ÿØÿà JFIF ÿÛ „ ( %!1!%*+...983,7(-.-
File manager
File manager - Edit - /home/tokomrjk/hijabtrendz.com/scanreport-tokomrjk-2025-06-28T07:43:16.169945.txt.tar
Back
home/tokomrjk/scanreport-tokomrjk-2025-06-28T07:43:16.169945.txt 0000644 00000036627 15165716307 0016761 0 ustar 00 ----------- SCAN REPORT ----------- TimeStamp: Sat, 28 Jun 2025 03:43:18 -0400 (/usr/sbin/cxs --clamdsock /var/clamd --dbreport --defapache nobody --doptions Mv --exploitscan --nofallback --filemax 50000 --noforce --html --ignore /etc/cxs/cxs.ignore.manual --options mMOLfSGchexdnwZDRru --noprobability --qoptions Mv --report /home/tokomrjk/scanreport-tokomrjk-2025-06-28T07:43:16.169945.txt --sizemax 1000000 --ssl --summary --sversionscan --timemax 30 --unofficial --user tokomrjk --virusscan --vmrssmax 2000000 --waitscan 0 --xtra /etc/cxs/cxs.xtra.manual) Scanning /home/tokomrjk: '/home/tokomrjk/.nc_plugin/hidden' # World writeable directory '/home/tokomrjk/aceh1.asikgeng.com/aceh1.asikgeng.com:80.php' # Universal decode regex match = [universal decoder] '/home/tokomrjk/andhrabuzz.com/andhrabuzz.com.php' # Universal decode regex match = [universal decoder] '/home/tokomrjk/andhrabuzz.com/andhrabuzz.com:80.php' # Universal decode regex match = [universal decoder] '/home/tokomrjk/asik2.polaasik.xyz/boosterscript/boosterscript.css' # Universal decode regex match = [universal decoder] '/home/tokomrjk/asik2.polaasik.xyz/nc_assets/nc_assets.css' # Universal decode regex match = [universal decoder] '/home/tokomrjk/asik2.polaasik.xyz/nc_assets/img/featured/featured.css' # Universal decode regex match = [universal decoder] '/home/tokomrjk/asik2.polaasik.xyz/nc_assets/img/featured/600/600.css' # Universal decode regex match = [universal decoder] '/home/tokomrjk/asik2.polaasik.xyz/nc_assets/img/icons/icons.css' # Universal decode regex match = [universal decoder] '/home/tokomrjk/asik2.polaasik.xyz/nc_assets/img/pictograms/150/150.css' # Universal decode regex match = [universal decoder] '/home/tokomrjk/asik3.polaasik.xyz/files/image/HB/HB.css' # Universal decode regex match = [universal decoder] '/home/tokomrjk/asik3.polaasik.xyz/nc_assets/nc_assets.css' # Universal decode regex match = [universal decoder] '/home/tokomrjk/asik3.polaasik.xyz/nc_assets/img/featured/featured.css' # Universal decode regex match = [universal decoder] '/home/tokomrjk/asik3.polaasik.xyz/nc_assets/img/featured/600/600.css' # Universal decode regex match = [universal decoder] '/home/tokomrjk/asik3.polaasik.xyz/nc_assets/img/icons/icons.css' # Universal decode regex match = [universal decoder] '/home/tokomrjk/asik3.polaasik.xyz/nc_assets/img/pictograms/150/150.css' # Universal decode regex match = [universal decoder] '/home/tokomrjk/asikgeng.com/asikgeng.com.php' # Universal decode regex match = [universal decoder] '/home/tokomrjk/asikgeng.com/video/video.php' # Universal decode regex match = [universal decoder] '/home/tokomrjk/ayamgoreng.online/lp/lp.css' # Universal decode regex match = [universal decoder] '/home/tokomrjk/ayamgoreng.online/lp/lp.php' # Universal decode regex match = [universal decoder] '/home/tokomrjk/banten.kasvalid.com/banten.kasvalid.com:80.php' # Universal decode regex match = [universal decoder] '/home/tokomrjk/bawahtanahteam.com/8znju.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 9)]) ClamAV detected virus = [{HEX}php.nested.base64.652.UNOFFICIAL] '/home/tokomrjk/bawahtanahteam.com/cgi-bin/cgi-bin.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 2)]) Decode regex match = [decode regex: 1] '/home/tokomrjk/bawahtanahteam.com/clairvoyancy/rync.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 10)]) Decode regex match = [decode regex: 1] '/home/tokomrjk/bawahtanahteam.com/pre-footer/hx7d16l.php' # Universal decode regex match = [universal decoder] '/home/tokomrjk/bawahtanahteam.com/pre-footer/pre-footer.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 7)]) ClamAV detected virus = [{HEX}php.nested.base64.652.UNOFFICIAL] '/home/tokomrjk/benazirbhutto.org/benazirbhutto.org:80.php' # Universal decode regex match = [universal decoder] '/home/tokomrjk/besiperkasa.xyz/besiperkasa.xyz.php' # Universal decode regex match = [universal decoder] '/home/tokomrjk/besiperkasa.xyz/besiperkasa.xyz:80.php' # Universal decode regex match = [universal decoder] '/home/tokomrjk/bfgcon.com/cgi-bin/jack_cpu_load' # Linux Binary/Executable [application/x-sharedlib] '/home/tokomrjk/bounceclassic.xyz/bounceclassic.xyz:80.php' # Universal decode regex match = [universal decoder] '/home/tokomrjk/cafeland.site/cafeland.site.php' # Universal decode regex match = [universal decoder] '/home/tokomrjk/cuttherope.xyz/cuttherope.xyz.php' # Universal decode regex match = [universal decoder] '/home/tokomrjk/forumeter.com/forumeter.com.php' # Universal decode regex match = [universal decoder] '/home/tokomrjk/fruitninja.info/889/889.php' # Universal decode regex match = [universal decoder] '/home/tokomrjk/galagawars.site/galagawars.site.php' # Universal decode regex match = [universal decoder] '/home/tokomrjk/gardenscapes.store/gardenscapes.store.php' # Universal decode regex match = [universal decoder] '/home/tokomrjk/gowatallo.kasvalid.com/gowatallo.kasvalid.com:80.php' # Universal decode regex match = [universal decoder] '/home/tokomrjk/gowatallo1.kasvalid.com/gowatallo1.kasvalid.com.php' # Universal decode regex match = [universal decoder] '/home/tokomrjk/gray.truewinner.xyz/gray.truewinner.xyz:80.php' # Universal decode regex match = [universal decoder] '/home/tokomrjk/grindhardonline.com/grindhardonline.com.php' # Universal decode regex match = [universal decoder] '/home/tokomrjk/headsoccer.site/headsoccer.site.php' # Universal decode regex match = [universal decoder] '/home/tokomrjk/ikanhias.xyz/cgi-bin/ChildDef.png' # Suspicious image file (hidden script file) '/home/tokomrjk/isogoo.com/isogoo.com.php' # Universal decode regex match = [universal decoder] '/home/tokomrjk/isogoo.com/isogoo.com:80.php' # Universal decode regex match = [universal decoder] '/home/tokomrjk/jajanpretzel.com/jajanpretzel.com:80.php' # Universal decode regex match = [universal decoder] '/home/tokomrjk/jajanpretzel.com/vip/vip.php' # Universal decode regex match = [universal decoder] '/home/tokomrjk/jg.polajosgcr.xyz/files/image/HB/HB.css' # Universal decode regex match = [universal decoder] '/home/tokomrjk/jg.polajosgcr.xyz/nc_assets/img/pictograms/150/150.css' # Universal decode regex match = [universal decoder] '/home/tokomrjk/jogja.jbchampions.com/jogja.jbchampions.com.php' # Universal decode regex match = [universal decoder] '/home/tokomrjk/jogja.jbchampions.com/jogja.jbchampions.com:80.php' # Universal decode regex match = [universal decoder] '/home/tokomrjk/jogja1.jbchampions.com/jogja1.jbchampions.com:80.php' # Universal decode regex match = [universal decoder] '/home/tokomrjk/jos.livedrawjos.com/.well-known/pki-validation/fcea.txt' # Universal decode regex match = [universal decoder] '/home/tokomrjk/jos.livedrawjos.com/admin/fcea.jpg' # Suspicious image file (hidden script file) # Universal decode regex match = [universal decoder] '/home/tokomrjk/jos.livedrawjos.com/assets/fcea.gif' # Suspicious image file (hidden script file) # Universal decode regex match = [universal decoder] '/home/tokomrjk/jos.livedrawjos.com/cgi-bin/fcea.txt' # Universal decode regex match = [universal decoder] '/home/tokomrjk/jos.livedrawjos.com/class/fcea.png' # Suspicious image file (hidden script file) # Universal decode regex match = [universal decoder] '/home/tokomrjk/jos.livedrawjos.com/common/fcea.zip' # Universal decode regex match = [universal decoder] '/home/tokomrjk/jos.livedrawjos.com/css/fcea.zip' # Universal decode regex match = [universal decoder] '/home/tokomrjk/jos.livedrawjos.com/image/fcea.zip' # Universal decode regex match = [universal decoder] '/home/tokomrjk/jos.livedrawjos.com/images/fcea.jpg' # Suspicious image file (hidden script file) # Universal decode regex match = [universal decoder] '/home/tokomrjk/jos.livedrawjos.com/js/fcea.jpg' # Suspicious image file (hidden script file) # Universal decode regex match = [universal decoder] '/home/tokomrjk/jos.livedrawjos.com/log/fcea.gif' # Suspicious image file (hidden script file) # Universal decode regex match = [universal decoder] '/home/tokomrjk/jos.livedrawjos.com/pic/fcea.zip' # Universal decode regex match = [universal decoder] '/home/tokomrjk/jos.livedrawjos.com/picture/fcea.gif' # Suspicious image file (hidden script file) # Universal decode regex match = [universal decoder] '/home/tokomrjk/jos.livedrawjos.com/style/fcea.jpg' # Suspicious image file (hidden script file) # Universal decode regex match = [universal decoder] '/home/tokomrjk/jos.livedrawjos.com/wp-json/wp/index.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P1947]] '/home/tokomrjk/jos1.polajos.xyz/boosterscript/boosterscript.css' # Universal decode regex match = [universal decoder] '/home/tokomrjk/jos1.polajos.xyz/nc_assets/img/featured/600/600.css' # Universal decode regex match = [universal decoder] '/home/tokomrjk/jos1.polajos.xyz/nc_assets/img/pictograms/150/150.css' # Universal decode regex match = [universal decoder] '/home/tokomrjk/jos2.polajos.xyz/nc_assets/img/featured/featured.css' # Universal decode regex match = [universal decoder] '/home/tokomrjk/jos2.polajos.xyz/nc_assets/img/pictograms/150/150.css' # Universal decode regex match = [universal decoder] '/home/tokomrjk/jos3.polajos.xyz/nc_assets/img/featured/600/600.css' # Universal decode regex match = [universal decoder] '/home/tokomrjk/jos3.polajos.xyz/nc_assets/img/pictograms/150/150.css' # Universal decode regex match = [universal decoder] '/home/tokomrjk/jos4.polajos.xyz/files/image/HB/HB.css' # Universal decode regex match = [universal decoder] '/home/tokomrjk/jos4.polajos.xyz/nc_assets/img/pictograms/150/150.css' # Universal decode regex match = [universal decoder] '/home/tokomrjk/josfaction.com/josfaction.com.php' # Universal decode regex match = [universal decoder] '/home/tokomrjk/josrtp.store/boosterscript/index.php' # Universal decode regex match = [universal decoder] '/home/tokomrjk/josrtp.store/files/index.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 2)]) Decode regex match = [decode regex: 1] '/home/tokomrjk/josrtp.store/files/image/index.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 7)]) ClamAV detected virus = [TO-35199.WEBSHELL.wp-pano_php.MD5-89071c7b2e18022f5facb02017708f17.size-94144.UNOFFICIAL] '/home/tokomrjk/josrtp.store/files/image/PG/index.php' # Universal decode regex match = [universal decoder] '/home/tokomrjk/josrtp.store/files/image/provider/index.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 6)]) Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P1729]] '/home/tokomrjk/josrtp.store/nc_assets/css/index.php' # Decode regex match = [decode regex: 1] '/home/tokomrjk/josrtp.store/nc_assets/img/featured/600/cache.php' # Universal decode regex match = [universal decoder] '/home/tokomrjk/josrtp.store/nc_assets/img/pictograms/150/150.css' # Universal decode regex match = [universal decoder] '/home/tokomrjk/kahuripan1.jajanpretzel.com/kahuripan1.jajanpretzel.com.php' # Universal decode regex match = [universal decoder] '/home/tokomrjk/kahuripan1.jajanpretzel.com/kahuripan1.jajanpretzel.com:80.php' # Universal decode regex match = [universal decoder] '/home/tokomrjk/kalingga.xrial.com/kalingga.xrial.com.php' # Universal decode regex match = [universal decoder] '/home/tokomrjk/kas6.polakas.xyz/files/files.php' # Universal decode regex match = [universal decoder] '/home/tokomrjk/kas6.polakas.xyz/files/image/HB/HB.css' # Universal decode regex match = [universal decoder] '/home/tokomrjk/kedaibunga.xyz/kedaibunga.xyz:80.php' # Universal decode regex match = [universal decoder] '/home/tokomrjk/kedaisepeda.xyz/kedaisepeda.xyz:80.php' # Universal decode regex match = [universal decoder] '/home/tokomrjk/kediri.asikgeng.com/kediri.asikgeng.com.php' # Universal decode regex match = [universal decoder] '/home/tokomrjk/kediri.asikgeng.com/kediri.asikgeng.com:80.php' # Universal decode regex match = [universal decoder] '/home/tokomrjk/kediri1.asikgeng.com/kediri1.asikgeng.com:80.php' # Universal decode regex match = [universal decoder] '/home/tokomrjk/kippei.net/kippei.net.php' # Universal decode regex match = [universal decoder] '/home/tokomrjk/kisahseru.com/wp-content/plugins/extendify/app/Shared/Services/PluginDependencies/Forms/Forms.css' # Universal decode regex match = [universal decoder] '/home/tokomrjk/kisahseru.com/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php' # Universal decode regex match = [universal decoder] '/home/tokomrjk/kisahseru.com/wp-content/plugins/onesignal-free-web-push-notifications/v2/onesignal-admin.php' # Universal decode regex match = [universal decoder] '/home/tokomrjk/kisahseru.com/wp-content/plugins/onesignal-free-web-push-notifications/v3/onesignal-admin/onesignal-admin.php' # Universal decode regex match = [universal decoder] '/home/tokomrjk/kutai1.josfaction.com/kutai1.josfaction.com.php' # Universal decode regex match = [universal decoder] '/home/tokomrjk/laundryhebat.xyz/laundryhebat.xyz.php' # Universal decode regex match = [universal decoder] '/home/tokomrjk/laundryhebat.xyz/laundryhebat.xyz:80.php' # Universal decode regex match = [universal decoder] '/home/tokomrjk/laundrykita.xyz/laundrykita.xyz.php' # Universal decode regex match = [universal decoder] '/home/tokomrjk/laundrytbk.xyz/laundrytbk.xyz.php' # Universal decode regex match = [universal decoder] '/home/tokomrjk/laundrytbk.xyz/laundrytbk.xyz:80.php' # Universal decode regex match = [universal decoder] '/home/tokomrjk/ld.livedrawjos889.xyz/wp-json/wp/engine.php' # Universal decode regex match = [universal decoder] '/home/tokomrjk/legendvote.com/.tmb' # World writeable directory '/home/tokomrjk/legendvote.com/wp-content/plugins/litespeed-cache/lib/css_js_min/pathconverter/pathconverter.css' # Universal decode regex match = [universal decoder] '/home/tokomrjk/legendvote.com/wp-content/plugins/wp-file-manager/lib/codemirror/mode/clike/index.html' # Suspicious file type [application/x-c] '/home/tokomrjk/legendvote.com/wp-content/plugins/wp-file-manager/lib/php/editors/ZohoOffice/advisors.png' # Suspicious image file (hidden script file) '/home/tokomrjk/legendvote.com/wp-includes/js/tinymce/skins/btmon' # Linux Binary/Executable [application/x-sharedlib] '/home/tokomrjk/liferesearchacademy.com/archivarix.cms.php' # Universal decode regex match = [universal decoder] '/home/tokomrjk/livedrawjos889.xyz/app.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P1947]] '/home/tokomrjk/livedrawjos889.xyz/.well-known/pki-validation/az.php' # Decode regex match = [decode regex: 1] '/home/tokomrjk/livedrawjos889.xyz/images/index.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 11)]) Decode regex match = [decode regex: 1] '/home/tokomrjk/lp.asikgeng.com/lp.asikgeng.com:80.php' # Universal decode regex match = [universal decoder] '/home/tokomrjk/lp.xrial.com/lp.xrial.com.php' # Universal decode regex match = [universal decoder] '/home/tokomrjk/lp.xrial.com/lp.xrial.com:80.php' # Universal decode regex match = [universal decoder] '/home/tokomrjk/magelang.josfaction.com/magelang.josfaction.com:80.php' # Universal decode regex match = [universal decoder]
| ver. 1.4 |
Github
|
.
| PHP 8.1.34 | Generation time: 2.2 |
proxy
|
phpinfo
|
Settings