1#@!#!123s

file_get_contents 1#@!#!123s
: / home / candxszz /
Filename : scanreport-candxszz-2024-04-18T00:13:39.147983.txt
back
----------- SCAN REPORT -----------
TimeStamp: Wed, 17 Apr 2024 20:13:40 -0400
(/usr/sbin/cxs --clamdsock /var/clamd --dbreport --defapache nobody --doptions Mv --exploitscan --nofallback --filemax 50000 --noforce --html --ignore /tmp/candxszz.nomail --options mMOLfSGchexdnwZDRru --noprobability --qoptions Mv --report /home/candxszz/scanreport-candxszz-2024-04-18T00:13:39.147983.txt --sizemax 1000000 --ssl --summary --sversionscan --timemax 30 --nounofficial --user candxszz --virusscan --vmrssmax 2000000 --waitscan 0 --xtra /etc/cxs/cxs.xtra.manual)


Scanning /home/candxszz:

'/home/candxszz/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/candxszz]

'/home/candxszz/.cagefs/opt/alt/php51/link/conf'
# Symlink to [/opt/alt/php51/etc/php.d]

'/home/candxszz/.cagefs/opt/alt/php52/link/conf'
# Symlink to [/opt/alt/php52/etc/php.d]

'/home/candxszz/.cagefs/opt/alt/php53/link/conf'
# Symlink to [/opt/alt/php53/etc/php.d]

'/home/candxszz/.cagefs/opt/alt/php54/link/conf'
# Symlink to [/opt/alt/php54/etc/php.d]

'/home/candxszz/.cagefs/opt/alt/php55/link/conf'
# Symlink to [/opt/alt/php55/etc/php.d]

'/home/candxszz/.cagefs/opt/alt/php56/link/conf'
# Symlink to [/opt/alt/php56/etc/php.d]

'/home/candxszz/.cagefs/opt/alt/php70/link/conf'
# Symlink to [/opt/alt/php70/etc/php.d]

'/home/candxszz/.cagefs/opt/alt/php71/link/conf'
# Symlink to [/opt/alt/php71/etc/php.d]

'/home/candxszz/.cagefs/opt/alt/php72/link/conf'
# Symlink to [/opt/alt/php72/etc/php.d]

'/home/candxszz/.cagefs/opt/alt/php73/link/conf'
# Symlink to [/opt/alt/php73/etc/php.d]

'/home/candxszz/.cagefs/opt/alt/php74/link/conf'
# Symlink to [/opt/alt/php74/etc/php.d]

'/home/candxszz/.cagefs/opt/alt/php80/link/conf'
# Symlink to [/etc/cl.php.d/alt-php80]

'/home/candxszz/.cagefs/opt/alt/php81/link/conf'
# Symlink to [/opt/alt/php81/etc/php.d]

'/home/candxszz/.cagefs/opt/alt/php82/link/conf'
# Symlink to [/opt/alt/php82/etc/php.d]

'/home/candxszz/.cagefs/opt/alt/php83/link/conf'
# Symlink to [/opt/alt/php83/etc/php.d]

'/home/candxszz/.cagefs/tmp/.s.PGSQL.5432'
# Symlink to [/var/run/postgres/.s.PGSQL.5432]

'/home/candxszz/.cagefs/tmp/mysql.sock'
# Symlink to [/var/lib/mysql/mysql.sock]

'/home/candxszz/.cagefs/tmp/pasted_code_2uNHTP'
# Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P2155]]

'/home/candxszz/.cagefs/tmp/pasted_code_5Jq2NK'
# Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P2155]]

'/home/candxszz/.cagefs/tmp/pasted_code_69nOKn'
# Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P2155]]

'/home/candxszz/.cagefs/tmp/pasted_code_94ZkgN'
# Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P2155]]

'/home/candxszz/.cagefs/tmp/pasted_code_AfsWI0'
# Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P2155]]

'/home/candxszz/.cagefs/tmp/pasted_code_BHmXwG'
# Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P2155]]

'/home/candxszz/.cagefs/tmp/pasted_code_FMAU5R'
# Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P2155]]

'/home/candxszz/.cagefs/tmp/pasted_code_OAOSNa'
# Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P2155]]

'/home/candxszz/.cagefs/tmp/pasted_code_OVJDWC'
# Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P2155]]

'/home/candxszz/.cagefs/tmp/pasted_code_PGxJug'
# Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P2155]]

'/home/candxszz/.cagefs/tmp/pasted_code_TOKAA5'
# Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P2155]]

'/home/candxszz/.cagefs/tmp/pasted_code_bMTw0u'
# Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P2155]]

'/home/candxszz/.cagefs/tmp/pasted_code_cPXYMC'
# Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P2155]]

'/home/candxszz/.cagefs/tmp/pasted_code_cl3XGz'
# Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P2155]]

'/home/candxszz/.cagefs/tmp/pasted_code_fAP469'
# Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P2155]]

'/home/candxszz/.cagefs/tmp/pasted_code_goOOJY'
# Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P2155]]

'/home/candxszz/.cagefs/tmp/pasted_code_jBhqbb'
# Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P2155]]

'/home/candxszz/.cagefs/tmp/pasted_code_nmSWFZ'
# Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P2155]]

'/home/candxszz/.cagefs/tmp/pasted_code_rwBHy9'
# Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P2155]]

'/home/candxszz/.cagefs/tmp/pasted_code_sbduyU'
# Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P2155]]

'/home/candxszz/.cagefs/tmp/pasted_code_uZ0ire'
# Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P2155]]

'/home/candxszz/.cagefs/tmp/pasted_code_wLHwfx'
# Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P2155]]

'/home/candxszz/.cagefs/tmp/pasted_code_yDz1Zt'
# Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P2155]]

'/home/candxszz/.cagefs/tmp/pasted_code_zL218H'
# Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P2155]]

'/home/candxszz/.cagefs/tmp/pasted_code_zPbVCZ'
# Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P2155]]

'/home/candxszz/.cagefs/tmp/pasted_code_zUyhHg'
# Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P2155]]

'/home/candxszz/.cagefs/tmp/phpL3CslP'
# Known exploit = [Fingerprint Match (md5)] [PHP Exploit]

'/home/candxszz/.cagefs/tmp/phpc0JNRv'
# Known exploit = [Fingerprint Match (md5)] [PHP Exploit]

'/home/candxszz/.cagefs/tmp/phpign31g'
# Known exploit = [Fingerprint Match (md5)] [PHP Exploit]

'/home/candxszz/.cagefs/var/cache'
# World writeable directory

'/home/candxszz/.cagefs/var/cache/php-eaccelerator'
# World writeable directory

'/home/candxszz/.cagefs/var/php'
# World writeable directory

'/home/candxszz/.cagefs/var/php/apm'
# World writeable directory

'/home/candxszz/.cagefs/var/php/apm/db'
# World writeable directory

'/home/candxszz/.cagefs/var/run/screen'
# World writeable directory

'/home/candxszz/.nc_plugin/hidden'
# World writeable directory

'/home/candxszz/.trash/aj.php'
# Decode regex match = [decode regex: 1]
# (decoded file [depth: 1]) Decode regex match = [decode regex: 1]
# (decoded file [depth: 2]) Known exploit = [Fingerprint Match (fp)] [PHP cPanel Exploit [P0100]]

'/home/candxszz/.trash/delpaths.php'
# Universal decode regex match = [universal decoder]
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P1900]]

'/home/candxszz/.trash/radio.php'
# Universal decode regex match = [universal decoder]
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P1900]]

'/home/candxszz/candycleansetools.com/admin/css/index.php'
# (decoded file [advanced decoder: 9 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P2014]]

'/home/candxszz/candycleansetools.com/admin/images/index.php'
# Decode regex match = [decode regex: 1]

'/home/candxszz/candycleansetools.com/admin/js/index.php'
# Decode regex match = [decode regex: 1]
# (decoded file [depth: 1]) Decode regex match = [decode regex: 1]
# (decoded file [depth: 2]) Known exploit = [Fingerprint Match (fp)] [PHP cPanel Exploit [P0100]]

'/home/candxszz/candycleansetools.com/admin/js/datatable/credits.php'
# Decode regex match = [decode regex: 1]

'/home/candxszz/candycleansetools.com/cgi-bin/class_api.php'
# Universal decode regex match = [universal decoder]
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P1900]]

'/home/candxszz/candycleansetools.com/css/index.php'
# Universal decode regex match = [universal decoder]
# (decoded file [advanced decoder: 14 (depth: 2)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P2160]]

'/home/candxszz/candycleansetools.com/images/index.php'
# (decoded file [advanced decoder: 14 (depth: 3)]) Known exploit = [Fingerprint Match (fp)] [Hacker Sig Exploit [P2180]]

'/home/candxszz/candycleansetools.com/images/stormy-product/head.php'
# Decode regex match = [decode regex: 1]

'/home/candxszz/candycleansetools.com/images/stormy-product/index.php'
# Universal decode regex match = [universal decoder]
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P1900]]

'/home/candxszz/candycleansetools.com/includes/index.php'
# Universal decode regex match = [universal decoder]
# (decoded file [advanced decoder: 14 (depth: 2)]) Known exploit = [Fingerprint Match (md5)] [PHP exploit]

'/home/candxszz/candycleansetools.com/stripe/index.php'
# (decoded file [advanced decoder: 14 (depth: 2)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P2187]]

'/home/candxszz/candycleansetools.com/stripe/lib/HttpClient/index.php'
# Universal decode regex match = [universal decoder]
# (decoded file [advanced decoder: 14 (depth: 2)]) Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P1930]]

'/home/candxszz/candycleansetools.com/stripe/lib/Issuing/index.php'
# (decoded file [advanced decoder: 14 (depth: 2)]) Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P2212]]

'/home/candxszz/candycleansetools.com/stripe/lib/Radar/index.php'
# (decoded file [advanced decoder: 14 (depth: 2)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1969]]

'/home/candxszz/candycleansetools.com/stripe/lib/Sigma/index.php'
# (decoded file [depth: 1]) Decode regex match = [decode regex: 1]
# Decode regex match = [decode regex: 1]
# (decoded file [depth: 1]) Decode regex match = [decode regex: 1]

'/home/candxszz/candycleansetools.com/stripe/lib/Terminal/index.php'
# Decode regex match = [decode regex: 1]

'/home/candxszz/theawakeningintensive.com/upsell/stripe/lib/ApiOperations/wp-scr1pts.php'
# Universal decode regex match = [universal decoder]
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]]

'/home/candxszz/theawakeningintensive.com/upsell/stripe/lib/Sigma/wp-the1me.php'
# Universal decode regex match = [universal decoder]
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]]

----------- SCAN SUMMARY -----------
Scanned directories: 540
Scanned files: 2163
Ignored items: 13
Suspicious matches: 90
Viruses found: 0
Fingerprint matches: 45
Data scanned: 618.13 MB
Scan peak memory: 386860 kB
Scan time/item: 0.045 sec
Scan time: 121.980 sec