11:54 instant0279 maldet(27861): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/bestcitizenshipinvestment/index.php
Sep 16 2026 03:11:54 instant0279 maldet(27861): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/bestcitizenshipinvestment/index.php' to '/usr/local/maldetect/quarantine/index.php.1036030853'
Sep 16 2026 03:11:54 instant0279 maldet(27861): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.1036030853 no longer exists.
Sep 16 2026 03:11:54 instant0279 maldet(27861): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/visabyinvestment/index.php
Sep 16 2026 03:11:54 instant0279 maldet(27861): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/visabyinvestment/index.php' to '/usr/local/maldetect/quarantine/index.php.368513824'
Sep 16 2026 03:11:54 instant0279 maldet(27861): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.368513824 no longer exists.
Sep 16 2026 03:11:54 instant0279 maldet(27861): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 107, malware hits 3, cleaned hits 0, time 74s
Sep 16 2026 03:11:54 instant0279 maldet(27861): {scan} scan report saved, to view run: maldet --report 260916-0310.27861
Sep 16 2026 03:11:54 instant0279 maldet(27861): {alert} sent scan report to [email protected]
Sep 17 2026 03:24:04 instant0279 maldet(17733): {update} checking for available updates...
Sep 17 2026 03:24:05 instant0279 maldet(17733): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Sep 17 2026 03:24:05 instant0279 maldet(17733): {update} hashing install files and checking against server...
Sep 17 2026 03:24:05 instant0279 maldet(17733): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Sep 17 2026 03:24:05 instant0279 maldet(17733): {update} latest version already installed.
Sep 17 2026 03:24:05 instant0279 maldet(18667): {sigup} performing signature update check...
Sep 17 2026 03:24:05 instant0279 maldet(18667): {sigup} local signature set is version 2026052490478
Sep 17 2026 03:24:06 instant0279 maldet(18667): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Sep 17 2026 03:24:06 instant0279 maldet(18667): {sigup} latest signature set already installed
Sep 17 2026 03:24:07 instant0279 maldet(19487): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Sep 17 2026 03:24:08 instant0279 maldet(19487): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Sep 17 2026 03:24:08 instant0279 maldet(19487): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Sep 17 2026 03:24:08 instant0279 maldet(19487): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Sep 17 2026 03:24:08 instant0279 maldet(19487): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Sep 17 2026 03:24:55 instant0279 maldet(19487): {scan} file list completed in 47s, found 405 files...
Sep 17 2026 03:24:55 instant0279 maldet(19487): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Sep 17 2026 03:24:55 instant0279 maldet(19487): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (405 files) in progress...
Sep 17 2026 03:25:22 instant0279 maldet(19487): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/realestateinvestorvisa/index.php
Sep 17 2026 03:25:22 instant0279 maldet(19487): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/realestateinvestorvisa/index.php' to '/usr/local/maldetect/quarantine/index.php.1687027892'
Sep 17 2026 03:25:22 instant0279 maldet(19487): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.1687027892 no longer exists.
Sep 17 2026 03:25:22 instant0279 maldet(19487): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/bestcitizenshipinvestment/index.php
Sep 17 2026 03:25:22 instant0279 maldet(19487): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/bestcitizenshipinvestment/index.php' to '/usr/local/maldetect/quarantine/index.php.192720978'
Sep 17 2026 03:25:22 instant0279 maldet(19487): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.192720978 no longer exists.
Sep 17 2026 03:25:23 instant0279 maldet(19487): {hit} malware hit {HEX}php.generic.malware.508 found for /home/ptgoldenvisa/public_html/visabyinvestment/index.php
Sep 17 2026 03:25:23 instant0279 maldet(19487): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/visabyinvestment/index.php' to '/usr/local/maldetect/quarantine/index.php.73159669'
Sep 17 2026 03:25:23 instant0279 maldet(19487): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.73159669 no longer exists.
Sep 17 2026 03:25:23 instant0279 maldet(19487): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 405, malware hits 3, cleaned hits 0, time 76s
Sep 17 2026 03:25:23 instant0279 maldet(19487): {scan} scan report saved, to view run: maldet --report 260917-0324.19487
Sep 17 2026 03:25:23 instant0279 maldet(19487): {alert} sent scan report to [email protected]
Sep 18 2026 03:28:07 instant0279 maldet(8167): {update} checking for available updates...
Sep 18 2026 03:28:07 instant0279 maldet(8167): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Sep 18 2026 03:28:07 instant0279 maldet(8167): {update} hashing install files and checking against server...
Sep 18 2026 03:28:08 instant0279 maldet(8167): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Sep 18 2026 03:28:08 instant0279 maldet(8167): {update} latest version already installed.
Sep 18 2026 03:28:08 instant0279 maldet(8938): {sigup} performing signature update check...
Sep 18 2026 03:28:08 instant0279 maldet(8938): {sigup} local signature set is version 2026052490478
Sep 18 2026 03:28:08 instant0279 maldet(8938): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Sep 18 2026 03:28:08 instant0279 maldet(8938): {sigup} latest signature set already installed
Sep 18 2026 03:28:09 instant0279 maldet(9637): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Sep 18 2026 03:28:09 instant0279 maldet(9637): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Sep 18 2026 03:28:09 instant0279 maldet(9637): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Sep 18 2026 03:28:09 instant0279 maldet(9637): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Sep 18 2026 03:28:09 instant0279 maldet(9637): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Sep 18 2026 03:28:43 instant0279 maldet(9637): {scan} file list completed in 34s, found 18510 files...
Sep 18 2026 03:28:43 instant0279 maldet(9637): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Sep 18 2026 03:28:43 instant0279 maldet(9637): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (18510 files) in progress...
Sep 18 2026 03:36:41 instant0279 maldet(9637): {hit} malware hit {HEX}php.generic.malware.508 found for /home/tempovalido/public_html/wp-content__b2671d0/index.php
Sep 18 2026 03:36:41 instant0279 maldet(9637): {quar} malware quarantined from '/home/tempovalido/public_html/wp-content__b2671d0/index.php' to '/usr/local/maldetect/quarantine/index.php.171725129'
Sep 18 2026 03:36:41 instant0279 maldet(9637): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.171725129 no longer exists.
Sep 18 2026 03:36:41 instant0279 maldet(9637): {hit} malware hit {HEX}php.inject.generic.564 found for /home/tempovalido/public_html/wp-content__b2671d0/plugins/galex_63be1e30/admin.php
Sep 18 2026 03:36:41 instant0279 maldet(9637): {quar} malware quarantined from '/home/tempovalido/public_html/wp-content__b2671d0/plugins/galex_63be1e30/admin.php' to '/usr/local/maldetect/quarantine/admin.php.197428075'
Sep 18 2026 03:36:41 instant0279 maldet(9637): {clean} could not find clean rule for hit php.inject.generic or file /usr/local/maldetect/quarantine/admin.php.197428075 no longer exists.
Sep 18 2026 03:36:41 instant0279 maldet(9637): {hit} malware hit {HEX}php.generic.malware.508 found for /home/tempovalido/public_html/wp-admin__b2671d0/index.php
Sep 18 2026 03:36:41 instant0279 maldet(9637): {quar} malware quarantined from '/home/tempovalido/public_html/wp-admin__b2671d0/index.php' to '/usr/local/maldetect/quarantine/index.php.3273022425'
Sep 18 2026 03:36:41 instant0279 maldet(9637): {clean} could not find clean rule for hit php.generic.malware or file /usr/local/maldetect/quarantine/index.php.3273022425 no longer exists.
Sep 18 2026 03:36:41 instant0279 maldet(9637): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 18510, malware hits 3, cleaned hits 0, time 512s
Sep 18 2026 03:36:41 instant0279 maldet(9637): {scan} scan report saved, to view run: maldet --report 260918-0328.9637
Sep 18 2026 03:36:41 instant0279 maldet(9637): {alert} sent scan report to [email protected]
Sep 19 2026 03:45:57 instant0279 maldet(11866): {update} checking for available updates...
Sep 19 2026 03:45:57 instant0279 maldet(11866): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Sep 19 2026 03:45:57 instant0279 maldet(11866): {update} hashing install files and checking against server...
Sep 19 2026 03:45:57 instant0279 maldet(11866): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Sep 19 2026 03:45:57 instant0279 maldet(11866): {update} latest version already installed.
Sep 19 2026 03:45:58 instant0279 maldet(12620): {sigup} performing signature update check...
Sep 19 2026 03:45:58 instant0279 maldet(12620): {sigup} local signature set is version 2026052490478
Sep 19 2026 03:45:58 instant0279 maldet(12620): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Sep 19 2026 03:45:58 instant0279 maldet(12620): {sigup} latest signature set already installed
Sep 19 2026 03:45:58 instant0279 maldet(13265): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Sep 19 2026 03:45:59 instant0279 maldet(13265): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Sep 19 2026 03:45:59 instant0279 maldet(13265): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Sep 19 2026 03:45:59 instant0279 maldet(13265): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Sep 19 2026 03:45:59 instant0279 maldet(13265): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Sep 19 2026 03:46:33 instant0279 maldet(13265): {scan} file list completed in 34s, found 418 files...
Sep 19 2026 03:46:33 instant0279 maldet(13265): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Sep 19 2026 03:46:33 instant0279 maldet(13265): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (418 files) in progress...
Sep 19 2026 03:47:36 instant0279 maldet(13265): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 418, malware hits 0, cleaned hits 0, time 98s
Sep 19 2026 03:47:36 instant0279 maldet(13265): {scan} scan report saved, to view run: maldet --report 260919-0345.13265
Sep 20 2026 03:42:54 instant0279 maldet(24226): {update} checking for available updates...
Sep 20 2026 03:42:54 instant0279 maldet(24226): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Sep 20 2026 03:42:54 instant0279 maldet(24226): {update} hashing install files and checking against server...
Sep 20 2026 03:42:54 instant0279 maldet(24226): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Sep 20 2026 03:42:54 instant0279 maldet(24226): {update} latest version already installed.
Sep 20 2026 03:42:55 instant0279 maldet(24992): {sigup} performing signature update check...
Sep 20 2026 03:42:55 instant0279 maldet(24992): {sigup} local signature set is version 2026052490478
Sep 20 2026 03:42:55 instant0279 maldet(24992): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Sep 20 2026 03:42:55 instant0279 maldet(24992): {sigup} latest signature set already installed
Sep 20 2026 03:42:55 instant0279 maldet(25756): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Sep 20 2026 03:42:56 instant0279 maldet(25756): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Sep 20 2026 03:42:56 instant0279 maldet(25756): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Sep 20 2026 03:42:56 instant0279 maldet(25756): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Sep 20 2026 03:42:56 instant0279 maldet(25756): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Sep 20 2026 03:43:32 instant0279 maldet(25756): {scan} file list completed in 36s, found 72 files...
Sep 20 2026 03:43:32 instant0279 maldet(25756): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Sep 20 2026 03:43:32 instant0279 maldet(25756): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (72 files) in progress...
Sep 20 2026 03:43:36 instant0279 maldet(25756): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 72, malware hits 0, cleaned hits 0, time 41s
Sep 20 2026 03:43:36 instant0279 maldet(25756): {scan} scan report saved, to view run: maldet --report 260920-0342.25756
Sep 21 2026 03:30:06 instant0279 maldet(3682): {update} checking for available updates...
Sep 21 2026 03:30:06 instant0279 maldet(3682): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Sep 21 2026 03:30:06 instant0279 maldet(3682): {update} hashing install files and checking against server...
Sep 21 2026 03:30:06 instant0279 maldet(3682): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Sep 21 2026 03:30:06 instant0279 maldet(3682): {update} latest version already installed.
Sep 21 2026 03:30:07 instant0279 maldet(4479): {sigup} performing signature update check...
Sep 21 2026 03:30:07 instant0279 maldet(4479): {sigup} local signature set is version 2026052490478
Sep 21 2026 03:30:07 instant0279 maldet(4479): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Sep 21 2026 03:30:07 instant0279 maldet(4479): {sigup} latest signature set already installed
Sep 21 2026 03:30:07 instant0279 maldet(5251): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Sep 21 2026 03:30:08 instant0279 maldet(5251): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Sep 21 2026 03:30:08 instant0279 maldet(5251): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Sep 21 2026 03:30:08 instant0279 maldet(5251): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Sep 21 2026 03:30:08 instant0279 maldet(5251): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Sep 21 2026 03:30:43 instant0279 maldet(5251): {scan} file list completed in 35s, found 240 files...
Sep 21 2026 03:30:43 instant0279 maldet(5251): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Sep 21 2026 03:30:43 instant0279 maldet(5251): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (240 files) in progress...
Sep 21 2026 03:31:02 instant0279 maldet(5251): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 240, malware hits 0, cleaned hits 0, time 55s
Sep 21 2026 03:31:02 instant0279 maldet(5251): {scan} scan report saved, to view run: maldet --report 260921-0330.5251
Sep 22 2026 03:19:56 instant0279 maldet(3924): {update} checking for available updates...
Sep 22 2026 03:19:56 instant0279 maldet(3924): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Sep 22 2026 03:19:56 instant0279 maldet(3924): {update} hashing install files and checking against server...
Sep 22 2026 03:19:56 instant0279 maldet(3924): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Sep 22 2026 03:19:56 instant0279 maldet(3924): {update} latest version already installed.
Sep 22 2026 03:19:57 instant0279 maldet(4594): {sigup} performing signature update check...
Sep 22 2026 03:19:57 instant0279 maldet(4594): {sigup} local signature set is version 2026052490478
Sep 22 2026 03:19:57 instant0279 maldet(4594): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Sep 22 2026 03:19:57 instant0279 maldet(4594): {sigup} latest signature set already installed
Sep 22 2026 03:19:58 instant0279 maldet(5275): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Sep 22 2026 03:19:58 instant0279 maldet(5275): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Sep 22 2026 03:19:58 instant0279 maldet(5275): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Sep 22 2026 03:19:58 instant0279 maldet(5275): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Sep 22 2026 03:19:58 instant0279 maldet(5275): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Sep 22 2026 03:20:33 instant0279 maldet(5275): {scan} file list completed in 35s, found 3932 files...
Sep 22 2026 03:20:33 instant0279 maldet(5275): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Sep 22 2026 03:20:33 instant0279 maldet(5275): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (3932 files) in progress...
Sep 22 2026 03:21:12 instant0279 maldet(5275): {hit} malware hit {HEX}php.generic.globals.500 found for /home/ptgoldenvisa/public_html/laretraiteportugal.com/wp-includes/fqfwnt.php
Sep 22 2026 03:21:12 instant0279 maldet(5275): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/laretraiteportugal.com/wp-includes/fqfwnt.php' to '/usr/local/maldetect/quarantine/fqfwnt.php.136206152'
Sep 22 2026 03:21:12 instant0279 maldet(5275): {clean} could not find clean rule for hit php.generic.globals or file /usr/local/maldetect/quarantine/fqfwnt.php.136206152 no longer exists.
Sep 22 2026 03:21:12 instant0279 maldet(5275): {hit} malware hit {HEX}php.generic.globals.500 found for /home/ptgoldenvisa/public_html/portugaldeveloper.com/wp-includes/ujttpa.php
Sep 22 2026 03:21:12 instant0279 maldet(5275): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/portugaldeveloper.com/wp-includes/ujttpa.php' to '/usr/local/maldetect/quarantine/ujttpa.php.1588215757'
Sep 22 2026 03:21:12 instant0279 maldet(5275): {clean} could not find clean rule for hit php.generic.globals or file /usr/local/maldetect/quarantine/ujttpa.php.1588215757 no longer exists.
Sep 22 2026 03:21:12 instant0279 maldet(5275): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 3932, malware hits 2, cleaned hits 0, time 74s
Sep 22 2026 03:21:12 instant0279 maldet(5275): {scan} scan report saved, to view run: maldet --report 260922-0319.5275
Sep 22 2026 03:21:12 instant0279 maldet(5275): {alert} sent scan report to [email protected]
Sep 23 2026 03:36:33 instant0279 maldet(25688): {update} checking for available updates...
Sep 23 2026 03:36:33 instant0279 maldet(25688): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Sep 23 2026 03:36:33 instant0279 maldet(25688): {update} hashing install files and checking against server...
Sep 23 2026 03:36:33 instant0279 maldet(25688): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Sep 23 2026 03:36:33 instant0279 maldet(25688): {update} latest version already installed.
Sep 23 2026 03:36:34 instant0279 maldet(26337): {sigup} performing signature update check...
Sep 23 2026 03:36:34 instant0279 maldet(26337): {sigup} local signature set is version 2026052490478
Sep 23 2026 03:36:34 instant0279 maldet(26337): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Sep 23 2026 03:36:34 instant0279 maldet(26337): {sigup} latest signature set already installed
Sep 23 2026 03:36:34 instant0279 maldet(26966): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Sep 23 2026 03:36:35 instant0279 maldet(26966): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER)
Sep 23 2026 03:36:35 instant0279 maldet(26966): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Sep 23 2026 03:36:35 instant0279 maldet(26966): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Sep 23 2026 03:36:35 instant0279 maldet(26966): {scan} executed /bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c  -not -perm 000   -not -uid 0 -not -gid 0  
Sep 23 2026 03:37:11 instant0279 maldet(26966): {scan} file list completed in 36s, found 4260 files...
Sep 23 2026 03:37:11 instant0279 maldet(26966): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Sep 23 2026 03:37:11 instant0279 maldet(26966): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (4260 files) in progress...
Sep 23 2026 03:37:51 instant0279 maldet(26966): {hit} malware hit {HEX}php.generic.globals.500 found for /home/ptgoldenvisa/public_html/topportugalproperties.com/wp-includes/zeyalt.php
Sep 23 2026 03:37:51 instant0279 maldet(26966): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/topportugalproperties.com/wp-includes/zeyalt.php' to '/usr/local/maldetect/quarantine/zeyalt.php.308429755'
Sep 23 2026 03:37:51 instant0279 maldet(26966): {clean} could not find clean rule for hit php.generic.globals or file /usr/local/maldetect/quarantine/zeyalt.php.308429755 no longer exists.
Sep 23 2026 03:37:51 instant0279 maldet(26966): {hit} malware hit {HEX}php.generic.globals.500 found for /home/ptgoldenvisa/public_html/topinvestorvisa.com/wp-includes/tdbprn.php
Sep 23 2026 03:37:51 instant0279 maldet(26966): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/topinvestorvisa.com/wp-includes/tdbprn.php' to '/usr/local/maldetect/quarantine/tdbprn.php.2728817184'
Sep 23 2026 03:37:51 instant0279 maldet(26966): {clean} could not find clean rule for hit php.generic.globals or file /usr/local/maldetect/quarantine/tdbprn.php.2728817184 no longer exists.
Sep 23 2026 03:37:51 instant0279 maldet(26966): {hit} malware hit {HEX}php.generic.globals.500 found for /home/ptgoldenvisa/public_html/laretraiteportugal.com/wp-includes/okblte.php
Sep 23 2026 03:37:51 instant0279 maldet(26966): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/laretraiteportugal.com/wp-includes/okblte.php' to '/usr/local/maldetect/quarantine/okblte.php.41605420'
Sep 23 2026 03:37:51 instant0279 maldet(26966): {clean} could not find clean rule for hit php.generic.globals or file /usr/local/maldetect/quarantine/okblte.php.41605420 no longer exists.
Sep 23 2026 03:37:51 instant0279 maldet(26966): {hit} malware hit {HEX}php.generic.globals.500 found for /home/ptgoldenvisa/public_html/portugaldeveloper.com/wp-includes/kdmdwz.php
Sep 23 2026 03:37:51 instant0279 maldet(26966): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/portugaldeveloper.com/wp-includes/kdmdwz.php' to '/usr/local/maldetect/quarantine/kdmdwz.php.142214996'
Sep 23 2026 03:37:51 instant0279 maldet(26966): {clean} could not find clean rule for hit php.generic.globals or file /usr/local/maldetect/quarantine/kdmdwz.php.142214996 no longer exists.
Sep 23 2026 03:37:51 instant0279 maldet(26966): {hit} malware hit {HEX}php.generic.globals.500 found for /home/ptgoldenvisa/public_html/portugalpropertiesnow.com/wp-includes/stbavj.php
Sep 23 2026 03:37:51 instant0279 maldet(26966): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/portugalpropertiesnow.com/wp-includes/stbavj.php' to '/usr/local/maldetect/quarantine/stbavj.php.1691127002'
Sep 23 2026 03:37:51 instant0279 maldet(26966): {clean} could not find clean rule for hit php.generic.globals or file /usr/local/maldetect/quarantine/stbavj.php.1691127002 no longer exists.
Sep 23 2026 03:37:51 instant0279 maldet(26966): {hit} malware hit {HEX}php.generic.globals.500 found for /home/ptgoldenvisa/public_html/secondpassportnow.com/wp-includes/jtbskk.php
Sep 23 2026 03:37:51 instant0279 maldet(26966): {quar} malware quarantined from '/home/ptgoldenvisa/public_html/secondpassportnow.com/wp-includes/jtbskk.php' to '/usr/local/maldetect/quarantine/jtbskk.php.25343751'
Sep 23 2026 03:37:51 instant0279 maldet(26966): {clean} could not find clean rule for hit php.generic.globals or file /usr/local/maldetect/quarantine/jtbskk.php.25343751 no longer exists.
Sep 23 2026 03:37:51 instant0279 maldet(26966): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 4260, malware hits 6, cleaned hits 0, time 77s
Sep 23 2026 03:37:51 instant0279 maldet(26966): {scan} scan report saved, to view run: maldet --report 260923-0336.26966
Sep 23 2026 03:37:51 instant0279 maldet(26966): {alert} sent scan report to [email protected]