Linux host2.healingcodesinfo.com 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
Apache
Server IP : 69.167.168.125 & Your IP : 216.73.216.208
Domains : 126 Domain
User : christia
Terminal
Auto Root
Create File
Create Folder
Localroot Suggester
Backdoor Destroyer
Readme
/
usr /
local /
maldetect.bk100430 /
Delete
Unzip
Name
Size
Permission
Date
Action
clean
[ DIR ]
drwxr-xr-x
2022-10-11 18:56
cron
[ DIR ]
drwxr-xr-x
2016-05-10 12:26
internals
[ DIR ]
drwxr-xr-x
2025-08-11 07:27
logs
[ DIR ]
drwxr-xr-x
2025-08-10 08:40
pub
[ DIR ]
drwxr-xr-x
2025-08-10 08:38
quarantine
[ DIR ]
drwxr-x---
2025-08-10 08:38
service
[ DIR ]
drwxr-xr-x
2023-04-10 22:45
sess
[ DIR ]
drwxr-x---
2025-08-19 08:09
sigs
[ DIR ]
drwxr-xr-x
2025-08-19 08:09
sigs.old
[ DIR ]
drwxr-xr-x
2025-08-15 08:14
tmp
[ DIR ]
drwxr-xr-x
2025-08-20 07:48
CHANGELOG
47.91
KB
-rw-r--r--
2025-08-10 08:38
COPYING.GPL
17.67
KB
-rw-r--r--
2025-08-10 08:38
README
23.87
KB
-rw-r--r--
2025-08-10 08:38
VERSION
6
B
-rw-r--r--
2025-08-20 07:47
VERSION.hash
64
B
-rw-r--r--
2025-02-26 14:26
conf.maldet
15.18
KB
-rw-r--r--
2025-08-10 08:38
conf.maldet.cron
155
B
-rw-r--r--
2025-08-10 08:38
event_log
632.38
KB
-rw-r--r--
2026-03-31 07:50
hookscan.sh
702
B
-rwxr-xr-x
2017-02-17 18:31
ignore_file_ext
0
B
-rw-r--r--
2025-08-20 07:47
ignore_inotify
201
B
-rw-r--r--
2025-08-20 07:47
ignore_paths
44
B
-rw-r--r--
2025-08-20 07:47
ignore_sigs
0
B
-rw-r--r--
2025-08-20 07:47
maldet
7.47
KB
-rwxr-xr-x
2025-02-26 05:49
maldet.1.gz
3.94
KB
-rw-r--r--
2023-04-10 22:45
modsec.sh
702
B
-rwxr-xr-x
2017-02-17 18:31
monitor_paths
0
B
-rw-r--r--
2025-08-10 08:38
uninstall.sh
1.54
KB
-rwxr-xr-x
2018-08-08 17:15
Save
Rename
Aug 31 2025 03:44:04 host2 maldet(17777): {sigup} performing signature update check... Aug 31 2025 03:44:04 host2 maldet(17777): {sigup} local signature set is version 20250225482944 Aug 31 2025 03:44:04 host2 maldet(17777): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 31 2025 03:44:04 host2 maldet(17777): {sigup} new signature set 202508313398476 available Aug 31 2025 03:44:04 host2 maldet(17777): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Aug 31 2025 03:44:05 host2 maldet(17777): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Aug 31 2025 03:44:05 host2 maldet(17777): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Aug 31 2025 03:44:05 host2 maldet(17777): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Aug 31 2025 03:44:54 host2 maldet(17777): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Aug 31 2025 03:45:47 host2 maldet(17777): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Aug 31 2025 03:45:47 host2 maldet(17777): {sigup} verified md5sum of maldet-sigpack.tgz Aug 31 2025 03:45:47 host2 maldet(17777): {sigup} unpacked and installed maldet-sigpack.tgz Aug 31 2025 03:45:47 host2 maldet(17777): {sigup} unable to verify md5sum of maldet-clean.tgz, please try again or contact proj@rfxn.com Aug 31 2025 03:45:47 host2 maldet(17777): {sigup} signature set update completed Aug 31 2025 03:45:47 host2 maldet(17777): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Aug 31 2025 03:45:47 host2 maldet(17090): {update} completed update v1.6.6 3a1792 => v1.6.6 359d25, running signature updates... Aug 31 2025 03:45:47 host2 maldet(18644): {sigup} performing signature update check... Aug 31 2025 03:45:47 host2 maldet(18644): {sigup} local signature set is version 202508313398476 Aug 31 2025 03:45:47 host2 maldet(18644): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 31 2025 03:45:47 host2 maldet(18644): {sigup} latest signature set already installed Aug 31 2025 03:45:47 host2 maldet(17090): {update} update and config import completed Aug 31 2025 03:45:47 host2 maldet(18736): {sigup} performing signature update check... Aug 31 2025 03:45:47 host2 maldet(18736): {sigup} local signature set is version 202508313398476 Aug 31 2025 03:46:35 host2 maldet(18736): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 31 2025 03:46:35 host2 maldet(18736): {sigup} latest signature set already installed Aug 31 2025 03:46:35 host2 maldet(19295): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 31 2025 03:46:35 host2 maldet(19295): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Aug 31 2025 03:46:35 host2 maldet(19295): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Aug 31 2025 03:46:35 host2 maldet(19295): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 31 2025 03:46:35 host2 maldet(19295): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 31 2025 03:46:42 host2 maldet(19295): {scan} file list completed in 7s, found 109 files... Aug 31 2025 03:46:42 host2 maldet(19295): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Aug 31 2025 03:46:42 host2 maldet(19295): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (109 files) in progress... Aug 31 2025 03:46:49 host2 maldet(19295): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 109, malware hits 0, cleaned hits 0, time 14s Aug 31 2025 03:46:49 host2 maldet(19295): {scan} scan report saved, to view run: maldet --report 250831-0346.19295 Sep 01 2025 03:49:08 host2 maldet(39700): {update} checking for available updates... Sep 01 2025 03:49:38 host2 maldet(39700): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 01 2025 03:49:38 host2 maldet(39700): {update} hashing install files and checking against server... Sep 01 2025 03:50:18 host2 maldet(39700): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 01 2025 03:50:18 host2 maldet(39700): {update} version check shows latest but hash check failed, forcing update... Sep 01 2025 03:50:19 host2 maldet(39700): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz Sep 01 2025 03:51:46 host2 maldet(39700): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz.md5 Sep 01 2025 03:51:46 host2 maldet(39700): {update} unable to verify md5sum of maldetect-current.tar.gz, update failed! Sep 01 2025 03:51:46 host2 maldet(40616): {sigup} performing signature update check... Sep 01 2025 03:51:46 host2 maldet(40616): {sigup} local signature set is version 202508313398476 Sep 01 2025 03:52:06 host2 maldet(40616): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 01 2025 03:52:06 host2 maldet(40616): {sigup} new signature set error code: 522 available Sep 01 2025 03:52:06 host2 maldet(40616): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 01 2025 03:52:06 host2 maldet(40616): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 01 2025 03:52:55 host2 maldet(40616): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Sep 01 2025 03:52:55 host2 maldet(40616): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 01 2025 03:53:23 host2 maldet(40616): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 01 2025 03:54:14 host2 maldet(40616): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Sep 01 2025 03:54:14 host2 maldet(40616): {sigup} unable to verify md5sum of maldet-sigpack.tgz, please try again or contact proj@rfxn.com Sep 01 2025 03:54:14 host2 maldet(40616): {sigup} verified md5sum of maldet-clean.tgz Sep 01 2025 03:54:14 host2 maldet(40616): {sigup} unpacked and installed maldet-clean.tgz Sep 01 2025 03:54:14 host2 maldet(41356): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 01 2025 03:54:14 host2 maldet(41356): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 01 2025 03:54:14 host2 maldet(41356): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 01 2025 03:54:14 host2 maldet(41356): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 01 2025 03:54:14 host2 maldet(41356): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 01 2025 03:54:17 host2 maldet(41356): {scan} file list completed in 3s, found 265 files... Sep 01 2025 03:54:17 host2 maldet(41356): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 01 2025 03:54:17 host2 maldet(41356): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (265 files) in progress... Sep 01 2025 03:54:22 host2 maldet(41356): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 265, malware hits 0, cleaned hits 0, time 8s Sep 01 2025 03:54:22 host2 maldet(41356): {scan} scan report saved, to view run: maldet --report 250901-0354.41356 Sep 02 2025 03:56:57 host2 maldet(88061): {update} checking for available updates... Sep 02 2025 03:56:57 host2 maldet(88061): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 02 2025 03:56:57 host2 maldet(88061): {update} hashing install files and checking against server... Sep 02 2025 03:57:35 host2 maldet(88061): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 02 2025 03:57:35 host2 maldet(88061): {update} latest version already installed. Sep 02 2025 03:57:35 host2 maldet(88410): {sigup} performing signature update check... Sep 02 2025 03:57:35 host2 maldet(88410): {sigup} local signature set is version 202508313398476 Sep 02 2025 03:57:54 host2 maldet(88410): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 02 2025 03:57:54 host2 maldet(88410): {sigup} new signature set error code: 522 available Sep 02 2025 03:57:54 host2 maldet(88410): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 02 2025 03:57:55 host2 maldet(88410): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 02 2025 03:58:43 host2 maldet(88410): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Sep 02 2025 03:58:43 host2 maldet(88410): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 02 2025 03:58:43 host2 maldet(88410): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 02 2025 03:59:31 host2 maldet(88410): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Sep 02 2025 03:59:31 host2 maldet(88410): {sigup} unable to verify md5sum of maldet-sigpack.tgz, please try again or contact proj@rfxn.com Sep 02 2025 03:59:31 host2 maldet(88410): {sigup} unable to verify md5sum of maldet-clean.tgz, please try again or contact proj@rfxn.com Sep 02 2025 03:59:31 host2 maldet(89057): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 02 2025 03:59:31 host2 maldet(89057): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 02 2025 03:59:31 host2 maldet(89057): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 02 2025 03:59:31 host2 maldet(89057): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 02 2025 03:59:31 host2 maldet(89057): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 02 2025 03:59:33 host2 maldet(89057): {scan} file list completed in 2s, found 483 files... Sep 02 2025 03:59:33 host2 maldet(89057): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 02 2025 03:59:33 host2 maldet(89057): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (483 files) in progress... Sep 02 2025 03:59:39 host2 maldet(89057): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 483, malware hits 0, cleaned hits 0, time 8s Sep 02 2025 03:59:39 host2 maldet(89057): {scan} scan report saved, to view run: maldet --report 250902-0359.89057 Sep 03 2025 03:16:53 host2 maldet(3011): {update} checking for available updates... Sep 03 2025 03:16:54 host2 maldet(3011): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 03 2025 03:16:54 host2 maldet(3011): {update} hashing install files and checking against server... Sep 03 2025 03:16:54 host2 maldet(3011): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 03 2025 03:16:54 host2 maldet(3011): {update} latest version already installed. Sep 03 2025 03:16:54 host2 maldet(3122): {sigup} performing signature update check... Sep 03 2025 03:16:54 host2 maldet(3122): {sigup} local signature set is version 202508313398476 Sep 03 2025 03:16:55 host2 maldet(3122): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 03 2025 03:16:55 host2 maldet(3122): {sigup} new signature set 20250901485511 available Sep 03 2025 03:16:55 host2 maldet(3122): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 03 2025 03:16:55 host2 maldet(3122): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 03 2025 03:16:55 host2 maldet(3122): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Sep 03 2025 03:16:55 host2 maldet(3122): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 03 2025 03:16:56 host2 maldet(3122): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 03 2025 03:16:56 host2 maldet(3122): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Sep 03 2025 03:16:56 host2 maldet(3122): {sigup} verified md5sum of maldet-sigpack.tgz Sep 03 2025 03:16:56 host2 maldet(3122): {sigup} unpacked and installed maldet-sigpack.tgz Sep 03 2025 03:16:56 host2 maldet(3122): {sigup} verified md5sum of maldet-clean.tgz Sep 03 2025 03:16:56 host2 maldet(3122): {sigup} unpacked and installed maldet-clean.tgz Sep 03 2025 03:16:56 host2 maldet(3122): {sigup} signature set update completed Sep 03 2025 03:16:56 host2 maldet(3122): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 03 2025 03:16:56 host2 maldet(3332): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 03 2025 03:16:56 host2 maldet(3332): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 03 2025 03:16:56 host2 maldet(3332): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 03 2025 03:16:56 host2 maldet(3332): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 03 2025 03:16:56 host2 maldet(3332): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 03 2025 03:17:02 host2 maldet(3332): {scan} file list completed in 6s, found 140 files... Sep 03 2025 03:17:02 host2 maldet(3332): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 03 2025 03:17:02 host2 maldet(3332): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (140 files) in progress... Sep 03 2025 03:17:11 host2 maldet(3332): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 140, malware hits 0, cleaned hits 0, time 15s Sep 03 2025 03:17:11 host2 maldet(3332): {scan} scan report saved, to view run: maldet --report 250903-0316.3332 Sep 04 2025 04:08:49 host2 maldet(94584): {update} checking for available updates... Sep 04 2025 04:09:18 host2 maldet(94584): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 04 2025 04:09:18 host2 maldet(94584): {update} hashing install files and checking against server... Sep 04 2025 04:09:42 host2 maldet(94584): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 04 2025 04:09:42 host2 maldet(94584): {update} latest version already installed. Sep 04 2025 04:09:42 host2 maldet(94940): {sigup} performing signature update check... Sep 04 2025 04:09:42 host2 maldet(94940): {sigup} local signature set is version 20250901485511 Sep 04 2025 04:10:17 host2 maldet(94940): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 04 2025 04:10:17 host2 maldet(94940): {sigup} new signature set 202509041456714 available Sep 04 2025 04:10:17 host2 maldet(94940): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 04 2025 04:10:42 host2 maldet(94940): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 04 2025 04:11:01 host2 maldet(94940): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Sep 04 2025 04:11:01 host2 maldet(94940): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 04 2025 04:11:32 host2 maldet(94940): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 04 2025 04:12:10 host2 maldet(94940): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Sep 04 2025 04:12:10 host2 maldet(94940): {sigup} unable to verify md5sum of maldet-sigpack.tgz, please try again or contact proj@rfxn.com Sep 04 2025 04:12:10 host2 maldet(94940): {sigup} verified md5sum of maldet-clean.tgz Sep 04 2025 04:12:10 host2 maldet(94940): {sigup} unpacked and installed maldet-clean.tgz Sep 04 2025 04:12:10 host2 maldet(95783): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 04 2025 04:12:11 host2 maldet(95783): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 04 2025 04:12:11 host2 maldet(95783): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 04 2025 04:12:11 host2 maldet(95783): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 04 2025 04:12:11 host2 maldet(95783): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 04 2025 04:12:17 host2 maldet(95783): {scan} file list completed in 6s, found 378 files... Sep 04 2025 04:12:17 host2 maldet(95783): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 04 2025 04:12:17 host2 maldet(95783): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (378 files) in progress... Sep 04 2025 04:12:24 host2 maldet(95783): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 378, malware hits 0, cleaned hits 0, time 14s Sep 04 2025 04:12:24 host2 maldet(95783): {scan} scan report saved, to view run: maldet --report 250904-0412.95783 Sep 05 2025 04:43:26 host2 maldet(7784): {update} checking for available updates... Sep 05 2025 04:43:26 host2 maldet(7784): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 05 2025 04:43:26 host2 maldet(7784): {update} hashing install files and checking against server... Sep 05 2025 04:43:27 host2 maldet(7784): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 05 2025 04:43:27 host2 maldet(7784): {update} latest version already installed. Sep 05 2025 04:43:27 host2 maldet(7899): {sigup} performing signature update check... Sep 05 2025 04:43:27 host2 maldet(7899): {sigup} local signature set is version 20250901485511 Sep 05 2025 04:43:27 host2 maldet(7899): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 05 2025 04:43:27 host2 maldet(7899): {sigup} new signature set 202509041456714 available Sep 05 2025 04:43:27 host2 maldet(7899): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 05 2025 04:43:28 host2 maldet(7899): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 05 2025 04:43:28 host2 maldet(7899): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Sep 05 2025 04:43:28 host2 maldet(7899): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 05 2025 04:43:28 host2 maldet(7899): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 05 2025 04:43:29 host2 maldet(7899): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Sep 05 2025 04:43:29 host2 maldet(7899): {sigup} verified md5sum of maldet-sigpack.tgz Sep 05 2025 04:43:29 host2 maldet(7899): {sigup} unpacked and installed maldet-sigpack.tgz Sep 05 2025 04:43:29 host2 maldet(7899): {sigup} verified md5sum of maldet-clean.tgz Sep 05 2025 04:43:29 host2 maldet(7899): {sigup} unpacked and installed maldet-clean.tgz Sep 05 2025 04:43:29 host2 maldet(7899): {sigup} signature set update completed Sep 05 2025 04:43:29 host2 maldet(7899): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 05 2025 04:43:29 host2 maldet(8127): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 05 2025 04:43:29 host2 maldet(8127): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 05 2025 04:43:29 host2 maldet(8127): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 05 2025 04:43:29 host2 maldet(8127): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 05 2025 04:43:29 host2 maldet(8127): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 05 2025 04:43:37 host2 maldet(8127): {scan} file list completed in 8s, found 164 files... Sep 05 2025 04:43:37 host2 maldet(8127): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 05 2025 04:43:37 host2 maldet(8127): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (164 files) in progress... Sep 05 2025 04:43:44 host2 maldet(8127): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 164, malware hits 0, cleaned hits 0, time 15s Sep 05 2025 04:43:44 host2 maldet(8127): {scan} scan report saved, to view run: maldet --report 250905-0443.8127 Sep 06 2025 03:45:51 host2 maldet(74314): {update} checking for available updates... Sep 06 2025 03:46:21 host2 maldet(74314): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 06 2025 03:46:21 host2 maldet(74314): {update} hashing install files and checking against server... Sep 06 2025 03:47:08 host2 maldet(74314): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 06 2025 03:47:08 host2 maldet(74314): {update} version check shows latest but hash check failed, forcing update... Sep 06 2025 03:47:08 host2 maldet(74314): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz Sep 06 2025 03:47:28 host2 maldet(74314): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz.md5 Sep 06 2025 03:47:28 host2 maldet(74314): {update} unable to verify md5sum of maldetect-current.tar.gz, update failed! Sep 06 2025 03:47:28 host2 maldet(75310): {sigup} performing signature update check... Sep 06 2025 03:47:28 host2 maldet(75310): {sigup} local signature set is version 202509041456714 Sep 06 2025 03:47:28 host2 maldet(75310): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 06 2025 03:47:28 host2 maldet(75310): {sigup} latest signature set already installed Sep 06 2025 03:47:28 host2 maldet(75400): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 06 2025 03:47:29 host2 maldet(75400): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 06 2025 03:47:29 host2 maldet(75400): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 06 2025 03:47:29 host2 maldet(75400): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 06 2025 03:47:29 host2 maldet(75400): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 06 2025 03:47:35 host2 maldet(75400): {scan} file list completed in 6s, found 188 files... Sep 06 2025 03:47:35 host2 maldet(75400): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 06 2025 03:47:35 host2 maldet(75400): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (188 files) in progress... Sep 06 2025 03:47:39 host2 maldet(75400): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 188, malware hits 0, cleaned hits 0, time 11s Sep 06 2025 03:47:39 host2 maldet(75400): {scan} scan report saved, to view run: maldet --report 250906-0347.75400 Sep 07 2025 04:22:37 host2 maldet(58359): {update} checking for available updates... Sep 07 2025 04:23:21 host2 maldet(58359): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 07 2025 04:23:21 host2 maldet(58359): {update} hashing install files and checking against server... Sep 07 2025 04:24:07 host2 maldet(58359): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 07 2025 04:24:07 host2 maldet(58359): {update} version check shows latest but hash check failed, forcing update... Sep 07 2025 04:24:07 host2 maldet(58359): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz Sep 07 2025 04:24:27 host2 maldet(58359): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz.md5 Sep 07 2025 04:24:27 host2 maldet(58359): {update} unable to verify md5sum of maldetect-current.tar.gz, update failed! Sep 07 2025 04:24:27 host2 maldet(59277): {sigup} performing signature update check... Sep 07 2025 04:24:27 host2 maldet(59277): {sigup} local signature set is version 202509041456714 Sep 07 2025 04:25:17 host2 maldet(59277): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 07 2025 04:25:17 host2 maldet(59277): {sigup} new signature set 202509072429773 available Sep 07 2025 04:25:17 host2 maldet(59277): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 07 2025 04:25:50 host2 maldet(59277): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 07 2025 04:26:17 host2 maldet(59277): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Sep 07 2025 04:26:17 host2 maldet(59277): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 07 2025 04:26:17 host2 maldet(59277): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 07 2025 04:27:10 host2 maldet(59277): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Sep 07 2025 04:27:10 host2 maldet(59277): {sigup} verified md5sum of maldet-sigpack.tgz Sep 07 2025 04:27:10 host2 maldet(59277): {sigup} unpacked and installed maldet-sigpack.tgz Sep 07 2025 04:27:10 host2 maldet(59277): {sigup} verified md5sum of maldet-clean.tgz Sep 07 2025 04:27:10 host2 maldet(59277): {sigup} unpacked and installed maldet-clean.tgz Sep 07 2025 04:27:10 host2 maldet(59277): {sigup} signature set update completed Sep 07 2025 04:27:10 host2 maldet(59277): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 07 2025 04:27:10 host2 maldet(60254): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 07 2025 04:27:11 host2 maldet(60254): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 07 2025 04:27:11 host2 maldet(60254): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 07 2025 04:27:11 host2 maldet(60254): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 07 2025 04:27:11 host2 maldet(60254): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 07 2025 04:27:19 host2 maldet(60254): {scan} file list completed in 8s, found 209 files... Sep 07 2025 04:27:19 host2 maldet(60254): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 07 2025 04:27:19 host2 maldet(60254): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (209 files) in progress... Sep 07 2025 04:27:23 host2 maldet(60254): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 209, malware hits 0, cleaned hits 0, time 13s Sep 07 2025 04:27:23 host2 maldet(60254): {scan} scan report saved, to view run: maldet --report 250907-0427.60254 Sep 08 2025 03:32:27 host2 maldet(50815): {update} checking for available updates... Sep 08 2025 03:33:09 host2 maldet(50815): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 08 2025 03:33:09 host2 maldet(50815): {update} hashing install files and checking against server... Sep 08 2025 03:33:54 host2 maldet(50815): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 08 2025 03:33:54 host2 maldet(50815): {update} version check shows latest but hash check failed, forcing update... Sep 08 2025 03:33:54 host2 maldet(50815): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz Sep 08 2025 03:34:41 host2 maldet(50815): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz.md5 Sep 08 2025 03:34:41 host2 maldet(50815): {update} unable to verify md5sum of maldetect-current.tar.gz, update failed! Sep 08 2025 03:34:42 host2 maldet(51828): {sigup} performing signature update check... Sep 08 2025 03:34:42 host2 maldet(51828): {sigup} local signature set is version 202509072429773 Sep 08 2025 03:35:12 host2 maldet(51828): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 08 2025 03:35:12 host2 maldet(51828): {sigup} latest signature set already installed Sep 08 2025 03:35:12 host2 maldet(52205): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 08 2025 03:35:12 host2 maldet(52205): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 08 2025 03:35:12 host2 maldet(52205): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 08 2025 03:35:12 host2 maldet(52205): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 08 2025 03:35:12 host2 maldet(52205): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 08 2025 03:35:17 host2 maldet(52205): {scan} file list completed in 5s, found 212 files... Sep 08 2025 03:35:17 host2 maldet(52205): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 08 2025 03:35:17 host2 maldet(52205): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (212 files) in progress... Sep 08 2025 03:35:22 host2 maldet(52205): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 212, malware hits 0, cleaned hits 0, time 10s Sep 08 2025 03:35:22 host2 maldet(52205): {scan} scan report saved, to view run: maldet --report 250908-0335.52205 Sep 09 2025 04:18:53 host2 maldet(25775): {update} checking for available updates... Sep 09 2025 04:18:53 host2 maldet(25775): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 09 2025 04:18:53 host2 maldet(25775): {update} hashing install files and checking against server... Sep 09 2025 04:18:54 host2 maldet(25775): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 09 2025 04:18:54 host2 maldet(25775): {update} latest version already installed. Sep 09 2025 04:18:54 host2 maldet(25884): {sigup} performing signature update check... Sep 09 2025 04:18:54 host2 maldet(25884): {sigup} local signature set is version 202509072429773 Sep 09 2025 04:18:54 host2 maldet(25884): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 09 2025 04:18:54 host2 maldet(25884): {sigup} latest signature set already installed Sep 09 2025 04:18:54 host2 maldet(25974): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 09 2025 04:18:54 host2 maldet(25974): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 09 2025 04:18:54 host2 maldet(25974): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 09 2025 04:18:54 host2 maldet(25974): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 09 2025 04:18:54 host2 maldet(25974): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 09 2025 04:19:00 host2 maldet(25974): {scan} file list completed in 6s, found 411 files... Sep 09 2025 04:19:00 host2 maldet(25974): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 09 2025 04:19:00 host2 maldet(25974): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (411 files) in progress... Sep 09 2025 04:19:11 host2 maldet(25974): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 411, malware hits 0, cleaned hits 0, time 17s Sep 09 2025 04:19:11 host2 maldet(25974): {scan} scan report saved, to view run: maldet --report 250909-0418.25974 Sep 10 2025 03:59:26 host2 maldet(4757): {update} checking for available updates... Sep 10 2025 03:59:26 host2 maldet(4757): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 10 2025 03:59:26 host2 maldet(4757): {update} hashing install files and checking against server... Sep 10 2025 03:59:27 host2 maldet(4757): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 10 2025 03:59:27 host2 maldet(4757): {update} latest version already installed. Sep 10 2025 03:59:27 host2 maldet(4870): {sigup} performing signature update check... Sep 10 2025 03:59:27 host2 maldet(4870): {sigup} local signature set is version 202509072429773 Sep 10 2025 03:59:27 host2 maldet(4870): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 10 2025 03:59:27 host2 maldet(4870): {sigup} new signature set 202509103407087 available Sep 10 2025 03:59:27 host2 maldet(4870): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 10 2025 03:59:28 host2 maldet(4870): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 10 2025 03:59:28 host2 maldet(4870): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Sep 10 2025 03:59:28 host2 maldet(4870): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 10 2025 03:59:28 host2 maldet(4870): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 10 2025 03:59:28 host2 maldet(4870): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Sep 10 2025 03:59:28 host2 maldet(4870): {sigup} verified md5sum of maldet-sigpack.tgz Sep 10 2025 03:59:29 host2 maldet(4870): {sigup} unpacked and installed maldet-sigpack.tgz Sep 10 2025 03:59:29 host2 maldet(4870): {sigup} verified md5sum of maldet-clean.tgz Sep 10 2025 03:59:29 host2 maldet(4870): {sigup} unpacked and installed maldet-clean.tgz Sep 10 2025 03:59:29 host2 maldet(4870): {sigup} signature set update completed Sep 10 2025 03:59:29 host2 maldet(4870): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 10 2025 03:59:29 host2 maldet(5088): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 10 2025 03:59:29 host2 maldet(5088): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 10 2025 03:59:29 host2 maldet(5088): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 10 2025 03:59:29 host2 maldet(5088): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 10 2025 03:59:29 host2 maldet(5088): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 10 2025 03:59:37 host2 maldet(5088): {scan} file list completed in 8s, found 255 files... Sep 10 2025 03:59:37 host2 maldet(5088): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 10 2025 03:59:37 host2 maldet(5088): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (255 files) in progress... Sep 10 2025 03:59:44 host2 maldet(5088): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 255, malware hits 0, cleaned hits 0, time 15s Sep 10 2025 03:59:44 host2 maldet(5088): {scan} scan report saved, to view run: maldet --report 250910-0359.5088 Sep 11 2025 03:42:13 host2 maldet(81370): {update} checking for available updates... Sep 11 2025 03:42:13 host2 maldet(81370): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 11 2025 03:42:13 host2 maldet(81370): {update} hashing install files and checking against server... Sep 11 2025 03:42:14 host2 maldet(81370): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 11 2025 03:42:14 host2 maldet(81370): {update} latest version already installed. Sep 11 2025 03:42:14 host2 maldet(81482): {sigup} performing signature update check... Sep 11 2025 03:42:14 host2 maldet(81482): {sigup} local signature set is version 202509103407087 Sep 11 2025 03:42:14 host2 maldet(81482): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 11 2025 03:42:14 host2 maldet(81482): {sigup} latest signature set already installed Sep 11 2025 03:42:14 host2 maldet(81571): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 11 2025 03:42:14 host2 maldet(81571): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 11 2025 03:42:14 host2 maldet(81571): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 11 2025 03:42:14 host2 maldet(81571): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 11 2025 03:42:14 host2 maldet(81571): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 11 2025 03:42:22 host2 maldet(81571): {scan} file list completed in 8s, found 340 files... Sep 11 2025 03:42:22 host2 maldet(81571): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 11 2025 03:42:22 host2 maldet(81571): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (340 files) in progress... Sep 11 2025 03:42:31 host2 maldet(81571): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 340, malware hits 0, cleaned hits 0, time 17s Sep 11 2025 03:42:31 host2 maldet(81571): {scan} scan report saved, to view run: maldet --report 250911-0342.81571 Sep 12 2025 04:24:46 host2 maldet(11715): {update} checking for available updates... Sep 12 2025 04:24:46 host2 maldet(11715): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 12 2025 04:24:46 host2 maldet(11715): {update} hashing install files and checking against server... Sep 12 2025 04:24:46 host2 maldet(11715): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 12 2025 04:24:46 host2 maldet(11715): {update} latest version already installed. Sep 12 2025 04:24:46 host2 maldet(11826): {sigup} performing signature update check... Sep 12 2025 04:24:46 host2 maldet(11826): {sigup} local signature set is version 202509103407087 Sep 12 2025 04:24:47 host2 maldet(11826): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 12 2025 04:24:47 host2 maldet(11826): {sigup} latest signature set already installed Sep 12 2025 04:24:47 host2 maldet(11914): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 12 2025 04:24:47 host2 maldet(11914): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 12 2025 04:24:47 host2 maldet(11914): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 12 2025 04:24:47 host2 maldet(11914): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 12 2025 04:24:47 host2 maldet(11914): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 12 2025 04:24:54 host2 maldet(11914): {scan} file list completed in 7s, found 191 files... Sep 12 2025 04:24:54 host2 maldet(11914): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 12 2025 04:24:54 host2 maldet(11914): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (191 files) in progress... Sep 12 2025 04:24:59 host2 maldet(11914): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 191, malware hits 0, cleaned hits 0, time 12s Sep 12 2025 04:24:59 host2 maldet(11914): {scan} scan report saved, to view run: maldet --report 250912-0424.11914 Sep 13 2025 03:58:30 host2 maldet(4590): {update} checking for available updates... Sep 13 2025 03:58:31 host2 maldet(4590): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 13 2025 03:58:31 host2 maldet(4590): {update} hashing install files and checking against server... Sep 13 2025 03:58:31 host2 maldet(4590): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 13 2025 03:58:31 host2 maldet(4590): {update} latest version already installed. Sep 13 2025 03:58:31 host2 maldet(4703): {sigup} performing signature update check... Sep 13 2025 03:58:31 host2 maldet(4703): {sigup} local signature set is version 202509103407087 Sep 13 2025 03:58:31 host2 maldet(4703): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 13 2025 03:58:31 host2 maldet(4703): {sigup} new signature set 20250913184498 available Sep 13 2025 03:58:31 host2 maldet(4703): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 13 2025 03:58:32 host2 maldet(4703): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 13 2025 03:58:32 host2 maldet(4703): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Sep 13 2025 03:58:32 host2 maldet(4703): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 13 2025 03:58:33 host2 maldet(4703): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 13 2025 03:58:33 host2 maldet(4703): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Sep 13 2025 03:58:33 host2 maldet(4703): {sigup} verified md5sum of maldet-sigpack.tgz Sep 13 2025 03:58:33 host2 maldet(4703): {sigup} unpacked and installed maldet-sigpack.tgz Sep 13 2025 03:58:33 host2 maldet(4703): {sigup} verified md5sum of maldet-clean.tgz Sep 13 2025 03:58:33 host2 maldet(4703): {sigup} unpacked and installed maldet-clean.tgz Sep 13 2025 03:58:33 host2 maldet(4703): {sigup} signature set update completed Sep 13 2025 03:58:33 host2 maldet(4703): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 13 2025 03:58:33 host2 maldet(4922): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 13 2025 03:58:33 host2 maldet(4922): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 13 2025 03:58:33 host2 maldet(4922): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 13 2025 03:58:33 host2 maldet(4922): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 13 2025 03:58:33 host2 maldet(4922): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 13 2025 03:58:40 host2 maldet(4922): {scan} file list completed in 7s, found 192 files... Sep 13 2025 03:58:40 host2 maldet(4922): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 13 2025 03:58:40 host2 maldet(4922): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (192 files) in progress... Sep 13 2025 03:58:46 host2 maldet(4922): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 192, malware hits 0, cleaned hits 0, time 13s Sep 13 2025 03:58:46 host2 maldet(4922): {scan} scan report saved, to view run: maldet --report 250913-0358.4922 Sep 14 2025 04:28:17 host2 maldet(18301): {update} checking for available updates... Sep 14 2025 04:28:17 host2 maldet(18301): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 14 2025 04:28:17 host2 maldet(18301): {update} hashing install files and checking against server... Sep 14 2025 04:28:17 host2 maldet(18301): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 14 2025 04:28:17 host2 maldet(18301): {update} latest version already installed. Sep 14 2025 04:28:17 host2 maldet(18410): {sigup} performing signature update check... Sep 14 2025 04:28:17 host2 maldet(18410): {sigup} local signature set is version 20250913184498 Sep 14 2025 04:28:18 host2 maldet(18410): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 14 2025 04:28:18 host2 maldet(18410): {sigup} latest signature set already installed Sep 14 2025 04:28:18 host2 maldet(18499): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 14 2025 04:28:18 host2 maldet(18499): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 14 2025 04:28:18 host2 maldet(18499): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 14 2025 04:28:18 host2 maldet(18499): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 14 2025 04:28:18 host2 maldet(18499): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 14 2025 04:28:26 host2 maldet(18499): {scan} file list completed in 8s, found 355 files... Sep 14 2025 04:28:26 host2 maldet(18499): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 14 2025 04:28:26 host2 maldet(18499): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (355 files) in progress... Sep 14 2025 04:28:30 host2 maldet(18499): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 355, malware hits 0, cleaned hits 0, time 12s Sep 14 2025 04:28:30 host2 maldet(18499): {scan} scan report saved, to view run: maldet --report 250914-0428.18499 Sep 15 2025 04:00:35 host2 maldet(27498): {update} checking for available updates... Sep 15 2025 04:00:35 host2 maldet(27498): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 15 2025 04:00:35 host2 maldet(27498): {update} hashing install files and checking against server... Sep 15 2025 04:00:35 host2 maldet(27498): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 15 2025 04:00:35 host2 maldet(27498): {update} latest version already installed. Sep 15 2025 04:00:35 host2 maldet(27609): {sigup} performing signature update check... Sep 15 2025 04:00:35 host2 maldet(27609): {sigup} local signature set is version 20250913184498 Sep 15 2025 04:00:36 host2 maldet(27609): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 15 2025 04:00:36 host2 maldet(27609): {sigup} latest signature set already installed Sep 15 2025 04:00:36 host2 maldet(27697): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 15 2025 04:00:36 host2 maldet(27697): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 15 2025 04:00:36 host2 maldet(27697): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 15 2025 04:00:36 host2 maldet(27697): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 15 2025 04:00:36 host2 maldet(27697): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 15 2025 04:00:43 host2 maldet(27697): {scan} file list completed in 7s, found 272 files... Sep 15 2025 04:00:43 host2 maldet(27697): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 15 2025 04:00:43 host2 maldet(27697): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (272 files) in progress... Sep 15 2025 04:00:49 host2 maldet(27697): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 272, malware hits 0, cleaned hits 0, time 13s Sep 15 2025 04:00:49 host2 maldet(27697): {scan} scan report saved, to view run: maldet --report 250915-0400.27697 Sep 16 2025 04:10:55 host2 maldet(38727): {update} checking for available updates... Sep 16 2025 04:10:55 host2 maldet(38727): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 16 2025 04:10:55 host2 maldet(38727): {update} hashing install files and checking against server... Sep 16 2025 04:10:55 host2 maldet(38727): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 16 2025 04:10:55 host2 maldet(38727): {update} latest version already installed. Sep 16 2025 04:10:55 host2 maldet(38837): {sigup} performing signature update check... Sep 16 2025 04:10:55 host2 maldet(38837): {sigup} local signature set is version 20250913184498 Sep 16 2025 04:10:56 host2 maldet(38837): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 16 2025 04:10:56 host2 maldet(38837): {sigup} new signature set 202509161155684 available Sep 16 2025 04:10:56 host2 maldet(38837): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 16 2025 04:10:56 host2 maldet(38837): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 16 2025 04:10:56 host2 maldet(38837): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Sep 16 2025 04:10:56 host2 maldet(38837): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 16 2025 04:10:56 host2 maldet(38837): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 16 2025 04:10:57 host2 maldet(38837): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Sep 16 2025 04:10:57 host2 maldet(38837): {sigup} verified md5sum of maldet-sigpack.tgz Sep 16 2025 04:10:57 host2 maldet(38837): {sigup} unpacked and installed maldet-sigpack.tgz Sep 16 2025 04:10:57 host2 maldet(38837): {sigup} verified md5sum of maldet-clean.tgz Sep 16 2025 04:10:57 host2 maldet(38837): {sigup} unpacked and installed maldet-clean.tgz Sep 16 2025 04:10:57 host2 maldet(38837): {sigup} signature set update completed Sep 16 2025 04:10:57 host2 maldet(38837): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 16 2025 04:10:57 host2 maldet(39045): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 16 2025 04:10:57 host2 maldet(39045): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 16 2025 04:10:57 host2 maldet(39045): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 16 2025 04:10:57 host2 maldet(39045): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 16 2025 04:10:57 host2 maldet(39045): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 16 2025 04:11:04 host2 maldet(39045): {scan} file list completed in 7s, found 301 files... Sep 16 2025 04:11:04 host2 maldet(39045): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 16 2025 04:11:04 host2 maldet(39045): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (301 files) in progress... Sep 16 2025 04:11:12 host2 maldet(39045): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 301, malware hits 0, cleaned hits 0, time 15s Sep 16 2025 04:11:12 host2 maldet(39045): {scan} scan report saved, to view run: maldet --report 250916-0410.39045 Sep 17 2025 04:00:15 host2 maldet(14881): {update} checking for available updates... Sep 17 2025 04:00:16 host2 maldet(14881): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 17 2025 04:00:16 host2 maldet(14881): {update} hashing install files and checking against server... Sep 17 2025 04:00:16 host2 maldet(14881): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 17 2025 04:00:16 host2 maldet(14881): {update} latest version already installed. Sep 17 2025 04:00:16 host2 maldet(14990): {sigup} performing signature update check... Sep 17 2025 04:00:16 host2 maldet(14990): {sigup} local signature set is version 202509161155684 Sep 17 2025 04:00:16 host2 maldet(14990): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 17 2025 04:00:16 host2 maldet(14990): {sigup} latest signature set already installed Sep 17 2025 04:00:16 host2 maldet(15078): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 17 2025 04:00:16 host2 maldet(15078): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 17 2025 04:00:16 host2 maldet(15078): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 17 2025 04:00:16 host2 maldet(15078): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 17 2025 04:00:16 host2 maldet(15078): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 17 2025 04:00:21 host2 maldet(15078): {scan} file list completed in 5s, found 334 files... Sep 17 2025 04:00:21 host2 maldet(15078): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 17 2025 04:00:21 host2 maldet(15078): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (334 files) in progress... Sep 17 2025 04:00:26 host2 maldet(15078): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 334, malware hits 0, cleaned hits 0, time 10s Sep 17 2025 04:00:26 host2 maldet(15078): {scan} scan report saved, to view run: maldet --report 250917-0400.15078 Sep 18 2025 03:39:39 host2 maldet(51294): {update} checking for available updates... Sep 18 2025 03:39:39 host2 maldet(51294): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 18 2025 03:39:39 host2 maldet(51294): {update} hashing install files and checking against server... Sep 18 2025 03:39:40 host2 maldet(51294): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 18 2025 03:39:40 host2 maldet(51294): {update} latest version already installed. Sep 18 2025 03:39:40 host2 maldet(51404): {sigup} performing signature update check... Sep 18 2025 03:39:40 host2 maldet(51404): {sigup} local signature set is version 202509161155684 Sep 18 2025 03:39:40 host2 maldet(51404): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 18 2025 03:39:40 host2 maldet(51404): {sigup} latest signature set already installed Sep 18 2025 03:39:40 host2 maldet(51492): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 18 2025 03:39:40 host2 maldet(51492): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 18 2025 03:39:40 host2 maldet(51492): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 18 2025 03:39:40 host2 maldet(51492): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 18 2025 03:39:40 host2 maldet(51492): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 18 2025 03:39:47 host2 maldet(51492): {scan} file list completed in 7s, found 540 files... Sep 18 2025 03:39:47 host2 maldet(51492): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 18 2025 03:39:47 host2 maldet(51492): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (540 files) in progress... Sep 18 2025 03:39:53 host2 maldet(51492): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 540, malware hits 0, cleaned hits 0, time 13s Sep 18 2025 03:39:53 host2 maldet(51492): {scan} scan report saved, to view run: maldet --report 250918-0339.51492 Sep 19 2025 04:05:52 host2 maldet(71293): {update} checking for available updates... Sep 19 2025 04:05:52 host2 maldet(71293): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 19 2025 04:05:52 host2 maldet(71293): {update} hashing install files and checking against server... Sep 19 2025 04:05:52 host2 maldet(71293): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 19 2025 04:05:53 host2 maldet(71293): {update} latest version already installed. Sep 19 2025 04:05:53 host2 maldet(71406): {sigup} performing signature update check... Sep 19 2025 04:05:53 host2 maldet(71406): {sigup} local signature set is version 202509161155684 Sep 19 2025 04:05:53 host2 maldet(71406): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 19 2025 04:05:53 host2 maldet(71406): {sigup} new signature set 202509192126850 available Sep 19 2025 04:05:53 host2 maldet(71406): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 19 2025 04:05:53 host2 maldet(71406): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 19 2025 04:05:54 host2 maldet(71406): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Sep 19 2025 04:05:54 host2 maldet(71406): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 19 2025 04:05:54 host2 maldet(71406): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 19 2025 04:05:54 host2 maldet(71406): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Sep 19 2025 04:05:54 host2 maldet(71406): {sigup} verified md5sum of maldet-sigpack.tgz Sep 19 2025 04:05:54 host2 maldet(71406): {sigup} unpacked and installed maldet-sigpack.tgz Sep 19 2025 04:05:54 host2 maldet(71406): {sigup} verified md5sum of maldet-clean.tgz Sep 19 2025 04:05:54 host2 maldet(71406): {sigup} unpacked and installed maldet-clean.tgz Sep 19 2025 04:05:54 host2 maldet(71406): {sigup} signature set update completed Sep 19 2025 04:05:54 host2 maldet(71406): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 19 2025 04:05:54 host2 maldet(71613): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 19 2025 04:05:54 host2 maldet(71613): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 19 2025 04:05:54 host2 maldet(71613): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 19 2025 04:05:54 host2 maldet(71613): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 19 2025 04:05:54 host2 maldet(71613): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 19 2025 04:06:01 host2 maldet(71613): {scan} file list completed in 7s, found 410 files... Sep 19 2025 04:06:01 host2 maldet(71613): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 19 2025 04:06:01 host2 maldet(71613): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (410 files) in progress... Sep 19 2025 04:06:12 host2 maldet(71613): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 410, malware hits 0, cleaned hits 0, time 18s Sep 19 2025 04:06:12 host2 maldet(71613): {scan} scan report saved, to view run: maldet --report 250919-0405.71613 Sep 20 2025 03:47:34 host2 maldet(50653): {update} checking for available updates... Sep 20 2025 03:47:35 host2 maldet(50653): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 20 2025 03:47:35 host2 maldet(50653): {update} hashing install files and checking against server... Sep 20 2025 03:47:35 host2 maldet(50653): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 20 2025 03:47:35 host2 maldet(50653): {update} latest version already installed. Sep 20 2025 03:47:35 host2 maldet(50762): {sigup} performing signature update check... Sep 20 2025 03:47:35 host2 maldet(50762): {sigup} local signature set is version 202509192126850 Sep 20 2025 03:47:35 host2 maldet(50762): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 20 2025 03:47:35 host2 maldet(50762): {sigup} latest signature set already installed Sep 20 2025 03:47:35 host2 maldet(50854): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 20 2025 03:47:35 host2 maldet(50854): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 20 2025 03:47:35 host2 maldet(50854): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 20 2025 03:47:36 host2 maldet(50854): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 20 2025 03:47:36 host2 maldet(50854): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 20 2025 03:47:42 host2 maldet(50854): {scan} file list completed in 6s, found 293 files... Sep 20 2025 03:47:42 host2 maldet(50854): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 20 2025 03:47:42 host2 maldet(50854): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (293 files) in progress... Sep 20 2025 03:47:47 host2 maldet(50854): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 293, malware hits 0, cleaned hits 0, time 12s Sep 20 2025 03:47:47 host2 maldet(50854): {scan} scan report saved, to view run: maldet --report 250920-0347.50854 Sep 21 2025 04:02:51 host2 maldet(63210): {update} checking for available updates... Sep 21 2025 04:02:51 host2 maldet(63210): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 21 2025 04:02:51 host2 maldet(63210): {update} hashing install files and checking against server... Sep 21 2025 04:02:51 host2 maldet(63210): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 21 2025 04:02:51 host2 maldet(63210): {update} latest version already installed. Sep 21 2025 04:02:51 host2 maldet(63320): {sigup} performing signature update check... Sep 21 2025 04:02:51 host2 maldet(63320): {sigup} local signature set is version 202509192126850 Sep 21 2025 04:02:52 host2 maldet(63320): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 21 2025 04:02:52 host2 maldet(63320): {sigup} latest signature set already installed Sep 21 2025 04:02:52 host2 maldet(63408): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 21 2025 04:02:52 host2 maldet(63408): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 21 2025 04:02:52 host2 maldet(63408): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 21 2025 04:02:52 host2 maldet(63408): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 21 2025 04:02:52 host2 maldet(63408): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 21 2025 04:02:59 host2 maldet(63408): {scan} file list completed in 7s, found 286 files... Sep 21 2025 04:02:59 host2 maldet(63408): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 21 2025 04:02:59 host2 maldet(63408): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (286 files) in progress... Sep 21 2025 04:03:06 host2 maldet(63408): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 286, malware hits 0, cleaned hits 0, time 14s Sep 21 2025 04:03:06 host2 maldet(63408): {scan} scan report saved, to view run: maldet --report 250921-0402.63408 Sep 22 2025 04:02:47 host2 maldet(61835): {update} checking for available updates... Sep 22 2025 04:02:47 host2 maldet(61835): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 22 2025 04:02:47 host2 maldet(61835): {update} hashing install files and checking against server... Sep 22 2025 04:02:47 host2 maldet(61835): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 22 2025 04:02:47 host2 maldet(61835): {update} latest version already installed. Sep 22 2025 04:02:47 host2 maldet(61945): {sigup} performing signature update check... Sep 22 2025 04:02:47 host2 maldet(61945): {sigup} local signature set is version 202509192126850 Sep 22 2025 04:02:48 host2 maldet(61945): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 22 2025 04:02:48 host2 maldet(61945): {sigup} new signature set 202509223097979 available Sep 22 2025 04:02:48 host2 maldet(61945): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 22 2025 04:02:48 host2 maldet(61945): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 22 2025 04:02:48 host2 maldet(61945): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Sep 22 2025 04:02:48 host2 maldet(61945): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 22 2025 04:02:48 host2 maldet(61945): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 22 2025 04:02:49 host2 maldet(61945): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Sep 22 2025 04:02:49 host2 maldet(61945): {sigup} verified md5sum of maldet-sigpack.tgz Sep 22 2025 04:02:49 host2 maldet(61945): {sigup} unpacked and installed maldet-sigpack.tgz Sep 22 2025 04:02:49 host2 maldet(61945): {sigup} verified md5sum of maldet-clean.tgz Sep 22 2025 04:02:49 host2 maldet(61945): {sigup} unpacked and installed maldet-clean.tgz Sep 22 2025 04:02:49 host2 maldet(61945): {sigup} signature set update completed Sep 22 2025 04:02:49 host2 maldet(61945): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 22 2025 04:02:49 host2 maldet(62152): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 22 2025 04:02:49 host2 maldet(62152): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 22 2025 04:02:49 host2 maldet(62152): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 22 2025 04:02:49 host2 maldet(62152): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 22 2025 04:02:49 host2 maldet(62152): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 22 2025 04:02:53 host2 maldet(62152): {scan} file list completed in 4s, found 538 files... Sep 22 2025 04:02:53 host2 maldet(62152): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 22 2025 04:02:53 host2 maldet(62152): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (538 files) in progress... Sep 22 2025 04:02:59 host2 maldet(62152): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 538, malware hits 0, cleaned hits 0, time 10s Sep 22 2025 04:02:59 host2 maldet(62152): {scan} scan report saved, to view run: maldet --report 250922-0402.62152 Sep 23 2025 03:27:19 host2 maldet(87284): {update} checking for available updates... Sep 23 2025 03:27:19 host2 maldet(87284): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 23 2025 03:27:19 host2 maldet(87284): {update} hashing install files and checking against server... Sep 23 2025 03:27:19 host2 maldet(87284): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 23 2025 03:27:19 host2 maldet(87284): {update} latest version already installed. Sep 23 2025 03:27:19 host2 maldet(87393): {sigup} performing signature update check... Sep 23 2025 03:27:19 host2 maldet(87393): {sigup} local signature set is version 202509223097979 Sep 23 2025 03:27:19 host2 maldet(87393): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 23 2025 03:27:19 host2 maldet(87393): {sigup} latest signature set already installed Sep 23 2025 03:27:19 host2 maldet(87483): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 23 2025 03:27:20 host2 maldet(87483): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 23 2025 03:27:20 host2 maldet(87483): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 23 2025 03:27:20 host2 maldet(87483): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 23 2025 03:27:20 host2 maldet(87483): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 23 2025 03:27:27 host2 maldet(87483): {scan} file list completed in 7s, found 205 files... Sep 23 2025 03:27:27 host2 maldet(87483): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 23 2025 03:27:27 host2 maldet(87483): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (205 files) in progress... Sep 23 2025 03:27:33 host2 maldet(87483): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 205, malware hits 0, cleaned hits 0, time 13s Sep 23 2025 03:27:33 host2 maldet(87483): {scan} scan report saved, to view run: maldet --report 250923-0327.87483 Sep 24 2025 04:46:36 host2 maldet(76466): {update} checking for available updates... Sep 24 2025 04:46:36 host2 maldet(76466): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 24 2025 04:46:36 host2 maldet(76466): {update} hashing install files and checking against server... Sep 24 2025 04:46:36 host2 maldet(76466): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 24 2025 04:46:36 host2 maldet(76466): {update} latest version already installed. Sep 24 2025 04:46:36 host2 maldet(76575): {sigup} performing signature update check... Sep 24 2025 04:46:36 host2 maldet(76575): {sigup} local signature set is version 202509223097979 Sep 24 2025 04:46:37 host2 maldet(76575): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 24 2025 04:46:37 host2 maldet(76575): {sigup} latest signature set already installed Sep 24 2025 04:46:37 host2 maldet(76663): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 24 2025 04:46:37 host2 maldet(76663): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 24 2025 04:46:37 host2 maldet(76663): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 24 2025 04:46:37 host2 maldet(76663): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 24 2025 04:46:37 host2 maldet(76663): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 24 2025 04:46:44 host2 maldet(76663): {scan} file list completed in 7s, found 376 files... Sep 24 2025 04:46:44 host2 maldet(76663): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 24 2025 04:46:44 host2 maldet(76663): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (376 files) in progress... Sep 24 2025 04:46:49 host2 maldet(76663): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 376, malware hits 0, cleaned hits 0, time 12s Sep 24 2025 04:46:49 host2 maldet(76663): {scan} scan report saved, to view run: maldet --report 250924-0446.76663 Sep 25 2025 04:27:05 host2 maldet(58517): {update} checking for available updates... Sep 25 2025 04:27:06 host2 maldet(58517): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 25 2025 04:27:06 host2 maldet(58517): {update} hashing install files and checking against server... Sep 25 2025 04:27:06 host2 maldet(58517): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 25 2025 04:27:06 host2 maldet(58517): {update} latest version already installed. Sep 25 2025 04:27:06 host2 maldet(58628): {sigup} performing signature update check... Sep 25 2025 04:27:06 host2 maldet(58628): {sigup} local signature set is version 202509223097979 Sep 25 2025 04:27:06 host2 maldet(58628): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 25 2025 04:27:06 host2 maldet(58628): {sigup} new signature set 202509254069842 available Sep 25 2025 04:27:06 host2 maldet(58628): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 25 2025 04:27:07 host2 maldet(58628): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 25 2025 04:27:07 host2 maldet(58628): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Sep 25 2025 04:27:07 host2 maldet(58628): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 25 2025 04:27:07 host2 maldet(58628): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 25 2025 04:27:08 host2 maldet(58628): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Sep 25 2025 04:27:08 host2 maldet(58628): {sigup} verified md5sum of maldet-sigpack.tgz Sep 25 2025 04:27:08 host2 maldet(58628): {sigup} unpacked and installed maldet-sigpack.tgz Sep 25 2025 04:27:08 host2 maldet(58628): {sigup} verified md5sum of maldet-clean.tgz Sep 25 2025 04:27:08 host2 maldet(58628): {sigup} unpacked and installed maldet-clean.tgz Sep 25 2025 04:27:08 host2 maldet(58628): {sigup} signature set update completed Sep 25 2025 04:27:08 host2 maldet(58628): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 25 2025 04:27:08 host2 maldet(58838): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 25 2025 04:27:08 host2 maldet(58838): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 25 2025 04:27:08 host2 maldet(58838): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 25 2025 04:27:08 host2 maldet(58838): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 25 2025 04:27:08 host2 maldet(58838): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 25 2025 04:27:15 host2 maldet(58838): {scan} file list completed in 7s, found 136 files... Sep 25 2025 04:27:15 host2 maldet(58838): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 25 2025 04:27:15 host2 maldet(58838): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (136 files) in progress... Sep 25 2025 04:27:19 host2 maldet(58838): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 136, malware hits 0, cleaned hits 0, time 11s Sep 25 2025 04:27:19 host2 maldet(58838): {scan} scan report saved, to view run: maldet --report 250925-0427.58838 Sep 26 2025 04:21:26 host2 maldet(70283): {update} checking for available updates... Sep 26 2025 04:21:26 host2 maldet(70283): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 26 2025 04:21:26 host2 maldet(70283): {update} hashing install files and checking against server... Sep 26 2025 04:21:26 host2 maldet(70283): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 26 2025 04:21:26 host2 maldet(70283): {update} latest version already installed. Sep 26 2025 04:21:27 host2 maldet(70397): {sigup} performing signature update check... Sep 26 2025 04:21:27 host2 maldet(70397): {sigup} local signature set is version 202509254069842 Sep 26 2025 04:21:27 host2 maldet(70397): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 26 2025 04:21:27 host2 maldet(70397): {sigup} latest signature set already installed Sep 26 2025 04:21:27 host2 maldet(70488): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 26 2025 04:21:27 host2 maldet(70488): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 26 2025 04:21:27 host2 maldet(70488): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 26 2025 04:21:27 host2 maldet(70488): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 26 2025 04:21:27 host2 maldet(70488): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 26 2025 04:21:34 host2 maldet(70488): {scan} file list completed in 7s, found 335 files... Sep 26 2025 04:21:34 host2 maldet(70488): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 26 2025 04:21:34 host2 maldet(70488): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (335 files) in progress... Sep 26 2025 04:21:42 host2 maldet(70488): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 335, malware hits 0, cleaned hits 0, time 15s Sep 26 2025 04:21:42 host2 maldet(70488): {scan} scan report saved, to view run: maldet --report 250926-0421.70488 Sep 27 2025 04:15:03 host2 maldet(26480): {update} checking for available updates... Sep 27 2025 04:15:04 host2 maldet(26480): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 27 2025 04:15:04 host2 maldet(26480): {update} hashing install files and checking against server... Sep 27 2025 04:15:04 host2 maldet(26480): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 27 2025 04:15:04 host2 maldet(26480): {update} latest version already installed. Sep 27 2025 04:15:04 host2 maldet(26589): {sigup} performing signature update check... Sep 27 2025 04:15:04 host2 maldet(26589): {sigup} local signature set is version 202509254069842 Sep 27 2025 04:15:04 host2 maldet(26589): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 27 2025 04:15:04 host2 maldet(26589): {sigup} latest signature set already installed Sep 27 2025 04:15:04 host2 maldet(26683): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 27 2025 04:15:05 host2 maldet(26683): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 27 2025 04:15:05 host2 maldet(26683): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 27 2025 04:15:05 host2 maldet(26683): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 27 2025 04:15:05 host2 maldet(26683): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 27 2025 04:15:13 host2 maldet(26683): {scan} file list completed in 8s, found 342 files... Sep 27 2025 04:15:13 host2 maldet(26683): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 27 2025 04:15:13 host2 maldet(26683): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (342 files) in progress... Sep 27 2025 04:15:19 host2 maldet(26683): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 342, malware hits 0, cleaned hits 0, time 15s Sep 27 2025 04:15:19 host2 maldet(26683): {scan} scan report saved, to view run: maldet --report 250927-0415.26683 Sep 28 2025 03:15:59 host2 maldet(31751): {update} checking for available updates... Sep 28 2025 03:15:59 host2 maldet(31751): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 28 2025 03:15:59 host2 maldet(31751): {update} hashing install files and checking against server... Sep 28 2025 03:16:00 host2 maldet(31751): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 28 2025 03:16:00 host2 maldet(31751): {update} latest version already installed. Sep 28 2025 03:16:00 host2 maldet(31864): {sigup} performing signature update check... Sep 28 2025 03:16:00 host2 maldet(31864): {sigup} local signature set is version 202509254069842 Sep 28 2025 03:16:00 host2 maldet(31864): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 28 2025 03:16:00 host2 maldet(31864): {sigup} new signature set 20250928847499 available Sep 28 2025 03:16:00 host2 maldet(31864): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 28 2025 03:16:00 host2 maldet(31864): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 28 2025 03:16:01 host2 maldet(31864): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Sep 28 2025 03:16:01 host2 maldet(31864): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 28 2025 03:16:01 host2 maldet(31864): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 28 2025 03:16:01 host2 maldet(31864): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Sep 28 2025 03:16:01 host2 maldet(31864): {sigup} verified md5sum of maldet-sigpack.tgz Sep 28 2025 03:16:01 host2 maldet(31864): {sigup} unpacked and installed maldet-sigpack.tgz Sep 28 2025 03:16:01 host2 maldet(31864): {sigup} verified md5sum of maldet-clean.tgz Sep 28 2025 03:16:01 host2 maldet(31864): {sigup} unpacked and installed maldet-clean.tgz Sep 28 2025 03:16:01 host2 maldet(31864): {sigup} signature set update completed Sep 28 2025 03:16:01 host2 maldet(31864): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 28 2025 03:16:02 host2 maldet(32121): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 28 2025 03:16:02 host2 maldet(32121): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 28 2025 03:16:02 host2 maldet(32121): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 28 2025 03:16:02 host2 maldet(32121): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 28 2025 03:16:02 host2 maldet(32121): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 28 2025 03:16:11 host2 maldet(32121): {scan} file list completed in 9s, found 275 files... Sep 28 2025 03:16:11 host2 maldet(32121): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 28 2025 03:16:11 host2 maldet(32121): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (275 files) in progress... Sep 28 2025 03:16:17 host2 maldet(32121): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 275, malware hits 0, cleaned hits 0, time 15s Sep 28 2025 03:16:17 host2 maldet(32121): {scan} scan report saved, to view run: maldet --report 250928-0316.32121 Sep 29 2025 04:44:48 host2 maldet(25690): {update} checking for available updates... Sep 29 2025 04:44:48 host2 maldet(25690): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 29 2025 04:44:48 host2 maldet(25690): {update} hashing install files and checking against server... Sep 29 2025 04:44:48 host2 maldet(25690): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 29 2025 04:44:48 host2 maldet(25690): {update} latest version already installed. Sep 29 2025 04:44:48 host2 maldet(25800): {sigup} performing signature update check... Sep 29 2025 04:44:48 host2 maldet(25800): {sigup} local signature set is version 20250928847499 Sep 29 2025 04:44:49 host2 maldet(25800): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 29 2025 04:44:49 host2 maldet(25800): {sigup} latest signature set already installed Sep 29 2025 04:44:49 host2 maldet(25888): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 29 2025 04:44:49 host2 maldet(25888): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 29 2025 04:44:49 host2 maldet(25888): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 29 2025 04:44:49 host2 maldet(25888): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 29 2025 04:44:49 host2 maldet(25888): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 29 2025 04:44:55 host2 maldet(25888): {scan} file list completed in 6s, found 178 files... Sep 29 2025 04:44:55 host2 maldet(25888): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 29 2025 04:44:55 host2 maldet(25888): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (178 files) in progress... Sep 29 2025 04:45:00 host2 maldet(25888): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 178, malware hits 0, cleaned hits 0, time 11s Sep 29 2025 04:45:00 host2 maldet(25888): {scan} scan report saved, to view run: maldet --report 250929-0444.25888 Sep 30 2025 04:35:17 host2 maldet(4769): {update} checking for available updates... Sep 30 2025 04:35:18 host2 maldet(4769): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 30 2025 04:35:18 host2 maldet(4769): {update} hashing install files and checking against server... Sep 30 2025 04:35:18 host2 maldet(4769): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 30 2025 04:35:18 host2 maldet(4769): {update} latest version already installed. Sep 30 2025 04:35:18 host2 maldet(4888): {sigup} performing signature update check... Sep 30 2025 04:35:18 host2 maldet(4888): {sigup} local signature set is version 20250928847499 Sep 30 2025 04:35:18 host2 maldet(4888): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 30 2025 04:35:18 host2 maldet(4888): {sigup} latest signature set already installed Sep 30 2025 04:35:18 host2 maldet(4977): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 30 2025 04:35:18 host2 maldet(4977): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 30 2025 04:35:18 host2 maldet(4977): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 30 2025 04:35:19 host2 maldet(4977): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 30 2025 04:35:19 host2 maldet(4977): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 30 2025 04:35:24 host2 maldet(4977): {scan} file list completed in 5s, found 154 files... Sep 30 2025 04:35:24 host2 maldet(4977): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 30 2025 04:35:24 host2 maldet(4977): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (154 files) in progress... Sep 30 2025 04:35:28 host2 maldet(4977): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 154, malware hits 0, cleaned hits 0, time 10s Sep 30 2025 04:35:28 host2 maldet(4977): {scan} scan report saved, to view run: maldet --report 250930-0435.4977 Oct 01 2025 04:15:35 host2 maldet(90294): {update} checking for available updates... Oct 01 2025 04:15:41 host2 maldet(90294): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 01 2025 04:15:41 host2 maldet(90294): {update} hashing install files and checking against server... Oct 01 2025 04:15:41 host2 maldet(90294): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 01 2025 04:15:41 host2 maldet(90294): {update} latest version already installed. Oct 01 2025 04:15:41 host2 maldet(90525): {sigup} performing signature update check... Oct 01 2025 04:15:41 host2 maldet(90525): {sigup} local signature set is version 20250928847499 Oct 01 2025 04:15:48 host2 maldet(90525): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 01 2025 04:15:48 host2 maldet(90525): {sigup} new signature set 202510011815721 available Oct 01 2025 04:15:48 host2 maldet(90525): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 01 2025 04:15:48 host2 maldet(90525): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 01 2025 04:15:48 host2 maldet(90525): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Oct 01 2025 04:15:48 host2 maldet(90525): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 01 2025 04:15:49 host2 maldet(90525): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 01 2025 04:15:49 host2 maldet(90525): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Oct 01 2025 04:15:49 host2 maldet(90525): {sigup} verified md5sum of maldet-sigpack.tgz Oct 01 2025 04:15:49 host2 maldet(90525): {sigup} unpacked and installed maldet-sigpack.tgz Oct 01 2025 04:15:49 host2 maldet(90525): {sigup} verified md5sum of maldet-clean.tgz Oct 01 2025 04:15:49 host2 maldet(90525): {sigup} unpacked and installed maldet-clean.tgz Oct 01 2025 04:15:49 host2 maldet(90525): {sigup} signature set update completed Oct 01 2025 04:15:49 host2 maldet(90525): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 01 2025 04:15:49 host2 maldet(90742): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 01 2025 04:15:49 host2 maldet(90742): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 01 2025 04:15:49 host2 maldet(90742): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Oct 01 2025 04:15:49 host2 maldet(90742): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 01 2025 04:15:49 host2 maldet(90742): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 01 2025 04:15:52 host2 maldet(90742): {scan} file list completed in 3s, found 130 files... Oct 01 2025 04:15:52 host2 maldet(90742): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 01 2025 04:15:52 host2 maldet(90742): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (130 files) in progress... Oct 01 2025 04:15:56 host2 maldet(90742): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 130, malware hits 0, cleaned hits 0, time 7s Oct 01 2025 04:15:56 host2 maldet(90742): {scan} scan report saved, to view run: maldet --report 251001-0415.90742 Oct 02 2025 03:51:32 host2 maldet(55138): {update} checking for available updates... Oct 02 2025 03:51:32 host2 maldet(55138): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 02 2025 03:51:32 host2 maldet(55138): {update} hashing install files and checking against server... Oct 02 2025 03:51:32 host2 maldet(55138): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 02 2025 03:51:32 host2 maldet(55138): {update} latest version already installed. Oct 02 2025 03:51:32 host2 maldet(55248): {sigup} performing signature update check... Oct 02 2025 03:51:32 host2 maldet(55248): {sigup} local signature set is version 202510011815721 Oct 02 2025 03:51:33 host2 maldet(55248): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 02 2025 03:51:33 host2 maldet(55248): {sigup} latest signature set already installed Oct 02 2025 03:51:33 host2 maldet(55336): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 02 2025 03:51:33 host2 maldet(55336): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 02 2025 03:51:33 host2 maldet(55336): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Oct 02 2025 03:51:33 host2 maldet(55336): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 02 2025 03:51:33 host2 maldet(55336): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 02 2025 03:51:35 host2 maldet(55336): {scan} file list completed in 2s, found 182 files... Oct 02 2025 03:51:35 host2 maldet(55336): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 02 2025 03:51:35 host2 maldet(55336): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (182 files) in progress... Oct 02 2025 03:51:40 host2 maldet(55336): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 182, malware hits 0, cleaned hits 0, time 7s Oct 02 2025 03:51:40 host2 maldet(55336): {scan} scan report saved, to view run: maldet --report 251002-0351.55336 Oct 03 2025 04:45:01 host2 maldet(98301): {update} checking for available updates... Oct 03 2025 04:45:01 host2 maldet(98301): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 03 2025 04:45:01 host2 maldet(98301): {update} hashing install files and checking against server... Oct 03 2025 04:45:01 host2 maldet(98301): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 03 2025 04:45:01 host2 maldet(98301): {update} latest version already installed. Oct 03 2025 04:45:01 host2 maldet(98410): {sigup} performing signature update check... Oct 03 2025 04:45:01 host2 maldet(98410): {sigup} local signature set is version 202510011815721 Oct 03 2025 04:45:02 host2 maldet(98410): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 03 2025 04:45:02 host2 maldet(98410): {sigup} latest signature set already installed Oct 03 2025 04:45:02 host2 maldet(98689): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 03 2025 04:45:02 host2 maldet(98689): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 03 2025 04:45:02 host2 maldet(98689): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Oct 03 2025 04:45:02 host2 maldet(98689): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 03 2025 04:45:02 host2 maldet(98689): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 03 2025 04:45:07 host2 maldet(98689): {scan} file list completed in 5s, found 272 files... Oct 03 2025 04:45:07 host2 maldet(98689): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 03 2025 04:45:07 host2 maldet(98689): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (272 files) in progress... Oct 03 2025 04:45:13 host2 maldet(98689): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 272, malware hits 0, cleaned hits 0, time 11s Oct 03 2025 04:45:13 host2 maldet(98689): {scan} scan report saved, to view run: maldet --report 251003-0445.98689 Oct 04 2025 04:23:54 host2 maldet(7355): {update} checking for available updates... Oct 04 2025 04:23:55 host2 maldet(7355): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 04 2025 04:23:55 host2 maldet(7355): {update} hashing install files and checking against server... Oct 04 2025 04:23:55 host2 maldet(7355): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 04 2025 04:23:55 host2 maldet(7355): {update} latest version already installed. Oct 04 2025 04:23:55 host2 maldet(7464): {sigup} performing signature update check... Oct 04 2025 04:23:55 host2 maldet(7464): {sigup} local signature set is version 202510011815721 Oct 04 2025 04:23:55 host2 maldet(7464): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 04 2025 04:23:55 host2 maldet(7464): {sigup} new signature set 20251004703782 available Oct 04 2025 04:23:55 host2 maldet(7464): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 04 2025 04:23:56 host2 maldet(7464): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 04 2025 04:23:56 host2 maldet(7464): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Oct 04 2025 04:23:56 host2 maldet(7464): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 04 2025 04:23:56 host2 maldet(7464): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 04 2025 04:23:56 host2 maldet(7464): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Oct 04 2025 04:23:56 host2 maldet(7464): {sigup} verified md5sum of maldet-sigpack.tgz Oct 04 2025 04:23:56 host2 maldet(7464): {sigup} unpacked and installed maldet-sigpack.tgz Oct 04 2025 04:23:56 host2 maldet(7464): {sigup} verified md5sum of maldet-clean.tgz Oct 04 2025 04:23:56 host2 maldet(7464): {sigup} unpacked and installed maldet-clean.tgz Oct 04 2025 04:23:56 host2 maldet(7464): {sigup} signature set update completed Oct 04 2025 04:23:56 host2 maldet(7464): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 04 2025 04:23:57 host2 maldet(7673): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 04 2025 04:23:57 host2 maldet(7673): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 04 2025 04:23:57 host2 maldet(7673): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Oct 04 2025 04:23:57 host2 maldet(7673): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 04 2025 04:23:57 host2 maldet(7673): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 04 2025 04:24:01 host2 maldet(7673): {scan} file list completed in 4s, found 182 files... Oct 04 2025 04:24:01 host2 maldet(7673): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 04 2025 04:24:01 host2 maldet(7673): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (182 files) in progress... Oct 04 2025 04:24:11 host2 maldet(7673): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 182, malware hits 0, cleaned hits 0, time 14s Oct 04 2025 04:24:11 host2 maldet(7673): {scan} scan report saved, to view run: maldet --report 251004-0423.7673 Oct 05 2025 04:12:32 host2 maldet(36992): {update} checking for available updates... Oct 05 2025 04:12:32 host2 maldet(36992): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 05 2025 04:12:32 host2 maldet(36992): {update} hashing install files and checking against server... Oct 05 2025 04:12:33 host2 maldet(36992): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 05 2025 04:12:33 host2 maldet(36992): {update} latest version already installed. Oct 05 2025 04:12:33 host2 maldet(37101): {sigup} performing signature update check... Oct 05 2025 04:12:33 host2 maldet(37101): {sigup} local signature set is version 20251004703782 Oct 05 2025 04:12:33 host2 maldet(37101): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 05 2025 04:12:33 host2 maldet(37101): {sigup} latest signature set already installed Oct 05 2025 04:12:33 host2 maldet(37189): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 05 2025 04:12:33 host2 maldet(37189): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 05 2025 04:12:33 host2 maldet(37189): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Oct 05 2025 04:12:33 host2 maldet(37189): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 05 2025 04:12:33 host2 maldet(37189): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 05 2025 04:12:37 host2 maldet(37189): {scan} file list completed in 3s, found 333 files... Oct 05 2025 04:12:37 host2 maldet(37189): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 05 2025 04:12:37 host2 maldet(37189): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (333 files) in progress... Oct 05 2025 04:12:41 host2 maldet(37189): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 333, malware hits 0, cleaned hits 0, time 8s Oct 05 2025 04:12:41 host2 maldet(37189): {scan} scan report saved, to view run: maldet --report 251005-0412.37189 Oct 06 2025 04:16:12 host2 maldet(67302): {update} checking for available updates... Oct 06 2025 04:16:12 host2 maldet(67302): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 06 2025 04:16:12 host2 maldet(67302): {update} hashing install files and checking against server... Oct 06 2025 04:16:13 host2 maldet(67302): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 06 2025 04:16:13 host2 maldet(67302): {update} latest version already installed. Oct 06 2025 04:16:13 host2 maldet(67412): {sigup} performing signature update check... Oct 06 2025 04:16:13 host2 maldet(67412): {sigup} local signature set is version 20251004703782 Oct 06 2025 04:16:13 host2 maldet(67412): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 06 2025 04:16:13 host2 maldet(67412): {sigup} latest signature set already installed Oct 06 2025 04:16:13 host2 maldet(67501): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 06 2025 04:16:13 host2 maldet(67501): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 06 2025 04:16:13 host2 maldet(67501): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Oct 06 2025 04:16:13 host2 maldet(67501): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 06 2025 04:16:13 host2 maldet(67501): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 06 2025 04:16:17 host2 maldet(67501): {scan} file list completed in 4s, found 208 files... Oct 06 2025 04:16:17 host2 maldet(67501): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 06 2025 04:16:17 host2 maldet(67501): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (208 files) in progress... Oct 06 2025 04:16:24 host2 maldet(67501): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 208, malware hits 0, cleaned hits 0, time 11s Oct 06 2025 04:16:24 host2 maldet(67501): {scan} scan report saved, to view run: maldet --report 251006-0416.67501 Oct 07 2025 03:42:36 host2 maldet(94732): {update} checking for available updates... Oct 07 2025 03:42:36 host2 maldet(94732): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 07 2025 03:42:36 host2 maldet(94732): {update} hashing install files and checking against server... Oct 07 2025 03:42:36 host2 maldet(94732): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 07 2025 03:42:36 host2 maldet(94732): {update} latest version already installed. Oct 07 2025 03:42:36 host2 maldet(94841): {sigup} performing signature update check... Oct 07 2025 03:42:36 host2 maldet(94841): {sigup} local signature set is version 20251004703782 Oct 07 2025 03:42:36 host2 maldet(94841): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 07 2025 03:42:36 host2 maldet(94841): {sigup} new signature set 202510071662433 available Oct 07 2025 03:42:36 host2 maldet(94841): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 07 2025 03:42:37 host2 maldet(94841): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 07 2025 03:42:37 host2 maldet(94841): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Oct 07 2025 03:42:37 host2 maldet(94841): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 07 2025 03:42:37 host2 maldet(94841): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 07 2025 03:42:38 host2 maldet(94841): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Oct 07 2025 03:42:38 host2 maldet(94841): {sigup} verified md5sum of maldet-sigpack.tgz Oct 07 2025 03:42:38 host2 maldet(94841): {sigup} unpacked and installed maldet-sigpack.tgz Oct 07 2025 03:42:38 host2 maldet(94841): {sigup} verified md5sum of maldet-clean.tgz Oct 07 2025 03:42:38 host2 maldet(94841): {sigup} unpacked and installed maldet-clean.tgz Oct 07 2025 03:42:38 host2 maldet(94841): {sigup} signature set update completed Oct 07 2025 03:42:38 host2 maldet(94841): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 07 2025 03:42:38 host2 maldet(95049): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 07 2025 03:42:38 host2 maldet(95049): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 07 2025 03:42:38 host2 maldet(95049): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Oct 07 2025 03:42:38 host2 maldet(95049): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 07 2025 03:42:38 host2 maldet(95049): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 07 2025 03:42:43 host2 maldet(95049): {scan} file list completed in 5s, found 308 files... Oct 07 2025 03:42:43 host2 maldet(95049): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 07 2025 03:42:43 host2 maldet(95049): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (308 files) in progress... Oct 07 2025 03:42:48 host2 maldet(95049): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 308, malware hits 0, cleaned hits 0, time 10s Oct 07 2025 03:42:48 host2 maldet(95049): {scan} scan report saved, to view run: maldet --report 251007-0342.95049 Oct 08 2025 04:16:15 host2 maldet(45225): {update} checking for available updates... Oct 08 2025 04:16:15 host2 maldet(45225): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 08 2025 04:16:15 host2 maldet(45225): {update} hashing install files and checking against server... Oct 08 2025 04:16:16 host2 maldet(45225): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 08 2025 04:16:16 host2 maldet(45225): {update} latest version already installed. Oct 08 2025 04:16:16 host2 maldet(45335): {sigup} performing signature update check... Oct 08 2025 04:16:16 host2 maldet(45335): {sigup} local signature set is version 202510071662433 Oct 08 2025 04:16:16 host2 maldet(45335): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 08 2025 04:16:16 host2 maldet(45335): {sigup} latest signature set already installed Oct 08 2025 04:16:16 host2 maldet(45423): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 08 2025 04:16:16 host2 maldet(45423): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 08 2025 04:16:16 host2 maldet(45423): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Oct 08 2025 04:16:16 host2 maldet(45423): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 08 2025 04:16:16 host2 maldet(45423): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 08 2025 04:16:23 host2 maldet(45423): {scan} file list completed in 7s, found 1290 files... Oct 08 2025 04:16:23 host2 maldet(45423): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 08 2025 04:16:23 host2 maldet(45423): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1290 files) in progress... Oct 08 2025 04:16:30 host2 maldet(45423): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1290, malware hits 0, cleaned hits 0, time 14s Oct 08 2025 04:16:30 host2 maldet(45423): {scan} scan report saved, to view run: maldet --report 251008-0416.45423 Oct 09 2025 04:17:21 host2 maldet(98209): {update} checking for available updates... Oct 09 2025 04:17:21 host2 maldet(98209): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 09 2025 04:17:21 host2 maldet(98209): {update} hashing install files and checking against server... Oct 09 2025 04:17:21 host2 maldet(98209): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 09 2025 04:17:21 host2 maldet(98209): {update} latest version already installed. Oct 09 2025 04:17:21 host2 maldet(98319): {sigup} performing signature update check... Oct 09 2025 04:17:21 host2 maldet(98319): {sigup} local signature set is version 202510071662433 Oct 09 2025 04:17:22 host2 maldet(98319): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 09 2025 04:17:22 host2 maldet(98319): {sigup} latest signature set already installed Oct 09 2025 04:17:22 host2 maldet(98409): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 09 2025 04:17:22 host2 maldet(98409): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 09 2025 04:17:22 host2 maldet(98409): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Oct 09 2025 04:17:22 host2 maldet(98409): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 09 2025 04:17:22 host2 maldet(98409): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 09 2025 04:17:26 host2 maldet(98409): {scan} file list completed in 4s, found 169 files... Oct 09 2025 04:17:26 host2 maldet(98409): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 09 2025 04:17:26 host2 maldet(98409): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (169 files) in progress... Oct 09 2025 04:17:34 host2 maldet(98409): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 169, malware hits 0, cleaned hits 0, time 12s Oct 09 2025 04:17:34 host2 maldet(98409): {scan} scan report saved, to view run: maldet --report 251009-0417.98409 Oct 10 2025 04:38:42 host2 maldet(82761): {update} checking for available updates... Oct 10 2025 04:38:42 host2 maldet(82761): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 10 2025 04:38:42 host2 maldet(82761): {update} hashing install files and checking against server... Oct 10 2025 04:38:42 host2 maldet(82761): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 10 2025 04:38:42 host2 maldet(82761): {update} latest version already installed. Oct 10 2025 04:38:42 host2 maldet(82871): {sigup} performing signature update check... Oct 10 2025 04:38:42 host2 maldet(82871): {sigup} local signature set is version 202510071662433 Oct 10 2025 04:38:43 host2 maldet(82871): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 10 2025 04:38:43 host2 maldet(82871): {sigup} new signature set 202510102624809 available Oct 10 2025 04:38:43 host2 maldet(82871): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 10 2025 04:38:43 host2 maldet(82871): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 10 2025 04:38:43 host2 maldet(82871): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Oct 10 2025 04:38:43 host2 maldet(82871): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 10 2025 04:38:44 host2 maldet(82871): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 10 2025 04:38:44 host2 maldet(82871): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Oct 10 2025 04:38:44 host2 maldet(82871): {sigup} verified md5sum of maldet-sigpack.tgz Oct 10 2025 04:38:44 host2 maldet(82871): {sigup} unpacked and installed maldet-sigpack.tgz Oct 10 2025 04:38:44 host2 maldet(82871): {sigup} verified md5sum of maldet-clean.tgz Oct 10 2025 04:38:44 host2 maldet(82871): {sigup} unpacked and installed maldet-clean.tgz Oct 10 2025 04:38:44 host2 maldet(82871): {sigup} signature set update completed Oct 10 2025 04:38:44 host2 maldet(82871): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 10 2025 04:38:44 host2 maldet(83085): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 10 2025 04:38:44 host2 maldet(83085): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 10 2025 04:38:44 host2 maldet(83085): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Oct 10 2025 04:38:44 host2 maldet(83085): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 10 2025 04:38:44 host2 maldet(83085): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 10 2025 04:38:49 host2 maldet(83085): {scan} file list completed in 5s, found 153 files... Oct 10 2025 04:38:49 host2 maldet(83085): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 10 2025 04:38:49 host2 maldet(83085): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (153 files) in progress... Oct 10 2025 04:38:55 host2 maldet(83085): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 153, malware hits 0, cleaned hits 0, time 11s Oct 10 2025 04:38:55 host2 maldet(83085): {scan} scan report saved, to view run: maldet --report 251010-0438.83085 Oct 11 2025 04:18:14 host2 maldet(81347): {update} checking for available updates... Oct 11 2025 04:18:15 host2 maldet(81347): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 11 2025 04:18:15 host2 maldet(81347): {update} hashing install files and checking against server... Oct 11 2025 04:18:15 host2 maldet(81347): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 11 2025 04:18:15 host2 maldet(81347): {update} latest version already installed. Oct 11 2025 04:18:15 host2 maldet(81458): {sigup} performing signature update check... Oct 11 2025 04:18:15 host2 maldet(81458): {sigup} local signature set is version 202510102624809 Oct 11 2025 04:18:15 host2 maldet(81458): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 11 2025 04:18:15 host2 maldet(81458): {sigup} latest signature set already installed Oct 11 2025 04:18:15 host2 maldet(81546): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 11 2025 04:18:15 host2 maldet(81546): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 11 2025 04:18:15 host2 maldet(81546): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Oct 11 2025 04:18:15 host2 maldet(81546): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 11 2025 04:18:15 host2 maldet(81546): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 11 2025 04:18:23 host2 maldet(81546): {scan} file list completed in 8s, found 823 files... Oct 11 2025 04:18:23 host2 maldet(81546): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 11 2025 04:18:23 host2 maldet(81546): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (823 files) in progress... Oct 11 2025 04:18:28 host2 maldet(81546): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 823, malware hits 0, cleaned hits 0, time 13s Oct 11 2025 04:18:28 host2 maldet(81546): {scan} scan report saved, to view run: maldet --report 251011-0418.81546 Oct 12 2025 04:00:25 host2 maldet(18161): {update} checking for available updates... Oct 12 2025 04:00:25 host2 maldet(18161): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 12 2025 04:00:25 host2 maldet(18161): {update} hashing install files and checking against server... Oct 12 2025 04:00:25 host2 maldet(18161): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 12 2025 04:00:25 host2 maldet(18161): {update} latest version already installed. Oct 12 2025 04:00:25 host2 maldet(18271): {sigup} performing signature update check... Oct 12 2025 04:00:25 host2 maldet(18271): {sigup} local signature set is version 202510102624809 Oct 12 2025 04:00:26 host2 maldet(18271): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 12 2025 04:00:26 host2 maldet(18271): {sigup} latest signature set already installed Oct 12 2025 04:00:26 host2 maldet(18361): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 12 2025 04:00:26 host2 maldet(18361): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 12 2025 04:00:26 host2 maldet(18361): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Oct 12 2025 04:00:26 host2 maldet(18361): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 12 2025 04:00:26 host2 maldet(18361): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 12 2025 04:00:34 host2 maldet(18361): {scan} file list completed in 8s, found 563 files... Oct 12 2025 04:00:35 host2 maldet(18361): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 12 2025 04:00:35 host2 maldet(18361): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (563 files) in progress... Oct 12 2025 04:00:43 host2 maldet(18361): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 563, malware hits 0, cleaned hits 0, time 17s Oct 12 2025 04:00:43 host2 maldet(18361): {scan} scan report saved, to view run: maldet --report 251012-0400.18361 Oct 13 2025 04:48:51 host2 maldet(68207): {update} checking for available updates... Oct 13 2025 04:48:51 host2 maldet(68207): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 13 2025 04:48:51 host2 maldet(68207): {update} hashing install files and checking against server... Oct 13 2025 04:48:52 host2 maldet(68207): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 13 2025 04:48:52 host2 maldet(68207): {update} latest version already installed. Oct 13 2025 04:48:52 host2 maldet(68319): {sigup} performing signature update check... Oct 13 2025 04:48:52 host2 maldet(68319): {sigup} local signature set is version 202510102624809 Oct 13 2025 04:48:52 host2 maldet(68319): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 13 2025 04:48:52 host2 maldet(68319): {sigup} new signature set 20251013591816 available Oct 13 2025 04:48:52 host2 maldet(68319): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 13 2025 04:48:52 host2 maldet(68319): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 13 2025 04:48:53 host2 maldet(68319): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Oct 13 2025 04:48:53 host2 maldet(68319): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 13 2025 04:48:53 host2 maldet(68319): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 13 2025 04:48:53 host2 maldet(68319): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Oct 13 2025 04:48:53 host2 maldet(68319): {sigup} verified md5sum of maldet-sigpack.tgz Oct 13 2025 04:48:53 host2 maldet(68319): {sigup} unpacked and installed maldet-sigpack.tgz Oct 13 2025 04:48:54 host2 maldet(68319): {sigup} verified md5sum of maldet-clean.tgz Oct 13 2025 04:48:54 host2 maldet(68319): {sigup} unpacked and installed maldet-clean.tgz Oct 13 2025 04:48:54 host2 maldet(68319): {sigup} signature set update completed Oct 13 2025 04:48:54 host2 maldet(68319): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 13 2025 04:48:54 host2 maldet(68575): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 13 2025 04:48:54 host2 maldet(68575): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 13 2025 04:48:54 host2 maldet(68575): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Oct 13 2025 04:48:54 host2 maldet(68575): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 13 2025 04:48:54 host2 maldet(68575): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 13 2025 04:49:02 host2 maldet(68575): {scan} file list completed in 8s, found 225 files... Oct 13 2025 04:49:02 host2 maldet(68575): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 13 2025 04:49:02 host2 maldet(68575): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (225 files) in progress... Oct 13 2025 04:49:09 host2 maldet(68575): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 225, malware hits 0, cleaned hits 0, time 15s Oct 13 2025 04:49:09 host2 maldet(68575): {scan} scan report saved, to view run: maldet --report 251013-0448.68575 Oct 14 2025 04:14:45 host2 maldet(39052): {update} checking for available updates... Oct 14 2025 04:14:45 host2 maldet(39052): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 14 2025 04:14:45 host2 maldet(39052): {update} hashing install files and checking against server... Oct 14 2025 04:14:46 host2 maldet(39052): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 14 2025 04:14:46 host2 maldet(39052): {update} latest version already installed. Oct 14 2025 04:14:46 host2 maldet(39166): {sigup} performing signature update check... Oct 14 2025 04:14:46 host2 maldet(39166): {sigup} local signature set is version 20251013591816 Oct 14 2025 04:14:46 host2 maldet(39166): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 14 2025 04:14:46 host2 maldet(39166): {sigup} latest signature set already installed Oct 14 2025 04:14:46 host2 maldet(39254): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 14 2025 04:14:46 host2 maldet(39254): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 14 2025 04:14:46 host2 maldet(39254): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Oct 14 2025 04:14:46 host2 maldet(39254): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 14 2025 04:14:46 host2 maldet(39254): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 14 2025 04:14:51 host2 maldet(39254): {scan} file list completed in 5s, found 1223 files... Oct 14 2025 04:14:51 host2 maldet(39254): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 14 2025 04:14:51 host2 maldet(39254): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1223 files) in progress... Oct 14 2025 04:15:00 host2 maldet(39254): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1223, malware hits 0, cleaned hits 0, time 14s Oct 14 2025 04:15:00 host2 maldet(39254): {scan} scan report saved, to view run: maldet --report 251014-0414.39254 Oct 15 2025 04:07:12 host2 maldet(36662): {update} checking for available updates... Oct 15 2025 04:07:12 host2 maldet(36662): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 15 2025 04:07:12 host2 maldet(36662): {update} hashing install files and checking against server... Oct 15 2025 04:07:13 host2 maldet(36662): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 15 2025 04:07:13 host2 maldet(36662): {update} latest version already installed. Oct 15 2025 04:07:13 host2 maldet(36771): {sigup} performing signature update check... Oct 15 2025 04:07:13 host2 maldet(36771): {sigup} local signature set is version 20251013591816 Oct 15 2025 04:07:13 host2 maldet(36771): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 15 2025 04:07:13 host2 maldet(36771): {sigup} latest signature set already installed Oct 15 2025 04:07:13 host2 maldet(36862): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 15 2025 04:07:13 host2 maldet(36862): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 15 2025 04:07:13 host2 maldet(36862): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Oct 15 2025 04:07:13 host2 maldet(36862): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 15 2025 04:07:13 host2 maldet(36862): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 15 2025 04:07:18 host2 maldet(36862): {scan} file list completed in 5s, found 195 files... Oct 15 2025 04:07:18 host2 maldet(36862): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 15 2025 04:07:18 host2 maldet(36862): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (195 files) in progress... Oct 15 2025 04:07:26 host2 maldet(36862): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 195, malware hits 0, cleaned hits 0, time 13s Oct 15 2025 04:07:26 host2 maldet(36862): {scan} scan report saved, to view run: maldet --report 251015-0407.36862 Oct 16 2025 03:54:31 host2 maldet(16870): {update} checking for available updates... Oct 16 2025 03:54:31 host2 maldet(16870): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 16 2025 03:54:31 host2 maldet(16870): {update} hashing install files and checking against server... Oct 16 2025 03:54:32 host2 maldet(16870): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 16 2025 03:54:32 host2 maldet(16870): {update} latest version already installed. Oct 16 2025 03:54:32 host2 maldet(16980): {sigup} performing signature update check... Oct 16 2025 03:54:32 host2 maldet(16980): {sigup} local signature set is version 20251013591816 Oct 16 2025 03:54:32 host2 maldet(16980): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 16 2025 03:54:32 host2 maldet(16980): {sigup} new signature set 20251016585547 available Oct 16 2025 03:54:32 host2 maldet(16980): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 16 2025 03:54:32 host2 maldet(16980): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 16 2025 03:54:33 host2 maldet(16980): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Oct 16 2025 03:54:33 host2 maldet(16980): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 16 2025 03:54:33 host2 maldet(16980): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 16 2025 03:54:33 host2 maldet(16980): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Oct 16 2025 03:54:33 host2 maldet(16980): {sigup} verified md5sum of maldet-sigpack.tgz Oct 16 2025 03:54:33 host2 maldet(16980): {sigup} unpacked and installed maldet-sigpack.tgz Oct 16 2025 03:54:33 host2 maldet(16980): {sigup} verified md5sum of maldet-clean.tgz Oct 16 2025 03:54:33 host2 maldet(16980): {sigup} unpacked and installed maldet-clean.tgz Oct 16 2025 03:54:33 host2 maldet(16980): {sigup} signature set update completed Oct 16 2025 03:54:33 host2 maldet(16980): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 16 2025 03:54:33 host2 maldet(17194): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 16 2025 03:54:33 host2 maldet(17194): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 16 2025 03:54:33 host2 maldet(17194): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Oct 16 2025 03:54:33 host2 maldet(17194): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 16 2025 03:54:34 host2 maldet(17194): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 16 2025 03:54:42 host2 maldet(17194): {scan} file list completed in 8s, found 240 files... Oct 16 2025 03:54:42 host2 maldet(17194): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 16 2025 03:54:42 host2 maldet(17194): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (240 files) in progress... Oct 16 2025 03:54:51 host2 maldet(17194): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 240, malware hits 0, cleaned hits 0, time 18s Oct 16 2025 03:54:51 host2 maldet(17194): {scan} scan report saved, to view run: maldet --report 251016-0354.17194 Oct 17 2025 04:02:42 host2 maldet(81512): {update} checking for available updates... Oct 17 2025 04:02:42 host2 maldet(81512): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 17 2025 04:02:42 host2 maldet(81512): {update} hashing install files and checking against server... Oct 17 2025 04:02:43 host2 maldet(81512): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 17 2025 04:02:43 host2 maldet(81512): {update} latest version already installed. Oct 17 2025 04:02:43 host2 maldet(81622): {sigup} performing signature update check... Oct 17 2025 04:02:43 host2 maldet(81622): {sigup} local signature set is version 20251016585547 Oct 17 2025 04:02:43 host2 maldet(81622): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 17 2025 04:02:43 host2 maldet(81622): {sigup} latest signature set already installed Oct 17 2025 04:02:43 host2 maldet(81710): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 17 2025 04:02:43 host2 maldet(81710): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 17 2025 04:02:43 host2 maldet(81710): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Oct 17 2025 04:02:43 host2 maldet(81710): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 17 2025 04:02:43 host2 maldet(81710): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 17 2025 04:02:50 host2 maldet(81710): {scan} file list completed in 7s, found 434 files... Oct 17 2025 04:02:50 host2 maldet(81710): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 17 2025 04:02:50 host2 maldet(81710): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (434 files) in progress... Oct 17 2025 04:02:57 host2 maldet(81710): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 434, malware hits 0, cleaned hits 0, time 14s Oct 17 2025 04:02:57 host2 maldet(81710): {scan} scan report saved, to view run: maldet --report 251017-0402.81710 Oct 18 2025 04:14:49 host2 maldet(57718): {update} checking for available updates... Oct 18 2025 04:14:49 host2 maldet(57718): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 18 2025 04:14:49 host2 maldet(57718): {update} hashing install files and checking against server... Oct 18 2025 04:14:50 host2 maldet(57718): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 18 2025 04:14:50 host2 maldet(57718): {update} latest version already installed. Oct 18 2025 04:14:50 host2 maldet(57831): {sigup} performing signature update check... Oct 18 2025 04:14:50 host2 maldet(57831): {sigup} local signature set is version 20251016585547 Oct 18 2025 04:14:50 host2 maldet(57831): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 18 2025 04:14:50 host2 maldet(57831): {sigup} latest signature set already installed Oct 18 2025 04:14:50 host2 maldet(57919): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 18 2025 04:14:50 host2 maldet(57919): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 18 2025 04:14:50 host2 maldet(57919): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Oct 18 2025 04:14:50 host2 maldet(57919): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 18 2025 04:14:50 host2 maldet(57919): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 18 2025 04:14:58 host2 maldet(57919): {scan} file list completed in 8s, found 215 files... Oct 18 2025 04:14:58 host2 maldet(57919): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 18 2025 04:14:58 host2 maldet(57919): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (215 files) in progress... Oct 18 2025 04:15:05 host2 maldet(57919): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 215, malware hits 0, cleaned hits 0, time 15s Oct 18 2025 04:15:05 host2 maldet(57919): {scan} scan report saved, to view run: maldet --report 251018-0414.57919 Oct 19 2025 03:50:00 host2 maldet(96925): {update} checking for available updates... Oct 19 2025 03:50:00 host2 maldet(96925): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 19 2025 03:50:00 host2 maldet(96925): {update} hashing install files and checking against server... Oct 19 2025 03:50:00 host2 maldet(96925): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 19 2025 03:50:00 host2 maldet(96925): {update} latest version already installed. Oct 19 2025 03:50:00 host2 maldet(97035): {sigup} performing signature update check... Oct 19 2025 03:50:00 host2 maldet(97035): {sigup} local signature set is version 20251016585547 Oct 19 2025 03:50:01 host2 maldet(97035): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 19 2025 03:50:01 host2 maldet(97035): {sigup} new signature set 202510191559092 available Oct 19 2025 03:50:01 host2 maldet(97035): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 19 2025 03:50:01 host2 maldet(97035): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 19 2025 03:50:01 host2 maldet(97035): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Oct 19 2025 03:50:01 host2 maldet(97035): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 19 2025 03:50:02 host2 maldet(97035): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 19 2025 03:50:02 host2 maldet(97035): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Oct 19 2025 03:50:02 host2 maldet(97035): {sigup} verified md5sum of maldet-sigpack.tgz Oct 19 2025 03:50:02 host2 maldet(97035): {sigup} unpacked and installed maldet-sigpack.tgz Oct 19 2025 03:50:02 host2 maldet(97035): {sigup} verified md5sum of maldet-clean.tgz Oct 19 2025 03:50:02 host2 maldet(97035): {sigup} unpacked and installed maldet-clean.tgz Oct 19 2025 03:50:02 host2 maldet(97035): {sigup} signature set update completed Oct 19 2025 03:50:02 host2 maldet(97035): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 19 2025 03:50:02 host2 maldet(97408): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 19 2025 03:50:02 host2 maldet(97408): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 19 2025 03:50:02 host2 maldet(97408): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Oct 19 2025 03:50:02 host2 maldet(97408): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 19 2025 03:50:02 host2 maldet(97408): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 19 2025 03:50:11 host2 maldet(97408): {scan} file list completed in 9s, found 198 files... Oct 19 2025 03:50:11 host2 maldet(97408): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 19 2025 03:50:11 host2 maldet(97408): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (198 files) in progress... Oct 19 2025 03:50:17 host2 maldet(97408): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 198, malware hits 0, cleaned hits 0, time 15s Oct 19 2025 03:50:17 host2 maldet(97408): {scan} scan report saved, to view run: maldet --report 251019-0350.97408 Oct 20 2025 04:04:14 host2 maldet(56456): {update} checking for available updates... Oct 20 2025 04:04:14 host2 maldet(56456): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 20 2025 04:04:14 host2 maldet(56456): {update} hashing install files and checking against server... Oct 20 2025 04:04:15 host2 maldet(56456): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 20 2025 04:04:15 host2 maldet(56456): {update} latest version already installed. Oct 20 2025 04:04:15 host2 maldet(56566): {sigup} performing signature update check... Oct 20 2025 04:04:15 host2 maldet(56566): {sigup} local signature set is version 202510191559092 Oct 20 2025 04:04:15 host2 maldet(56566): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 20 2025 04:04:15 host2 maldet(56566): {sigup} latest signature set already installed Oct 20 2025 04:04:15 host2 maldet(56655): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 20 2025 04:04:15 host2 maldet(56655): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 20 2025 04:04:15 host2 maldet(56655): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Oct 20 2025 04:04:15 host2 maldet(56655): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 20 2025 04:04:15 host2 maldet(56655): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 20 2025 04:04:22 host2 maldet(56655): {scan} file list completed in 7s, found 197 files... Oct 20 2025 04:04:22 host2 maldet(56655): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 20 2025 04:04:22 host2 maldet(56655): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (197 files) in progress... Oct 20 2025 04:04:26 host2 maldet(56655): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 197, malware hits 0, cleaned hits 0, time 11s Oct 20 2025 04:04:26 host2 maldet(56655): {scan} scan report saved, to view run: maldet --report 251020-0404.56655 Oct 21 2025 03:33:29 host2 maldet(89822): {update} checking for available updates... Oct 21 2025 03:33:29 host2 maldet(89822): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 21 2025 03:33:30 host2 maldet(89822): {update} hashing install files and checking against server... Oct 21 2025 03:33:30 host2 maldet(89822): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 21 2025 03:33:30 host2 maldet(89822): {update} latest version already installed. Oct 21 2025 03:33:30 host2 maldet(89932): {sigup} performing signature update check... Oct 21 2025 03:33:30 host2 maldet(89932): {sigup} local signature set is version 202510191559092 Oct 21 2025 03:33:30 host2 maldet(89932): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 21 2025 03:33:30 host2 maldet(89932): {sigup} latest signature set already installed Oct 21 2025 03:33:30 host2 maldet(90021): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 21 2025 03:33:30 host2 maldet(90021): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 21 2025 03:33:30 host2 maldet(90021): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Oct 21 2025 03:33:30 host2 maldet(90021): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 21 2025 03:33:30 host2 maldet(90021): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 21 2025 03:33:33 host2 maldet(90021): {scan} file list completed in 3s, found 209 files... Oct 21 2025 03:33:33 host2 maldet(90021): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 21 2025 03:33:33 host2 maldet(90021): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (209 files) in progress... Oct 21 2025 03:33:38 host2 maldet(90021): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 209, malware hits 0, cleaned hits 0, time 8s Oct 21 2025 03:33:38 host2 maldet(90021): {scan} scan report saved, to view run: maldet --report 251021-0333.90021 Oct 22 2025 03:30:44 host2 maldet(29386): {update} checking for available updates... Oct 22 2025 03:30:45 host2 maldet(29386): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 22 2025 03:30:45 host2 maldet(29386): {update} hashing install files and checking against server... Oct 22 2025 03:30:45 host2 maldet(29386): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 22 2025 03:30:45 host2 maldet(29386): {update} latest version already installed. Oct 22 2025 03:30:45 host2 maldet(29495): {sigup} performing signature update check... Oct 22 2025 03:30:45 host2 maldet(29495): {sigup} local signature set is version 202510191559092 Oct 22 2025 03:30:45 host2 maldet(29495): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 22 2025 03:30:45 host2 maldet(29495): {sigup} new signature set 202510222532165 available Oct 22 2025 03:30:45 host2 maldet(29495): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 22 2025 03:30:46 host2 maldet(29495): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 22 2025 03:30:46 host2 maldet(29495): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Oct 22 2025 03:30:46 host2 maldet(29495): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 22 2025 03:30:46 host2 maldet(29495): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 22 2025 03:30:46 host2 maldet(29495): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Oct 22 2025 03:30:46 host2 maldet(29495): {sigup} verified md5sum of maldet-sigpack.tgz Oct 22 2025 03:30:46 host2 maldet(29495): {sigup} unpacked and installed maldet-sigpack.tgz Oct 22 2025 03:30:47 host2 maldet(29495): {sigup} verified md5sum of maldet-clean.tgz Oct 22 2025 03:30:47 host2 maldet(29495): {sigup} unpacked and installed maldet-clean.tgz Oct 22 2025 03:30:47 host2 maldet(29495): {sigup} signature set update completed Oct 22 2025 03:30:47 host2 maldet(29495): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 22 2025 03:30:47 host2 maldet(29706): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 22 2025 03:30:47 host2 maldet(29706): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 22 2025 03:30:47 host2 maldet(29706): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Oct 22 2025 03:30:47 host2 maldet(29706): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 22 2025 03:30:47 host2 maldet(29706): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 22 2025 03:30:51 host2 maldet(29706): {scan} file list completed in 4s, found 358 files... Oct 22 2025 03:30:51 host2 maldet(29706): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 22 2025 03:30:51 host2 maldet(29706): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (358 files) in progress... Oct 22 2025 03:30:59 host2 maldet(29706): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 358, malware hits 0, cleaned hits 0, time 12s Oct 22 2025 03:30:59 host2 maldet(29706): {scan} scan report saved, to view run: maldet --report 251022-0330.29706 Oct 23 2025 03:46:03 host2 maldet(17418): {update} checking for available updates... Oct 23 2025 03:46:03 host2 maldet(17418): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 23 2025 03:46:03 host2 maldet(17418): {update} hashing install files and checking against server... Oct 23 2025 03:46:03 host2 maldet(17418): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 23 2025 03:46:03 host2 maldet(17418): {update} latest version already installed. Oct 23 2025 03:46:03 host2 maldet(17530): {sigup} performing signature update check... Oct 23 2025 03:46:03 host2 maldet(17530): {sigup} local signature set is version 202510222532165 Oct 23 2025 03:46:04 host2 maldet(17530): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 23 2025 03:46:04 host2 maldet(17530): {sigup} latest signature set already installed Oct 23 2025 03:46:04 host2 maldet(17618): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 23 2025 03:46:04 host2 maldet(17618): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 23 2025 03:46:04 host2 maldet(17618): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Oct 23 2025 03:46:04 host2 maldet(17618): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 23 2025 03:46:04 host2 maldet(17618): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 23 2025 03:46:12 host2 maldet(17618): {scan} file list completed in 8s, found 194 files... Oct 23 2025 03:46:12 host2 maldet(17618): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 23 2025 03:46:12 host2 maldet(17618): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (194 files) in progress... Oct 23 2025 03:46:20 host2 maldet(17618): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 194, malware hits 0, cleaned hits 0, time 16s Oct 23 2025 03:46:20 host2 maldet(17618): {scan} scan report saved, to view run: maldet --report 251023-0346.17618 Oct 24 2025 04:11:44 host2 maldet(78190): {update} checking for available updates... Oct 24 2025 04:11:44 host2 maldet(78190): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 24 2025 04:11:44 host2 maldet(78190): {update} hashing install files and checking against server... Oct 24 2025 04:11:44 host2 maldet(78190): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 24 2025 04:11:44 host2 maldet(78190): {update} latest version already installed. Oct 24 2025 04:11:44 host2 maldet(78300): {sigup} performing signature update check... Oct 24 2025 04:11:44 host2 maldet(78300): {sigup} local signature set is version 202510222532165 Oct 24 2025 04:11:44 host2 maldet(78300): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 24 2025 04:11:44 host2 maldet(78300): {sigup} latest signature set already installed Oct 24 2025 04:11:45 host2 maldet(78388): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 24 2025 04:11:45 host2 maldet(78388): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 24 2025 04:11:45 host2 maldet(78388): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Oct 24 2025 04:11:45 host2 maldet(78388): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 24 2025 04:11:45 host2 maldet(78388): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 24 2025 04:11:49 host2 maldet(78388): {scan} file list completed in 4s, found 246 files... Oct 24 2025 04:11:49 host2 maldet(78388): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 24 2025 04:11:49 host2 maldet(78388): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (246 files) in progress... Oct 24 2025 04:11:57 host2 maldet(78388): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 246, malware hits 0, cleaned hits 0, time 12s Oct 24 2025 04:11:57 host2 maldet(78388): {scan} scan report saved, to view run: maldet --report 251024-0411.78388 Oct 25 2025 04:18:39 host2 maldet(39925): {update} checking for available updates... Oct 25 2025 04:18:39 host2 maldet(39925): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 25 2025 04:18:39 host2 maldet(39925): {update} hashing install files and checking against server... Oct 25 2025 04:18:39 host2 maldet(39925): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 25 2025 04:18:39 host2 maldet(39925): {update} latest version already installed. Oct 25 2025 04:18:39 host2 maldet(40035): {sigup} performing signature update check... Oct 25 2025 04:18:39 host2 maldet(40035): {sigup} local signature set is version 202510222532165 Oct 25 2025 04:18:40 host2 maldet(40035): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 25 2025 04:18:40 host2 maldet(40035): {sigup} new signature set 202510253505547 available Oct 25 2025 04:18:40 host2 maldet(40035): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 25 2025 04:18:40 host2 maldet(40035): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 25 2025 04:18:40 host2 maldet(40035): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Oct 25 2025 04:18:40 host2 maldet(40035): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 25 2025 04:18:41 host2 maldet(40035): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 25 2025 04:18:41 host2 maldet(40035): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Oct 25 2025 04:18:41 host2 maldet(40035): {sigup} verified md5sum of maldet-sigpack.tgz Oct 25 2025 04:18:41 host2 maldet(40035): {sigup} unpacked and installed maldet-sigpack.tgz Oct 25 2025 04:18:41 host2 maldet(40035): {sigup} verified md5sum of maldet-clean.tgz Oct 25 2025 04:18:41 host2 maldet(40035): {sigup} unpacked and installed maldet-clean.tgz Oct 25 2025 04:18:41 host2 maldet(40035): {sigup} signature set update completed Oct 25 2025 04:18:41 host2 maldet(40035): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 25 2025 04:18:41 host2 maldet(40246): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 25 2025 04:18:41 host2 maldet(40246): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 25 2025 04:18:41 host2 maldet(40246): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Oct 25 2025 04:18:41 host2 maldet(40246): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 25 2025 04:18:41 host2 maldet(40246): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 25 2025 04:18:48 host2 maldet(40246): {scan} file list completed in 7s, found 376 files... Oct 25 2025 04:18:48 host2 maldet(40246): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 25 2025 04:18:48 host2 maldet(40246): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (376 files) in progress... Oct 25 2025 04:18:55 host2 maldet(40246): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 376, malware hits 0, cleaned hits 0, time 14s Oct 25 2025 04:18:55 host2 maldet(40246): {scan} scan report saved, to view run: maldet --report 251025-0418.40246 Oct 26 2025 04:13:24 host2 maldet(95773): {update} checking for available updates... Oct 26 2025 04:13:25 host2 maldet(95773): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 26 2025 04:13:25 host2 maldet(95773): {update} hashing install files and checking against server... Oct 26 2025 04:13:25 host2 maldet(95773): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 26 2025 04:13:25 host2 maldet(95773): {update} latest version already installed. Oct 26 2025 04:13:25 host2 maldet(95888): {sigup} performing signature update check... Oct 26 2025 04:13:25 host2 maldet(95888): {sigup} local signature set is version 202510253505547 Oct 26 2025 04:13:25 host2 maldet(95888): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 26 2025 04:13:25 host2 maldet(95888): {sigup} latest signature set already installed Oct 26 2025 04:13:25 host2 maldet(95976): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 26 2025 04:13:26 host2 maldet(95976): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 26 2025 04:13:26 host2 maldet(95976): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Oct 26 2025 04:13:26 host2 maldet(95976): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 26 2025 04:13:26 host2 maldet(95976): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 26 2025 04:13:31 host2 maldet(95976): {scan} file list completed in 5s, found 403 files... Oct 26 2025 04:13:31 host2 maldet(95976): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 26 2025 04:13:31 host2 maldet(95976): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (403 files) in progress... Oct 26 2025 04:13:38 host2 maldet(95976): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 403, malware hits 0, cleaned hits 0, time 13s Oct 26 2025 04:13:38 host2 maldet(95976): {scan} scan report saved, to view run: maldet --report 251026-0413.95976 Oct 27 2025 03:41:38 host2 maldet(44938): {update} checking for available updates... Oct 27 2025 03:41:39 host2 maldet(44938): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 27 2025 03:41:39 host2 maldet(44938): {update} hashing install files and checking against server... Oct 27 2025 03:41:39 host2 maldet(44938): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 27 2025 03:41:39 host2 maldet(44938): {update} latest version already installed. Oct 27 2025 03:41:39 host2 maldet(45051): {sigup} performing signature update check... Oct 27 2025 03:41:39 host2 maldet(45051): {sigup} local signature set is version 202510253505547 Oct 27 2025 03:41:39 host2 maldet(45051): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 27 2025 03:41:39 host2 maldet(45051): {sigup} latest signature set already installed Oct 27 2025 03:41:39 host2 maldet(45139): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 27 2025 03:41:39 host2 maldet(45139): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 27 2025 03:41:39 host2 maldet(45139): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Oct 27 2025 03:41:39 host2 maldet(45139): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 27 2025 03:41:39 host2 maldet(45139): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 27 2025 03:41:45 host2 maldet(45139): {scan} file list completed in 6s, found 171 files... Oct 27 2025 03:41:45 host2 maldet(45139): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 27 2025 03:41:45 host2 maldet(45139): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (171 files) in progress... Oct 27 2025 03:41:51 host2 maldet(45139): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 171, malware hits 0, cleaned hits 0, time 12s Oct 27 2025 03:41:51 host2 maldet(45139): {scan} scan report saved, to view run: maldet --report 251027-0341.45139 Oct 28 2025 04:03:35 host2 maldet(71903): {update} checking for available updates... Oct 28 2025 04:03:36 host2 maldet(71903): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 28 2025 04:03:36 host2 maldet(71903): {update} hashing install files and checking against server... Oct 28 2025 04:03:36 host2 maldet(71903): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 28 2025 04:03:36 host2 maldet(71903): {update} latest version already installed. Oct 28 2025 04:03:36 host2 maldet(72015): {sigup} performing signature update check... Oct 28 2025 04:03:36 host2 maldet(72015): {sigup} local signature set is version 202510253505547 Oct 28 2025 04:03:36 host2 maldet(72015): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 28 2025 04:03:36 host2 maldet(72015): {sigup} new signature set 20251028285016 available Oct 28 2025 04:03:36 host2 maldet(72015): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 28 2025 04:03:37 host2 maldet(72015): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 28 2025 04:03:37 host2 maldet(72015): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Oct 28 2025 04:03:37 host2 maldet(72015): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 28 2025 04:03:37 host2 maldet(72015): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 28 2025 04:03:37 host2 maldet(72015): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Oct 28 2025 04:03:37 host2 maldet(72015): {sigup} verified md5sum of maldet-sigpack.tgz Oct 28 2025 04:03:37 host2 maldet(72015): {sigup} unpacked and installed maldet-sigpack.tgz Oct 28 2025 04:03:38 host2 maldet(72015): {sigup} verified md5sum of maldet-clean.tgz Oct 28 2025 04:03:38 host2 maldet(72015): {sigup} unpacked and installed maldet-clean.tgz Oct 28 2025 04:03:38 host2 maldet(72015): {sigup} signature set update completed Oct 28 2025 04:03:38 host2 maldet(72015): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 28 2025 04:03:38 host2 maldet(72224): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 28 2025 04:03:38 host2 maldet(72224): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 28 2025 04:03:38 host2 maldet(72224): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Oct 28 2025 04:03:38 host2 maldet(72224): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 28 2025 04:03:38 host2 maldet(72224): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 28 2025 04:03:42 host2 maldet(72224): {scan} file list completed in 4s, found 143 files... Oct 28 2025 04:03:42 host2 maldet(72224): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 28 2025 04:03:42 host2 maldet(72224): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (143 files) in progress... Oct 28 2025 04:03:47 host2 maldet(72224): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 143, malware hits 0, cleaned hits 0, time 9s Oct 28 2025 04:03:47 host2 maldet(72224): {scan} scan report saved, to view run: maldet --report 251028-0403.72224 Oct 29 2025 04:01:15 host2 maldet(53655): {update} checking for available updates... Oct 29 2025 04:01:15 host2 maldet(53655): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 29 2025 04:01:15 host2 maldet(53655): {update} hashing install files and checking against server... Oct 29 2025 04:01:15 host2 maldet(53655): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 29 2025 04:01:15 host2 maldet(53655): {update} latest version already installed. Oct 29 2025 04:01:15 host2 maldet(53765): {sigup} performing signature update check... Oct 29 2025 04:01:15 host2 maldet(53765): {sigup} local signature set is version 20251028285016 Oct 29 2025 04:01:16 host2 maldet(53765): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 29 2025 04:01:16 host2 maldet(53765): {sigup} latest signature set already installed Oct 29 2025 04:01:16 host2 maldet(53853): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 29 2025 04:01:16 host2 maldet(53853): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 29 2025 04:01:16 host2 maldet(53853): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Oct 29 2025 04:01:16 host2 maldet(53853): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 29 2025 04:01:16 host2 maldet(53853): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 29 2025 04:01:21 host2 maldet(53853): {scan} file list completed in 5s, found 141 files... Oct 29 2025 04:01:21 host2 maldet(53853): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 29 2025 04:01:21 host2 maldet(53853): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (141 files) in progress... Oct 29 2025 04:01:25 host2 maldet(53853): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 141, malware hits 0, cleaned hits 0, time 9s Oct 29 2025 04:01:25 host2 maldet(53853): {scan} scan report saved, to view run: maldet --report 251029-0401.53853 Oct 30 2025 04:03:08 host2 maldet(23736): {update} checking for available updates... Oct 30 2025 04:03:08 host2 maldet(23736): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 30 2025 04:03:08 host2 maldet(23736): {update} hashing install files and checking against server... Oct 30 2025 04:03:08 host2 maldet(23736): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 30 2025 04:03:08 host2 maldet(23736): {update} latest version already installed. Oct 30 2025 04:03:08 host2 maldet(23848): {sigup} performing signature update check... Oct 30 2025 04:03:08 host2 maldet(23848): {sigup} local signature set is version 20251028285016 Oct 30 2025 04:03:09 host2 maldet(23848): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 30 2025 04:03:09 host2 maldet(23848): {sigup} latest signature set already installed Oct 30 2025 04:03:09 host2 maldet(23937): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 30 2025 04:03:09 host2 maldet(23937): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 30 2025 04:03:09 host2 maldet(23937): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Oct 30 2025 04:03:09 host2 maldet(23937): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 30 2025 04:03:09 host2 maldet(23937): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 30 2025 04:03:17 host2 maldet(23937): {scan} file list completed in 8s, found 238 files... Oct 30 2025 04:03:17 host2 maldet(23937): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 30 2025 04:03:17 host2 maldet(23937): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (238 files) in progress... Oct 30 2025 04:03:22 host2 maldet(23937): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 238, malware hits 0, cleaned hits 0, time 13s Oct 30 2025 04:03:22 host2 maldet(23937): {scan} scan report saved, to view run: maldet --report 251030-0403.23937 Oct 31 2025 03:57:41 host2 maldet(90991): {update} checking for available updates... Oct 31 2025 03:57:42 host2 maldet(90991): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 31 2025 03:57:42 host2 maldet(90991): {update} hashing install files and checking against server... Oct 31 2025 03:57:42 host2 maldet(90991): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 31 2025 03:57:42 host2 maldet(90991): {update} latest version already installed. Oct 31 2025 03:57:42 host2 maldet(91101): {sigup} performing signature update check... Oct 31 2025 03:57:42 host2 maldet(91101): {sigup} local signature set is version 20251028285016 Oct 31 2025 03:57:42 host2 maldet(91101): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 31 2025 03:57:42 host2 maldet(91101): {sigup} new signature set 20251031600486 available Oct 31 2025 03:57:42 host2 maldet(91101): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 31 2025 03:57:43 host2 maldet(91101): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 31 2025 03:57:43 host2 maldet(91101): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Oct 31 2025 03:57:43 host2 maldet(91101): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 31 2025 03:57:43 host2 maldet(91101): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 31 2025 03:57:43 host2 maldet(91101): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Oct 31 2025 03:57:43 host2 maldet(91101): {sigup} verified md5sum of maldet-sigpack.tgz Oct 31 2025 03:57:44 host2 maldet(91101): {sigup} unpacked and installed maldet-sigpack.tgz Oct 31 2025 03:57:44 host2 maldet(91101): {sigup} verified md5sum of maldet-clean.tgz Oct 31 2025 03:57:44 host2 maldet(91101): {sigup} unpacked and installed maldet-clean.tgz Oct 31 2025 03:57:44 host2 maldet(91101): {sigup} signature set update completed Oct 31 2025 03:57:44 host2 maldet(91101): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 31 2025 03:57:44 host2 maldet(91310): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 31 2025 03:57:44 host2 maldet(91310): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Oct 31 2025 03:57:44 host2 maldet(91310): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Oct 31 2025 03:57:44 host2 maldet(91310): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 31 2025 03:57:44 host2 maldet(91310): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 31 2025 03:57:50 host2 maldet(91310): {scan} file list completed in 5s, found 250 files... Oct 31 2025 03:57:50 host2 maldet(91310): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 31 2025 03:57:50 host2 maldet(91310): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (250 files) in progress... Oct 31 2025 03:57:56 host2 maldet(91310): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 250, malware hits 0, cleaned hits 0, time 12s Oct 31 2025 03:57:56 host2 maldet(91310): {scan} scan report saved, to view run: maldet --report 251031-0357.91310 Nov 01 2025 03:40:34 host2 maldet(50746): {update} checking for available updates... Nov 01 2025 03:40:34 host2 maldet(50746): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 01 2025 03:40:34 host2 maldet(50746): {update} hashing install files and checking against server... Nov 01 2025 03:40:35 host2 maldet(50746): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 01 2025 03:40:35 host2 maldet(50746): {update} latest version already installed. Nov 01 2025 03:40:35 host2 maldet(50855): {sigup} performing signature update check... Nov 01 2025 03:40:35 host2 maldet(50855): {sigup} local signature set is version 20251031600486 Nov 01 2025 03:40:35 host2 maldet(50855): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 01 2025 03:40:35 host2 maldet(50855): {sigup} new signature set 202511011342225 available Nov 01 2025 03:40:35 host2 maldet(50855): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 01 2025 03:40:35 host2 maldet(50855): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 01 2025 03:40:36 host2 maldet(50855): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Nov 01 2025 03:40:36 host2 maldet(50855): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 01 2025 03:40:36 host2 maldet(50855): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 01 2025 03:40:36 host2 maldet(50855): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Nov 01 2025 03:40:36 host2 maldet(50855): {sigup} verified md5sum of maldet-sigpack.tgz Nov 01 2025 03:40:36 host2 maldet(50855): {sigup} unpacked and installed maldet-sigpack.tgz Nov 01 2025 03:40:36 host2 maldet(50855): {sigup} verified md5sum of maldet-clean.tgz Nov 01 2025 03:40:36 host2 maldet(50855): {sigup} unpacked and installed maldet-clean.tgz Nov 01 2025 03:40:36 host2 maldet(50855): {sigup} signature set update completed Nov 01 2025 03:40:36 host2 maldet(50855): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 01 2025 03:40:36 host2 maldet(51062): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 01 2025 03:40:37 host2 maldet(51062): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 01 2025 03:40:37 host2 maldet(51062): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 01 2025 03:40:37 host2 maldet(51062): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 01 2025 03:40:37 host2 maldet(51062): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 01 2025 03:40:38 host2 maldet(51062): {scan} file list completed in 1s, found 497 files... Nov 01 2025 03:40:38 host2 maldet(51062): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 01 2025 03:40:38 host2 maldet(51062): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (497 files) in progress... Nov 01 2025 03:40:44 host2 maldet(51062): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 497, malware hits 0, cleaned hits 0, time 8s Nov 01 2025 03:40:44 host2 maldet(51062): {scan} scan report saved, to view run: maldet --report 251101-0340.51062 Nov 02 2025 03:39:38 host2 maldet(94068): {update} checking for available updates... Nov 02 2025 03:39:39 host2 maldet(94068): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 02 2025 03:39:39 host2 maldet(94068): {update} hashing install files and checking against server... Nov 02 2025 03:39:39 host2 maldet(94068): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 02 2025 03:39:39 host2 maldet(94068): {update} latest version already installed. Nov 02 2025 03:39:39 host2 maldet(94180): {sigup} performing signature update check... Nov 02 2025 03:39:39 host2 maldet(94180): {sigup} local signature set is version 202511011342225 Nov 02 2025 03:39:39 host2 maldet(94180): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 02 2025 03:39:39 host2 maldet(94180): {sigup} latest signature set already installed Nov 02 2025 03:39:39 host2 maldet(94271): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 02 2025 03:39:40 host2 maldet(94271): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 02 2025 03:39:40 host2 maldet(94271): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 02 2025 03:39:40 host2 maldet(94271): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 02 2025 03:39:40 host2 maldet(94271): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 02 2025 03:39:46 host2 maldet(94271): {scan} file list completed in 6s, found 220 files... Nov 02 2025 03:39:46 host2 maldet(94271): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 02 2025 03:39:46 host2 maldet(94271): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (220 files) in progress... Nov 02 2025 03:39:50 host2 maldet(94271): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 220, malware hits 0, cleaned hits 0, time 11s Nov 02 2025 03:39:50 host2 maldet(94271): {scan} scan report saved, to view run: maldet --report 251102-0339.94271 Nov 03 2025 04:40:47 host2 maldet(71285): {update} checking for available updates... Nov 03 2025 04:40:47 host2 maldet(71285): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 03 2025 04:40:47 host2 maldet(71285): {update} hashing install files and checking against server... Nov 03 2025 04:40:47 host2 maldet(71285): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 03 2025 04:40:47 host2 maldet(71285): {update} latest version already installed. Nov 03 2025 04:40:47 host2 maldet(71394): {sigup} performing signature update check... Nov 03 2025 04:40:47 host2 maldet(71394): {sigup} local signature set is version 202511011342225 Nov 03 2025 04:40:48 host2 maldet(71394): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 03 2025 04:40:48 host2 maldet(71394): {sigup} latest signature set already installed Nov 03 2025 04:40:48 host2 maldet(71484): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 03 2025 04:40:48 host2 maldet(71484): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 03 2025 04:40:48 host2 maldet(71484): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 03 2025 04:40:48 host2 maldet(71484): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 03 2025 04:40:48 host2 maldet(71484): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 03 2025 04:40:51 host2 maldet(71484): {scan} file list completed in 3s, found 467 files... Nov 03 2025 04:40:51 host2 maldet(71484): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 03 2025 04:40:51 host2 maldet(71484): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (467 files) in progress... Nov 03 2025 04:40:56 host2 maldet(71484): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 467, malware hits 0, cleaned hits 0, time 8s Nov 03 2025 04:40:56 host2 maldet(71484): {scan} scan report saved, to view run: maldet --report 251103-0440.71484 Nov 04 2025 04:08:05 host2 maldet(15616): {update} checking for available updates... Nov 04 2025 04:08:05 host2 maldet(15616): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 04 2025 04:08:05 host2 maldet(15616): {update} hashing install files and checking against server... Nov 04 2025 04:08:06 host2 maldet(15616): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 04 2025 04:08:06 host2 maldet(15616): {update} latest version already installed. Nov 04 2025 04:08:06 host2 maldet(15759): {sigup} performing signature update check... Nov 04 2025 04:08:06 host2 maldet(15759): {sigup} local signature set is version 202511011342225 Nov 04 2025 04:08:06 host2 maldet(15759): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 04 2025 04:08:06 host2 maldet(15759): {sigup} new signature set 20251104600740 available Nov 04 2025 04:08:06 host2 maldet(15759): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 04 2025 04:08:07 host2 maldet(15759): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 04 2025 04:08:07 host2 maldet(15759): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Nov 04 2025 04:08:07 host2 maldet(15759): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 04 2025 04:08:07 host2 maldet(15759): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 04 2025 04:08:07 host2 maldet(15759): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Nov 04 2025 04:08:07 host2 maldet(15759): {sigup} verified md5sum of maldet-sigpack.tgz Nov 04 2025 04:08:08 host2 maldet(15759): {sigup} unpacked and installed maldet-sigpack.tgz Nov 04 2025 04:08:08 host2 maldet(15759): {sigup} verified md5sum of maldet-clean.tgz Nov 04 2025 04:08:08 host2 maldet(15759): {sigup} unpacked and installed maldet-clean.tgz Nov 04 2025 04:08:08 host2 maldet(15759): {sigup} signature set update completed Nov 04 2025 04:08:08 host2 maldet(15759): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 04 2025 04:08:08 host2 maldet(15973): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 04 2025 04:08:08 host2 maldet(15973): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 04 2025 04:08:08 host2 maldet(15973): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 04 2025 04:08:08 host2 maldet(15973): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 04 2025 04:08:08 host2 maldet(15973): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 04 2025 04:08:15 host2 maldet(15973): {scan} file list completed in 7s, found 333 files... Nov 04 2025 04:08:15 host2 maldet(15973): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 04 2025 04:08:15 host2 maldet(15973): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (333 files) in progress... Nov 04 2025 04:08:24 host2 maldet(15973): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 333, malware hits 0, cleaned hits 0, time 16s Nov 04 2025 04:08:24 host2 maldet(15973): {scan} scan report saved, to view run: maldet --report 251104-0408.15973 Nov 05 2025 03:51:43 host2 maldet(64812): {update} checking for available updates... Nov 05 2025 03:51:43 host2 maldet(64812): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 05 2025 03:51:43 host2 maldet(64812): {update} hashing install files and checking against server... Nov 05 2025 03:51:43 host2 maldet(64812): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 05 2025 03:51:43 host2 maldet(64812): {update} latest version already installed. Nov 05 2025 03:51:43 host2 maldet(64922): {sigup} performing signature update check... Nov 05 2025 03:51:43 host2 maldet(64922): {sigup} local signature set is version 20251104600740 Nov 05 2025 03:51:44 host2 maldet(64922): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 05 2025 03:51:44 host2 maldet(64922): {sigup} latest signature set already installed Nov 05 2025 03:51:44 host2 maldet(65011): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 05 2025 03:51:44 host2 maldet(65011): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 05 2025 03:51:44 host2 maldet(65011): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 05 2025 03:51:44 host2 maldet(65011): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 05 2025 03:51:44 host2 maldet(65011): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 05 2025 03:51:50 host2 maldet(65011): {scan} file list completed in 6s, found 272 files... Nov 05 2025 03:51:50 host2 maldet(65011): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 05 2025 03:51:50 host2 maldet(65011): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (272 files) in progress... Nov 05 2025 03:51:54 host2 maldet(65011): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 272, malware hits 0, cleaned hits 0, time 10s Nov 05 2025 03:51:54 host2 maldet(65011): {scan} scan report saved, to view run: maldet --report 251105-0351.65011 Nov 06 2025 04:09:38 host2 maldet(19948): {update} checking for available updates... Nov 06 2025 04:09:39 host2 maldet(19948): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 06 2025 04:09:39 host2 maldet(19948): {update} hashing install files and checking against server... Nov 06 2025 04:09:39 host2 maldet(19948): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 06 2025 04:09:39 host2 maldet(19948): {update} latest version already installed. Nov 06 2025 04:09:39 host2 maldet(20057): {sigup} performing signature update check... Nov 06 2025 04:09:39 host2 maldet(20057): {sigup} local signature set is version 20251104600740 Nov 06 2025 04:09:39 host2 maldet(20057): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 06 2025 04:09:39 host2 maldet(20057): {sigup} latest signature set already installed Nov 06 2025 04:09:39 host2 maldet(20148): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 06 2025 04:09:40 host2 maldet(20148): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 06 2025 04:09:40 host2 maldet(20148): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 06 2025 04:09:40 host2 maldet(20148): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 06 2025 04:09:40 host2 maldet(20148): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 06 2025 04:09:44 host2 maldet(20148): {scan} file list completed in 4s, found 232 files... Nov 06 2025 04:09:44 host2 maldet(20148): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 06 2025 04:09:44 host2 maldet(20148): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (232 files) in progress... Nov 06 2025 04:09:54 host2 maldet(20148): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 232, malware hits 0, cleaned hits 0, time 15s Nov 06 2025 04:09:54 host2 maldet(20148): {scan} scan report saved, to view run: maldet --report 251106-0409.20148 Nov 07 2025 03:35:05 host2 maldet(98198): {update} checking for available updates... Nov 07 2025 03:35:06 host2 maldet(98198): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 07 2025 03:35:06 host2 maldet(98198): {update} hashing install files and checking against server... Nov 07 2025 03:35:06 host2 maldet(98198): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 07 2025 03:35:06 host2 maldet(98198): {update} latest version already installed. Nov 07 2025 03:35:06 host2 maldet(98324): {sigup} performing signature update check... Nov 07 2025 03:35:06 host2 maldet(98324): {sigup} local signature set is version 20251104600740 Nov 07 2025 03:35:06 host2 maldet(98324): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 07 2025 03:35:06 host2 maldet(98324): {sigup} new signature set 202511071572609 available Nov 07 2025 03:35:06 host2 maldet(98324): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 07 2025 03:35:07 host2 maldet(98324): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 07 2025 03:35:07 host2 maldet(98324): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Nov 07 2025 03:35:07 host2 maldet(98324): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 07 2025 03:35:08 host2 maldet(98324): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 07 2025 03:35:08 host2 maldet(98324): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Nov 07 2025 03:35:08 host2 maldet(98324): {sigup} verified md5sum of maldet-sigpack.tgz Nov 07 2025 03:35:08 host2 maldet(98324): {sigup} unpacked and installed maldet-sigpack.tgz Nov 07 2025 03:35:08 host2 maldet(98324): {sigup} verified md5sum of maldet-clean.tgz Nov 07 2025 03:35:08 host2 maldet(98324): {sigup} unpacked and installed maldet-clean.tgz Nov 07 2025 03:35:08 host2 maldet(98324): {sigup} signature set update completed Nov 07 2025 03:35:08 host2 maldet(98324): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 07 2025 03:35:08 host2 maldet(98538): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 07 2025 03:35:08 host2 maldet(98538): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 07 2025 03:35:08 host2 maldet(98538): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 07 2025 03:35:08 host2 maldet(98538): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 07 2025 03:35:08 host2 maldet(98538): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 07 2025 03:35:21 host2 maldet(98538): {scan} file list completed in 13s, found 255 files... Nov 07 2025 03:35:21 host2 maldet(98538): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 07 2025 03:35:21 host2 maldet(98538): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (255 files) in progress... Nov 07 2025 03:35:28 host2 maldet(98538): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 255, malware hits 0, cleaned hits 0, time 20s Nov 07 2025 03:35:28 host2 maldet(98538): {scan} scan report saved, to view run: maldet --report 251107-0335.98538 Nov 08 2025 04:10:59 host2 maldet(63962): {update} checking for available updates... Nov 08 2025 04:10:59 host2 maldet(63962): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 08 2025 04:10:59 host2 maldet(63962): {update} hashing install files and checking against server... Nov 08 2025 04:10:59 host2 maldet(63962): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 08 2025 04:10:59 host2 maldet(63962): {update} latest version already installed. Nov 08 2025 04:10:59 host2 maldet(64074): {sigup} performing signature update check... Nov 08 2025 04:10:59 host2 maldet(64074): {sigup} local signature set is version 202511071572609 Nov 08 2025 04:11:00 host2 maldet(64074): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 08 2025 04:11:00 host2 maldet(64074): {sigup} latest signature set already installed Nov 08 2025 04:11:00 host2 maldet(64162): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 08 2025 04:11:00 host2 maldet(64162): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 08 2025 04:11:00 host2 maldet(64162): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 08 2025 04:11:00 host2 maldet(64162): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 08 2025 04:11:00 host2 maldet(64162): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 08 2025 04:11:06 host2 maldet(64162): {scan} file list completed in 6s, found 124 files... Nov 08 2025 04:11:06 host2 maldet(64162): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 08 2025 04:11:06 host2 maldet(64162): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (124 files) in progress... Nov 08 2025 04:11:12 host2 maldet(64162): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 124, malware hits 0, cleaned hits 0, time 12s Nov 08 2025 04:11:12 host2 maldet(64162): {scan} scan report saved, to view run: maldet --report 251108-0411.64162 Nov 09 2025 03:54:02 host2 maldet(37917): {update} checking for available updates... Nov 09 2025 03:54:02 host2 maldet(37917): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 09 2025 03:54:02 host2 maldet(37917): {update} hashing install files and checking against server... Nov 09 2025 03:54:02 host2 maldet(37917): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 09 2025 03:54:02 host2 maldet(37917): {update} latest version already installed. Nov 09 2025 03:54:03 host2 maldet(38031): {sigup} performing signature update check... Nov 09 2025 03:54:03 host2 maldet(38031): {sigup} local signature set is version 202511071572609 Nov 09 2025 03:54:03 host2 maldet(38031): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 09 2025 03:54:03 host2 maldet(38031): {sigup} latest signature set already installed Nov 09 2025 03:54:03 host2 maldet(38120): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 09 2025 03:54:03 host2 maldet(38120): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 09 2025 03:54:03 host2 maldet(38120): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 09 2025 03:54:03 host2 maldet(38120): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 09 2025 03:54:03 host2 maldet(38120): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 09 2025 03:54:09 host2 maldet(38120): {scan} file list completed in 6s, found 407 files... Nov 09 2025 03:54:09 host2 maldet(38120): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 09 2025 03:54:09 host2 maldet(38120): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (407 files) in progress... Nov 09 2025 03:54:18 host2 maldet(38120): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 407, malware hits 0, cleaned hits 0, time 15s Nov 09 2025 03:54:18 host2 maldet(38120): {scan} scan report saved, to view run: maldet --report 251109-0354.38120 Nov 10 2025 04:23:08 host2 maldet(85565): {update} checking for available updates... Nov 10 2025 04:23:08 host2 maldet(85565): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 10 2025 04:23:08 host2 maldet(85565): {update} hashing install files and checking against server... Nov 10 2025 04:23:09 host2 maldet(85565): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 10 2025 04:23:09 host2 maldet(85565): {update} latest version already installed. Nov 10 2025 04:23:09 host2 maldet(85677): {sigup} performing signature update check... Nov 10 2025 04:23:09 host2 maldet(85677): {sigup} local signature set is version 202511071572609 Nov 10 2025 04:23:09 host2 maldet(85677): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 10 2025 04:23:09 host2 maldet(85677): {sigup} new signature set 20251110477208 available Nov 10 2025 04:23:09 host2 maldet(85677): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 10 2025 04:23:09 host2 maldet(85677): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 10 2025 04:23:10 host2 maldet(85677): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Nov 10 2025 04:23:10 host2 maldet(85677): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 10 2025 04:23:10 host2 maldet(85677): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 10 2025 04:23:10 host2 maldet(85677): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Nov 10 2025 04:23:10 host2 maldet(85677): {sigup} verified md5sum of maldet-sigpack.tgz Nov 10 2025 04:23:10 host2 maldet(85677): {sigup} unpacked and installed maldet-sigpack.tgz Nov 10 2025 04:23:10 host2 maldet(85677): {sigup} verified md5sum of maldet-clean.tgz Nov 10 2025 04:23:10 host2 maldet(85677): {sigup} unpacked and installed maldet-clean.tgz Nov 10 2025 04:23:10 host2 maldet(85677): {sigup} signature set update completed Nov 10 2025 04:23:10 host2 maldet(85677): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 10 2025 04:23:10 host2 maldet(85894): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 10 2025 04:23:10 host2 maldet(85894): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 10 2025 04:23:10 host2 maldet(85894): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 10 2025 04:23:10 host2 maldet(85894): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 10 2025 04:23:10 host2 maldet(85894): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 10 2025 04:23:18 host2 maldet(85894): {scan} file list completed in 8s, found 136 files... Nov 10 2025 04:23:18 host2 maldet(85894): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 10 2025 04:23:18 host2 maldet(85894): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (136 files) in progress... Nov 10 2025 04:23:23 host2 maldet(85894): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 136, malware hits 0, cleaned hits 0, time 13s Nov 10 2025 04:23:23 host2 maldet(85894): {scan} scan report saved, to view run: maldet --report 251110-0423.85894 Nov 11 2025 03:49:00 host2 maldet(1643): {update} checking for available updates... Nov 11 2025 03:49:00 host2 maldet(1643): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 11 2025 03:49:00 host2 maldet(1643): {update} hashing install files and checking against server... Nov 11 2025 03:49:00 host2 maldet(1643): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 11 2025 03:49:00 host2 maldet(1643): {update} latest version already installed. Nov 11 2025 03:49:01 host2 maldet(1756): {sigup} performing signature update check... Nov 11 2025 03:49:01 host2 maldet(1756): {sigup} local signature set is version 20251110477208 Nov 11 2025 03:49:01 host2 maldet(1756): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 11 2025 03:49:01 host2 maldet(1756): {sigup} latest signature set already installed Nov 11 2025 03:49:01 host2 maldet(1895): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 11 2025 03:49:01 host2 maldet(1895): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 11 2025 03:49:01 host2 maldet(1895): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 11 2025 03:49:01 host2 maldet(1895): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 11 2025 03:49:01 host2 maldet(1895): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 11 2025 03:49:10 host2 maldet(1895): {scan} file list completed in 9s, found 179 files... Nov 11 2025 03:49:10 host2 maldet(1895): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 11 2025 03:49:10 host2 maldet(1895): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (179 files) in progress... Nov 11 2025 03:49:18 host2 maldet(1895): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 179, malware hits 0, cleaned hits 0, time 17s Nov 11 2025 03:49:18 host2 maldet(1895): {scan} scan report saved, to view run: maldet --report 251111-0349.1895 Nov 12 2025 03:44:46 host2 maldet(44496): {update} checking for available updates... Nov 12 2025 03:44:46 host2 maldet(44496): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 12 2025 03:44:46 host2 maldet(44496): {update} hashing install files and checking against server... Nov 12 2025 03:44:47 host2 maldet(44496): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 12 2025 03:44:47 host2 maldet(44496): {update} latest version already installed. Nov 12 2025 03:44:47 host2 maldet(44611): {sigup} performing signature update check... Nov 12 2025 03:44:47 host2 maldet(44611): {sigup} local signature set is version 20251110477208 Nov 12 2025 03:44:47 host2 maldet(44611): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 12 2025 03:44:47 host2 maldet(44611): {sigup} latest signature set already installed Nov 12 2025 03:44:47 host2 maldet(44699): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 12 2025 03:44:47 host2 maldet(44699): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 12 2025 03:44:47 host2 maldet(44699): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 12 2025 03:44:47 host2 maldet(44699): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 12 2025 03:44:47 host2 maldet(44699): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 12 2025 03:44:52 host2 maldet(44699): {scan} file list completed in 5s, found 533 files... Nov 12 2025 03:44:52 host2 maldet(44699): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 12 2025 03:44:53 host2 maldet(44699): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (533 files) in progress... Nov 12 2025 03:45:00 host2 maldet(44699): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 533, malware hits 0, cleaned hits 0, time 13s Nov 12 2025 03:45:00 host2 maldet(44699): {scan} scan report saved, to view run: maldet --report 251112-0344.44699 Nov 13 2025 03:52:03 host2 maldet(7429): {update} checking for available updates... Nov 13 2025 03:52:04 host2 maldet(7429): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 13 2025 03:52:04 host2 maldet(7429): {update} hashing install files and checking against server... Nov 13 2025 03:52:04 host2 maldet(7429): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 13 2025 03:52:04 host2 maldet(7429): {update} latest version already installed. Nov 13 2025 03:52:04 host2 maldet(7540): {sigup} performing signature update check... Nov 13 2025 03:52:04 host2 maldet(7540): {sigup} local signature set is version 20251110477208 Nov 13 2025 03:52:04 host2 maldet(7540): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 13 2025 03:52:04 host2 maldet(7540): {sigup} new signature set 202511131448686 available Nov 13 2025 03:52:04 host2 maldet(7540): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 13 2025 03:52:05 host2 maldet(7540): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 13 2025 03:52:05 host2 maldet(7540): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Nov 13 2025 03:52:05 host2 maldet(7540): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 13 2025 03:52:05 host2 maldet(7540): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 13 2025 03:52:06 host2 maldet(7540): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Nov 13 2025 03:52:06 host2 maldet(7540): {sigup} verified md5sum of maldet-sigpack.tgz Nov 13 2025 03:52:06 host2 maldet(7540): {sigup} unpacked and installed maldet-sigpack.tgz Nov 13 2025 03:52:06 host2 maldet(7540): {sigup} verified md5sum of maldet-clean.tgz Nov 13 2025 03:52:06 host2 maldet(7540): {sigup} unpacked and installed maldet-clean.tgz Nov 13 2025 03:52:06 host2 maldet(7540): {sigup} signature set update completed Nov 13 2025 03:52:06 host2 maldet(7540): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 13 2025 03:52:06 host2 maldet(7785): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 13 2025 03:52:06 host2 maldet(7785): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 13 2025 03:52:06 host2 maldet(7785): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 13 2025 03:52:06 host2 maldet(7785): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 13 2025 03:52:06 host2 maldet(7785): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 13 2025 03:52:14 host2 maldet(7785): {scan} file list completed in 8s, found 78 files... Nov 13 2025 03:52:14 host2 maldet(7785): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 13 2025 03:52:14 host2 maldet(7785): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (78 files) in progress... Nov 13 2025 03:52:19 host2 maldet(7785): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 78, malware hits 0, cleaned hits 0, time 13s Nov 13 2025 03:52:19 host2 maldet(7785): {scan} scan report saved, to view run: maldet --report 251113-0352.7785 Nov 14 2025 03:24:10 host2 maldet(33049): {update} checking for available updates... Nov 14 2025 03:24:11 host2 maldet(33049): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 14 2025 03:24:11 host2 maldet(33049): {update} hashing install files and checking against server... Nov 14 2025 03:24:11 host2 maldet(33049): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 14 2025 03:24:11 host2 maldet(33049): {update} latest version already installed. Nov 14 2025 03:24:11 host2 maldet(33161): {sigup} performing signature update check... Nov 14 2025 03:24:11 host2 maldet(33161): {sigup} local signature set is version 202511131448686 Nov 14 2025 03:24:11 host2 maldet(33161): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 14 2025 03:24:11 host2 maldet(33161): {sigup} latest signature set already installed Nov 14 2025 03:24:11 host2 maldet(33250): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 14 2025 03:24:11 host2 maldet(33250): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 14 2025 03:24:11 host2 maldet(33250): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 14 2025 03:24:11 host2 maldet(33250): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 14 2025 03:24:11 host2 maldet(33250): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 14 2025 03:24:17 host2 maldet(33250): {scan} file list completed in 6s, found 583 files... Nov 14 2025 03:24:17 host2 maldet(33250): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 14 2025 03:24:17 host2 maldet(33250): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (583 files) in progress... Nov 14 2025 03:24:22 host2 maldet(33250): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Nov 14 2025 03:24:22 host2 maldet(33250): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 583, malware hits 0, cleaned hits 0, time 11s Nov 14 2025 03:24:22 host2 maldet(33250): {scan} scan report saved, to view run: maldet --report 251114-0324.33250 Nov 15 2025 04:08:12 host2 maldet(37350): {update} checking for available updates... Nov 15 2025 04:08:13 host2 maldet(37350): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 15 2025 04:08:13 host2 maldet(37350): {update} hashing install files and checking against server... Nov 15 2025 04:08:13 host2 maldet(37350): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 15 2025 04:08:13 host2 maldet(37350): {update} latest version already installed. Nov 15 2025 04:08:13 host2 maldet(37461): {sigup} performing signature update check... Nov 15 2025 04:08:13 host2 maldet(37461): {sigup} local signature set is version 202511131448686 Nov 15 2025 04:08:13 host2 maldet(37461): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 15 2025 04:08:13 host2 maldet(37461): {sigup} latest signature set already installed Nov 15 2025 04:08:13 host2 maldet(37550): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 15 2025 04:08:14 host2 maldet(37550): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 15 2025 04:08:14 host2 maldet(37550): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 15 2025 04:08:14 host2 maldet(37550): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 15 2025 04:08:14 host2 maldet(37550): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 15 2025 04:08:17 host2 maldet(37550): {scan} file list completed in 3s, found 186 files... Nov 15 2025 04:08:17 host2 maldet(37550): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 15 2025 04:08:17 host2 maldet(37550): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (186 files) in progress... Nov 15 2025 04:08:23 host2 maldet(37550): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 186, malware hits 0, cleaned hits 0, time 10s Nov 15 2025 04:08:23 host2 maldet(37550): {scan} scan report saved, to view run: maldet --report 251115-0408.37550 Nov 16 2025 04:40:57 host2 maldet(47351): {update} checking for available updates... Nov 16 2025 04:40:57 host2 maldet(47351): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 16 2025 04:40:57 host2 maldet(47351): {update} hashing install files and checking against server... Nov 16 2025 04:40:57 host2 maldet(47351): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 16 2025 04:40:57 host2 maldet(47351): {update} latest version already installed. Nov 16 2025 04:40:57 host2 maldet(47468): {sigup} performing signature update check... Nov 16 2025 04:40:57 host2 maldet(47468): {sigup} local signature set is version 202511131448686 Nov 16 2025 04:40:57 host2 maldet(47468): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 16 2025 04:40:57 host2 maldet(47468): {sigup} new signature set 202511162420078 available Nov 16 2025 04:40:57 host2 maldet(47468): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 16 2025 04:40:58 host2 maldet(47468): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 16 2025 04:40:58 host2 maldet(47468): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Nov 16 2025 04:40:58 host2 maldet(47468): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 16 2025 04:40:58 host2 maldet(47468): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 16 2025 04:40:59 host2 maldet(47468): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Nov 16 2025 04:40:59 host2 maldet(47468): {sigup} verified md5sum of maldet-sigpack.tgz Nov 16 2025 04:40:59 host2 maldet(47468): {sigup} unpacked and installed maldet-sigpack.tgz Nov 16 2025 04:40:59 host2 maldet(47468): {sigup} verified md5sum of maldet-clean.tgz Nov 16 2025 04:40:59 host2 maldet(47468): {sigup} unpacked and installed maldet-clean.tgz Nov 16 2025 04:40:59 host2 maldet(47468): {sigup} signature set update completed Nov 16 2025 04:40:59 host2 maldet(47468): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 16 2025 04:40:59 host2 maldet(47682): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 16 2025 04:40:59 host2 maldet(47682): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 16 2025 04:40:59 host2 maldet(47682): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 16 2025 04:40:59 host2 maldet(47682): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 16 2025 04:40:59 host2 maldet(47682): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 16 2025 04:41:08 host2 maldet(47682): {scan} file list completed in 9s, found 118 files... Nov 16 2025 04:41:08 host2 maldet(47682): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 16 2025 04:41:08 host2 maldet(47682): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (118 files) in progress... Nov 16 2025 04:41:16 host2 maldet(47682): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 118, malware hits 0, cleaned hits 0, time 17s Nov 16 2025 04:41:16 host2 maldet(47682): {scan} scan report saved, to view run: maldet --report 251116-0440.47682 Nov 17 2025 03:59:06 host2 maldet(76400): {update} checking for available updates... Nov 17 2025 03:59:07 host2 maldet(76400): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 17 2025 03:59:07 host2 maldet(76400): {update} hashing install files and checking against server... Nov 17 2025 03:59:07 host2 maldet(76400): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 17 2025 03:59:07 host2 maldet(76400): {update} latest version already installed. Nov 17 2025 03:59:07 host2 maldet(76545): {sigup} performing signature update check... Nov 17 2025 03:59:07 host2 maldet(76545): {sigup} local signature set is version 202511162420078 Nov 17 2025 03:59:07 host2 maldet(76545): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 17 2025 03:59:07 host2 maldet(76545): {sigup} latest signature set already installed Nov 17 2025 03:59:07 host2 maldet(76660): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 17 2025 03:59:08 host2 maldet(76660): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 17 2025 03:59:08 host2 maldet(76660): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 17 2025 03:59:08 host2 maldet(76660): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 17 2025 03:59:08 host2 maldet(76660): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 17 2025 03:59:11 host2 maldet(76660): {scan} file list completed in 3s, found 488 files... Nov 17 2025 03:59:11 host2 maldet(76660): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 17 2025 03:59:11 host2 maldet(76660): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (488 files) in progress... Nov 17 2025 03:59:20 host2 maldet(76660): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 488, malware hits 0, cleaned hits 0, time 13s Nov 17 2025 03:59:20 host2 maldet(76660): {scan} scan report saved, to view run: maldet --report 251117-0359.76660 Nov 18 2025 03:59:51 host2 maldet(29781): {update} checking for available updates... Nov 18 2025 03:59:51 host2 maldet(29781): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 18 2025 03:59:51 host2 maldet(29781): {update} hashing install files and checking against server... Nov 18 2025 03:59:52 host2 maldet(29781): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 18 2025 03:59:52 host2 maldet(29781): {update} latest version already installed. Nov 18 2025 03:59:52 host2 maldet(29897): {sigup} performing signature update check... Nov 18 2025 03:59:52 host2 maldet(29897): {sigup} local signature set is version 202511162420078 Nov 18 2025 03:59:52 host2 maldet(29897): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 18 2025 03:59:52 host2 maldet(29897): {sigup} latest signature set already installed Nov 18 2025 03:59:52 host2 maldet(29985): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 18 2025 03:59:52 host2 maldet(29985): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 18 2025 03:59:52 host2 maldet(29985): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 18 2025 03:59:52 host2 maldet(29985): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 18 2025 03:59:52 host2 maldet(29985): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 18 2025 03:59:55 host2 maldet(29985): {scan} file list completed in 3s, found 230 files... Nov 18 2025 03:59:55 host2 maldet(29985): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 18 2025 03:59:55 host2 maldet(29985): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (230 files) in progress... Nov 18 2025 04:00:04 host2 maldet(29985): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 230, malware hits 0, cleaned hits 0, time 12s Nov 18 2025 04:00:04 host2 maldet(29985): {scan} scan report saved, to view run: maldet --report 251118-0359.29985 Nov 19 2025 03:47:12 host2 maldet(2214): {update} checking for available updates... Nov 19 2025 03:47:12 host2 maldet(2214): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 19 2025 03:47:12 host2 maldet(2214): {update} hashing install files and checking against server... Nov 19 2025 03:47:12 host2 maldet(2214): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 19 2025 03:47:12 host2 maldet(2214): {update} latest version already installed. Nov 19 2025 03:47:12 host2 maldet(2326): {sigup} performing signature update check... Nov 19 2025 03:47:12 host2 maldet(2326): {sigup} local signature set is version 202511162420078 Nov 19 2025 03:47:12 host2 maldet(2326): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 19 2025 03:47:12 host2 maldet(2326): {sigup} latest signature set already installed Nov 19 2025 03:47:13 host2 maldet(2414): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 19 2025 03:47:13 host2 maldet(2414): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 19 2025 03:47:13 host2 maldet(2414): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 19 2025 03:47:13 host2 maldet(2414): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 19 2025 03:47:13 host2 maldet(2414): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 19 2025 03:47:20 host2 maldet(2414): {scan} file list completed in 7s, found 694 files... Nov 19 2025 03:47:20 host2 maldet(2414): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 19 2025 03:47:20 host2 maldet(2414): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (694 files) in progress... Nov 19 2025 03:47:29 host2 maldet(2414): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 694, malware hits 0, cleaned hits 0, time 16s Nov 19 2025 03:47:29 host2 maldet(2414): {scan} scan report saved, to view run: maldet --report 251119-0347.2414 Nov 20 2025 04:40:00 host2 maldet(18045): {update} checking for available updates... Nov 20 2025 04:40:01 host2 maldet(18045): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 20 2025 04:40:01 host2 maldet(18045): {update} hashing install files and checking against server... Nov 20 2025 04:40:01 host2 maldet(18045): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 20 2025 04:40:01 host2 maldet(18045): {update} latest version already installed. Nov 20 2025 04:40:01 host2 maldet(18155): {sigup} performing signature update check... Nov 20 2025 04:40:01 host2 maldet(18155): {sigup} local signature set is version 202511162420078 Nov 20 2025 04:40:01 host2 maldet(18155): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 20 2025 04:40:01 host2 maldet(18155): {sigup} latest signature set already installed Nov 20 2025 04:40:02 host2 maldet(18400): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 20 2025 04:40:02 host2 maldet(18400): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 20 2025 04:40:02 host2 maldet(18400): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 20 2025 04:40:02 host2 maldet(18400): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 20 2025 04:40:02 host2 maldet(18400): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 20 2025 04:40:12 host2 maldet(18400): {scan} file list completed in 10s, found 101 files... Nov 20 2025 04:40:12 host2 maldet(18400): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 20 2025 04:40:12 host2 maldet(18400): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (101 files) in progress... Nov 20 2025 04:40:18 host2 maldet(18400): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 101, malware hits 0, cleaned hits 0, time 16s Nov 20 2025 04:40:18 host2 maldet(18400): {scan} scan report saved, to view run: maldet --report 251120-0440.18400 Nov 21 2025 04:03:30 host2 maldet(39900): {update} checking for available updates... Nov 21 2025 04:03:30 host2 maldet(39900): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 21 2025 04:03:30 host2 maldet(39900): {update} hashing install files and checking against server... Nov 21 2025 04:03:30 host2 maldet(39900): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 21 2025 04:03:30 host2 maldet(39900): {update} latest version already installed. Nov 21 2025 04:03:30 host2 maldet(40013): {sigup} performing signature update check... Nov 21 2025 04:03:30 host2 maldet(40013): {sigup} local signature set is version 202511162420078 Nov 21 2025 04:03:30 host2 maldet(40013): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 21 2025 04:03:30 host2 maldet(40013): {sigup} latest signature set already installed Nov 21 2025 04:03:30 host2 maldet(40101): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 21 2025 04:03:31 host2 maldet(40101): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 21 2025 04:03:31 host2 maldet(40101): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 21 2025 04:03:31 host2 maldet(40101): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 21 2025 04:03:31 host2 maldet(40101): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 21 2025 04:03:37 host2 maldet(40101): {scan} file list completed in 6s, found 350 files... Nov 21 2025 04:03:37 host2 maldet(40101): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 21 2025 04:03:37 host2 maldet(40101): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (350 files) in progress... Nov 21 2025 04:03:45 host2 maldet(40101): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 350, malware hits 0, cleaned hits 0, time 15s Nov 21 2025 04:03:45 host2 maldet(40101): {scan} scan report saved, to view run: maldet --report 251121-0403.40101 Nov 22 2025 03:51:05 host2 maldet(20498): {update} checking for available updates... Nov 22 2025 03:51:05 host2 maldet(20498): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 22 2025 03:51:05 host2 maldet(20498): {update} hashing install files and checking against server... Nov 22 2025 03:51:05 host2 maldet(20498): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 22 2025 03:51:05 host2 maldet(20498): {update} latest version already installed. Nov 22 2025 03:51:05 host2 maldet(20613): {sigup} performing signature update check... Nov 22 2025 03:51:05 host2 maldet(20613): {sigup} local signature set is version 202511162420078 Nov 22 2025 03:51:06 host2 maldet(20613): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 22 2025 03:51:06 host2 maldet(20613): {sigup} new signature set 20251122699816 available Nov 22 2025 03:51:06 host2 maldet(20613): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 22 2025 03:51:06 host2 maldet(20613): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 22 2025 03:51:06 host2 maldet(20613): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Nov 22 2025 03:51:06 host2 maldet(20613): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 22 2025 03:51:07 host2 maldet(20613): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 22 2025 03:51:07 host2 maldet(20613): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Nov 22 2025 03:51:07 host2 maldet(20613): {sigup} verified md5sum of maldet-sigpack.tgz Nov 22 2025 03:51:07 host2 maldet(20613): {sigup} unpacked and installed maldet-sigpack.tgz Nov 22 2025 03:51:07 host2 maldet(20613): {sigup} verified md5sum of maldet-clean.tgz Nov 22 2025 03:51:07 host2 maldet(20613): {sigup} unpacked and installed maldet-clean.tgz Nov 22 2025 03:51:07 host2 maldet(20613): {sigup} signature set update completed Nov 22 2025 03:51:07 host2 maldet(20613): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 22 2025 03:51:07 host2 maldet(20843): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 22 2025 03:51:08 host2 maldet(20843): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 22 2025 03:51:08 host2 maldet(20843): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 22 2025 03:51:08 host2 maldet(20843): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 22 2025 03:51:08 host2 maldet(20843): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 22 2025 03:51:16 host2 maldet(20843): {scan} file list completed in 8s, found 130 files... Nov 22 2025 03:51:16 host2 maldet(20843): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 22 2025 03:51:16 host2 maldet(20843): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (130 files) in progress... Nov 22 2025 03:51:23 host2 maldet(20843): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 130, malware hits 0, cleaned hits 0, time 16s Nov 22 2025 03:51:23 host2 maldet(20843): {scan} scan report saved, to view run: maldet --report 251122-0351.20843 Nov 23 2025 03:26:15 host2 maldet(30772): {update} checking for available updates... Nov 23 2025 03:26:15 host2 maldet(30772): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 23 2025 03:26:15 host2 maldet(30772): {update} hashing install files and checking against server... Nov 23 2025 03:26:15 host2 maldet(30772): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 23 2025 03:26:15 host2 maldet(30772): {update} latest version already installed. Nov 23 2025 03:26:16 host2 maldet(30885): {sigup} performing signature update check... Nov 23 2025 03:26:16 host2 maldet(30885): {sigup} local signature set is version 20251122699816 Nov 23 2025 03:26:16 host2 maldet(30885): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 23 2025 03:26:16 host2 maldet(30885): {sigup} latest signature set already installed Nov 23 2025 03:26:16 host2 maldet(30974): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 23 2025 03:26:16 host2 maldet(30974): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 23 2025 03:26:16 host2 maldet(30974): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 23 2025 03:26:16 host2 maldet(30974): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 23 2025 03:26:16 host2 maldet(30974): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 23 2025 03:26:25 host2 maldet(30974): {scan} file list completed in 9s, found 233 files... Nov 23 2025 03:26:25 host2 maldet(30974): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 23 2025 03:26:25 host2 maldet(30974): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (233 files) in progress... Nov 23 2025 03:26:36 host2 maldet(30974): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 233, malware hits 0, cleaned hits 0, time 20s Nov 23 2025 03:26:36 host2 maldet(30974): {scan} scan report saved, to view run: maldet --report 251123-0326.30974 Nov 24 2025 03:30:59 host2 maldet(3892): {update} checking for available updates... Nov 24 2025 03:30:59 host2 maldet(3892): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 24 2025 03:30:59 host2 maldet(3892): {update} hashing install files and checking against server... Nov 24 2025 03:30:59 host2 maldet(3892): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 24 2025 03:30:59 host2 maldet(3892): {update} latest version already installed. Nov 24 2025 03:30:59 host2 maldet(4007): {sigup} performing signature update check... Nov 24 2025 03:30:59 host2 maldet(4007): {sigup} local signature set is version 20251122699816 Nov 24 2025 03:31:00 host2 maldet(4007): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 24 2025 03:31:00 host2 maldet(4007): {sigup} latest signature set already installed Nov 24 2025 03:31:00 host2 maldet(4095): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 24 2025 03:31:00 host2 maldet(4095): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 24 2025 03:31:00 host2 maldet(4095): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 24 2025 03:31:00 host2 maldet(4095): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 24 2025 03:31:00 host2 maldet(4095): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 24 2025 03:31:14 host2 maldet(4095): {scan} file list completed in 14s, found 147 files... Nov 24 2025 03:31:14 host2 maldet(4095): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 24 2025 03:31:14 host2 maldet(4095): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (147 files) in progress... Nov 24 2025 03:31:18 host2 maldet(4095): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 147, malware hits 0, cleaned hits 0, time 18s Nov 24 2025 03:31:18 host2 maldet(4095): {scan} scan report saved, to view run: maldet --report 251124-0331.4095 Nov 25 2025 04:09:16 host2 maldet(30816): {update} checking for available updates... Nov 25 2025 04:09:16 host2 maldet(30816): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 25 2025 04:09:16 host2 maldet(30816): {update} hashing install files and checking against server... Nov 25 2025 04:09:17 host2 maldet(30816): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 25 2025 04:09:17 host2 maldet(30816): {update} latest version already installed. Nov 25 2025 04:09:17 host2 maldet(30926): {sigup} performing signature update check... Nov 25 2025 04:09:17 host2 maldet(30926): {sigup} local signature set is version 20251122699816 Nov 25 2025 04:09:17 host2 maldet(30926): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 25 2025 04:09:17 host2 maldet(30926): {sigup} new signature set 202511251727973 available Nov 25 2025 04:09:17 host2 maldet(30926): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 25 2025 04:09:17 host2 maldet(30926): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 25 2025 04:09:18 host2 maldet(30926): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Nov 25 2025 04:09:18 host2 maldet(30926): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 25 2025 04:09:18 host2 maldet(30926): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 25 2025 04:09:18 host2 maldet(30926): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Nov 25 2025 04:09:18 host2 maldet(30926): {sigup} verified md5sum of maldet-sigpack.tgz Nov 25 2025 04:09:18 host2 maldet(30926): {sigup} unpacked and installed maldet-sigpack.tgz Nov 25 2025 04:09:18 host2 maldet(30926): {sigup} verified md5sum of maldet-clean.tgz Nov 25 2025 04:09:18 host2 maldet(30926): {sigup} unpacked and installed maldet-clean.tgz Nov 25 2025 04:09:18 host2 maldet(30926): {sigup} signature set update completed Nov 25 2025 04:09:18 host2 maldet(30926): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 25 2025 04:09:18 host2 maldet(31134): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 25 2025 04:09:19 host2 maldet(31134): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 25 2025 04:09:19 host2 maldet(31134): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 25 2025 04:09:19 host2 maldet(31134): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 25 2025 04:09:19 host2 maldet(31134): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 25 2025 04:09:27 host2 maldet(31134): {scan} file list completed in 8s, found 158 files... Nov 25 2025 04:09:27 host2 maldet(31134): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 25 2025 04:09:27 host2 maldet(31134): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (158 files) in progress... Nov 25 2025 04:09:30 host2 maldet(31134): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 158, malware hits 0, cleaned hits 0, time 12s Nov 25 2025 04:09:30 host2 maldet(31134): {scan} scan report saved, to view run: maldet --report 251125-0409.31134 Nov 26 2025 04:27:15 host2 maldet(44522): {update} checking for available updates... Nov 26 2025 04:27:16 host2 maldet(44522): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 26 2025 04:27:16 host2 maldet(44522): {update} hashing install files and checking against server... Nov 26 2025 04:27:16 host2 maldet(44522): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 26 2025 04:27:16 host2 maldet(44522): {update} latest version already installed. Nov 26 2025 04:27:16 host2 maldet(44631): {sigup} performing signature update check... Nov 26 2025 04:27:16 host2 maldet(44631): {sigup} local signature set is version 202511251727973 Nov 26 2025 04:27:16 host2 maldet(44631): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 26 2025 04:27:16 host2 maldet(44631): {sigup} latest signature set already installed Nov 26 2025 04:27:16 host2 maldet(44721): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 26 2025 04:27:16 host2 maldet(44721): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 26 2025 04:27:16 host2 maldet(44721): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 26 2025 04:27:16 host2 maldet(44721): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 26 2025 04:27:16 host2 maldet(44721): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 26 2025 04:27:24 host2 maldet(44721): {scan} file list completed in 8s, found 148 files... Nov 26 2025 04:27:24 host2 maldet(44721): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 26 2025 04:27:24 host2 maldet(44721): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (148 files) in progress... Nov 26 2025 04:27:28 host2 maldet(44721): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 148, malware hits 0, cleaned hits 0, time 12s Nov 26 2025 04:27:28 host2 maldet(44721): {scan} scan report saved, to view run: maldet --report 251126-0427.44721 Nov 27 2025 03:23:53 host2 maldet(23099): {update} checking for available updates... Nov 27 2025 03:23:53 host2 maldet(23099): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 27 2025 03:23:53 host2 maldet(23099): {update} hashing install files and checking against server... Nov 27 2025 03:23:53 host2 maldet(23099): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 27 2025 03:23:53 host2 maldet(23099): {update} latest version already installed. Nov 27 2025 03:23:53 host2 maldet(23210): {sigup} performing signature update check... Nov 27 2025 03:23:53 host2 maldet(23210): {sigup} local signature set is version 202511251727973 Nov 27 2025 03:23:54 host2 maldet(23210): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 27 2025 03:23:54 host2 maldet(23210): {sigup} latest signature set already installed Nov 27 2025 03:23:54 host2 maldet(23298): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 27 2025 03:23:54 host2 maldet(23298): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 27 2025 03:23:54 host2 maldet(23298): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 27 2025 03:23:54 host2 maldet(23298): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 27 2025 03:23:54 host2 maldet(23298): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 27 2025 03:24:01 host2 maldet(23298): {scan} file list completed in 7s, found 62 files... Nov 27 2025 03:24:01 host2 maldet(23298): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 27 2025 03:24:01 host2 maldet(23298): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (62 files) in progress... Nov 27 2025 03:24:07 host2 maldet(23298): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 62, malware hits 0, cleaned hits 0, time 12s Nov 27 2025 03:24:07 host2 maldet(23298): {scan} scan report saved, to view run: maldet --report 251127-0323.23298 Nov 28 2025 03:36:32 host2 maldet(59520): {update} checking for available updates... Nov 28 2025 03:36:32 host2 maldet(59520): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 28 2025 03:36:32 host2 maldet(59520): {update} hashing install files and checking against server... Nov 28 2025 03:36:32 host2 maldet(59520): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 28 2025 03:36:32 host2 maldet(59520): {update} latest version already installed. Nov 28 2025 03:36:32 host2 maldet(59630): {sigup} performing signature update check... Nov 28 2025 03:36:32 host2 maldet(59630): {sigup} local signature set is version 202511251727973 Nov 28 2025 03:36:33 host2 maldet(59630): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 28 2025 03:36:33 host2 maldet(59630): {sigup} new signature set 202511282700055 available Nov 28 2025 03:36:33 host2 maldet(59630): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 28 2025 03:36:33 host2 maldet(59630): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 28 2025 03:36:33 host2 maldet(59630): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Nov 28 2025 03:36:33 host2 maldet(59630): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 28 2025 03:36:33 host2 maldet(59630): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 28 2025 03:36:34 host2 maldet(59630): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Nov 28 2025 03:36:34 host2 maldet(59630): {sigup} verified md5sum of maldet-sigpack.tgz Nov 28 2025 03:36:34 host2 maldet(59630): {sigup} unpacked and installed maldet-sigpack.tgz Nov 28 2025 03:36:34 host2 maldet(59630): {sigup} verified md5sum of maldet-clean.tgz Nov 28 2025 03:36:34 host2 maldet(59630): {sigup} unpacked and installed maldet-clean.tgz Nov 28 2025 03:36:34 host2 maldet(59630): {sigup} signature set update completed Nov 28 2025 03:36:34 host2 maldet(59630): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 28 2025 03:36:34 host2 maldet(59840): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 28 2025 03:36:34 host2 maldet(59840): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 28 2025 03:36:34 host2 maldet(59840): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 28 2025 03:36:34 host2 maldet(59840): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 28 2025 03:36:34 host2 maldet(59840): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 28 2025 03:36:44 host2 maldet(59840): {scan} file list completed in 10s, found 326 files... Nov 28 2025 03:36:44 host2 maldet(59840): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 28 2025 03:36:44 host2 maldet(59840): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (326 files) in progress... Nov 28 2025 03:36:49 host2 maldet(59840): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 326, malware hits 0, cleaned hits 0, time 15s Nov 28 2025 03:36:49 host2 maldet(59840): {scan} scan report saved, to view run: maldet --report 251128-0336.59840 Nov 29 2025 03:43:54 host2 maldet(13259): {update} checking for available updates... Nov 29 2025 03:43:54 host2 maldet(13259): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 29 2025 03:43:54 host2 maldet(13259): {update} hashing install files and checking against server... Nov 29 2025 03:43:54 host2 maldet(13259): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 29 2025 03:43:54 host2 maldet(13259): {update} latest version already installed. Nov 29 2025 03:43:54 host2 maldet(13369): {sigup} performing signature update check... Nov 29 2025 03:43:54 host2 maldet(13369): {sigup} local signature set is version 202511282700055 Nov 29 2025 03:43:55 host2 maldet(13369): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 29 2025 03:43:55 host2 maldet(13369): {sigup} latest signature set already installed Nov 29 2025 03:43:55 host2 maldet(13458): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 29 2025 03:43:55 host2 maldet(13458): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 29 2025 03:43:55 host2 maldet(13458): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 29 2025 03:43:55 host2 maldet(13458): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 29 2025 03:43:55 host2 maldet(13458): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 29 2025 03:44:05 host2 maldet(13458): {scan} file list completed in 10s, found 122 files... Nov 29 2025 03:44:05 host2 maldet(13458): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 29 2025 03:44:05 host2 maldet(13458): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (122 files) in progress... Nov 29 2025 03:44:09 host2 maldet(13458): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 122, malware hits 0, cleaned hits 0, time 14s Nov 29 2025 03:44:09 host2 maldet(13458): {scan} scan report saved, to view run: maldet --report 251129-0343.13458 Nov 30 2025 04:09:22 host2 maldet(63562): {update} checking for available updates... Nov 30 2025 04:09:22 host2 maldet(63562): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 30 2025 04:09:22 host2 maldet(63562): {update} hashing install files and checking against server... Nov 30 2025 04:09:23 host2 maldet(63562): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 30 2025 04:09:23 host2 maldet(63562): {update} latest version already installed. Nov 30 2025 04:09:23 host2 maldet(63671): {sigup} performing signature update check... Nov 30 2025 04:09:23 host2 maldet(63671): {sigup} local signature set is version 202511282700055 Nov 30 2025 04:09:23 host2 maldet(63671): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 30 2025 04:09:23 host2 maldet(63671): {sigup} latest signature set already installed Nov 30 2025 04:09:23 host2 maldet(63759): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 30 2025 04:09:23 host2 maldet(63759): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 30 2025 04:09:23 host2 maldet(63759): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 30 2025 04:09:23 host2 maldet(63759): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 30 2025 04:09:23 host2 maldet(63759): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 30 2025 04:09:31 host2 maldet(63759): {scan} file list completed in 8s, found 139 files... Nov 30 2025 04:09:31 host2 maldet(63759): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 30 2025 04:09:31 host2 maldet(63759): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (139 files) in progress... Nov 30 2025 04:09:34 host2 maldet(63759): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 139, malware hits 0, cleaned hits 0, time 11s Nov 30 2025 04:09:34 host2 maldet(63759): {scan} scan report saved, to view run: maldet --report 251130-0409.63759 Dec 01 2025 04:11:04 host2 maldet(18130): {update} checking for available updates... Dec 01 2025 04:11:04 host2 maldet(18130): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 01 2025 04:11:04 host2 maldet(18130): {update} hashing install files and checking against server... Dec 01 2025 04:11:04 host2 maldet(18130): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 01 2025 04:11:04 host2 maldet(18130): {update} latest version already installed. Dec 01 2025 04:11:04 host2 maldet(18252): {sigup} performing signature update check... Dec 01 2025 04:11:04 host2 maldet(18252): {sigup} local signature set is version 202511282700055 Dec 01 2025 04:11:05 host2 maldet(18252): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 01 2025 04:11:05 host2 maldet(18252): {sigup} new signature set 202512013675489 available Dec 01 2025 04:11:05 host2 maldet(18252): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 01 2025 04:11:05 host2 maldet(18252): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 01 2025 04:11:05 host2 maldet(18252): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Dec 01 2025 04:11:05 host2 maldet(18252): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 01 2025 04:11:06 host2 maldet(18252): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 01 2025 04:11:06 host2 maldet(18252): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Dec 01 2025 04:11:06 host2 maldet(18252): {sigup} verified md5sum of maldet-sigpack.tgz Dec 01 2025 04:11:06 host2 maldet(18252): {sigup} unpacked and installed maldet-sigpack.tgz Dec 01 2025 04:11:06 host2 maldet(18252): {sigup} verified md5sum of maldet-clean.tgz Dec 01 2025 04:11:06 host2 maldet(18252): {sigup} unpacked and installed maldet-clean.tgz Dec 01 2025 04:11:06 host2 maldet(18252): {sigup} signature set update completed Dec 01 2025 04:11:06 host2 maldet(18252): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 01 2025 04:11:06 host2 maldet(18486): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 01 2025 04:11:07 host2 maldet(18486): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 01 2025 04:11:07 host2 maldet(18486): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 01 2025 04:11:07 host2 maldet(18486): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 01 2025 04:11:07 host2 maldet(18486): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 01 2025 04:11:13 host2 maldet(18486): {scan} file list completed in 6s, found 76 files... Dec 01 2025 04:11:13 host2 maldet(18486): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 01 2025 04:11:13 host2 maldet(18486): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (76 files) in progress... Dec 01 2025 04:11:16 host2 maldet(18486): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 76, malware hits 0, cleaned hits 0, time 10s Dec 01 2025 04:11:16 host2 maldet(18486): {scan} scan report saved, to view run: maldet --report 251201-0411.18486 Dec 02 2025 04:02:35 host2 maldet(83431): {update} checking for available updates... Dec 02 2025 04:02:35 host2 maldet(83431): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 02 2025 04:02:35 host2 maldet(83431): {update} hashing install files and checking against server... Dec 02 2025 04:02:35 host2 maldet(83431): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 02 2025 04:02:35 host2 maldet(83431): {update} latest version already installed. Dec 02 2025 04:02:35 host2 maldet(83541): {sigup} performing signature update check... Dec 02 2025 04:02:35 host2 maldet(83541): {sigup} local signature set is version 202512013675489 Dec 02 2025 04:02:35 host2 maldet(83541): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 02 2025 04:02:35 host2 maldet(83541): {sigup} latest signature set already installed Dec 02 2025 04:02:36 host2 maldet(83629): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 02 2025 04:02:36 host2 maldet(83629): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 02 2025 04:02:36 host2 maldet(83629): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 02 2025 04:02:36 host2 maldet(83629): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 02 2025 04:02:36 host2 maldet(83629): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 02 2025 04:02:42 host2 maldet(83629): {scan} file list completed in 6s, found 212 files... Dec 02 2025 04:02:42 host2 maldet(83629): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 02 2025 04:02:42 host2 maldet(83629): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (212 files) in progress... Dec 02 2025 04:02:46 host2 maldet(83629): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 212, malware hits 0, cleaned hits 0, time 10s Dec 02 2025 04:02:46 host2 maldet(83629): {scan} scan report saved, to view run: maldet --report 251202-0402.83629 Dec 03 2025 04:03:40 host2 maldet(61083): {update} checking for available updates... Dec 03 2025 04:03:41 host2 maldet(61083): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 03 2025 04:03:41 host2 maldet(61083): {update} hashing install files and checking against server... Dec 03 2025 04:03:41 host2 maldet(61083): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 03 2025 04:03:41 host2 maldet(61083): {update} latest version already installed. Dec 03 2025 04:03:41 host2 maldet(61194): {sigup} performing signature update check... Dec 03 2025 04:03:41 host2 maldet(61194): {sigup} local signature set is version 202512013675489 Dec 03 2025 04:03:41 host2 maldet(61194): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 03 2025 04:03:41 host2 maldet(61194): {sigup} latest signature set already installed Dec 03 2025 04:03:41 host2 maldet(61283): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 03 2025 04:03:41 host2 maldet(61283): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 03 2025 04:03:41 host2 maldet(61283): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 03 2025 04:03:41 host2 maldet(61283): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 03 2025 04:03:41 host2 maldet(61283): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 03 2025 04:03:49 host2 maldet(61283): {scan} file list completed in 8s, found 306 files... Dec 03 2025 04:03:49 host2 maldet(61283): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 03 2025 04:03:49 host2 maldet(61283): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (306 files) in progress... Dec 03 2025 04:03:53 host2 maldet(61283): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 306, malware hits 0, cleaned hits 0, time 12s Dec 03 2025 04:03:53 host2 maldet(61283): {scan} scan report saved, to view run: maldet --report 251203-0403.61283 Dec 04 2025 03:27:06 host2 maldet(28115): {update} checking for available updates... Dec 04 2025 03:27:06 host2 maldet(28115): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 04 2025 03:27:06 host2 maldet(28115): {update} hashing install files and checking against server... Dec 04 2025 03:27:06 host2 maldet(28115): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 04 2025 03:27:06 host2 maldet(28115): {update} latest version already installed. Dec 04 2025 03:27:07 host2 maldet(28224): {sigup} performing signature update check... Dec 04 2025 03:27:07 host2 maldet(28224): {sigup} local signature set is version 202512013675489 Dec 04 2025 03:27:07 host2 maldet(28224): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 04 2025 03:27:07 host2 maldet(28224): {sigup} new signature set 20251204452786 available Dec 04 2025 03:27:07 host2 maldet(28224): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 04 2025 03:27:07 host2 maldet(28224): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 04 2025 03:27:08 host2 maldet(28224): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Dec 04 2025 03:27:08 host2 maldet(28224): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 04 2025 03:27:08 host2 maldet(28224): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 04 2025 03:27:08 host2 maldet(28224): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Dec 04 2025 03:27:08 host2 maldet(28224): {sigup} verified md5sum of maldet-sigpack.tgz Dec 04 2025 03:27:08 host2 maldet(28224): {sigup} unpacked and installed maldet-sigpack.tgz Dec 04 2025 03:27:08 host2 maldet(28224): {sigup} verified md5sum of maldet-clean.tgz Dec 04 2025 03:27:08 host2 maldet(28224): {sigup} unpacked and installed maldet-clean.tgz Dec 04 2025 03:27:08 host2 maldet(28224): {sigup} signature set update completed Dec 04 2025 03:27:09 host2 maldet(28224): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 04 2025 03:27:09 host2 maldet(28438): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 04 2025 03:27:09 host2 maldet(28438): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 04 2025 03:27:09 host2 maldet(28438): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 04 2025 03:27:09 host2 maldet(28438): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 04 2025 03:27:09 host2 maldet(28438): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 04 2025 03:27:18 host2 maldet(28438): {scan} file list completed in 9s, found 1940 files... Dec 04 2025 03:27:18 host2 maldet(28438): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 04 2025 03:27:18 host2 maldet(28438): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1940 files) in progress... Dec 04 2025 03:27:27 host2 maldet(28438): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1940, malware hits 0, cleaned hits 0, time 18s Dec 04 2025 03:27:27 host2 maldet(28438): {scan} scan report saved, to view run: maldet --report 251204-0327.28438 Dec 05 2025 03:17:26 host2 maldet(73090): {update} checking for available updates... Dec 05 2025 03:17:26 host2 maldet(73090): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 05 2025 03:17:26 host2 maldet(73090): {update} hashing install files and checking against server... Dec 05 2025 03:17:27 host2 maldet(73090): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 05 2025 03:17:27 host2 maldet(73090): {update} latest version already installed. Dec 05 2025 03:17:27 host2 maldet(73201): {sigup} performing signature update check... Dec 05 2025 03:17:27 host2 maldet(73201): {sigup} local signature set is version 20251204452786 Dec 05 2025 03:17:27 host2 maldet(73201): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 05 2025 03:17:27 host2 maldet(73201): {sigup} latest signature set already installed Dec 05 2025 03:17:27 host2 maldet(73293): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 05 2025 03:17:27 host2 maldet(73293): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 05 2025 03:17:27 host2 maldet(73293): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 05 2025 03:17:27 host2 maldet(73293): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 05 2025 03:17:27 host2 maldet(73293): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 05 2025 03:17:35 host2 maldet(73293): {scan} file list completed in 8s, found 172 files... Dec 05 2025 03:17:36 host2 maldet(73293): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 05 2025 03:17:36 host2 maldet(73293): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (172 files) in progress... Dec 05 2025 03:17:39 host2 maldet(73293): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 172, malware hits 0, cleaned hits 0, time 12s Dec 05 2025 03:17:39 host2 maldet(73293): {scan} scan report saved, to view run: maldet --report 251205-0317.73293 Dec 06 2025 03:38:14 host2 maldet(18147): {update} checking for available updates... Dec 06 2025 03:38:14 host2 maldet(18147): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 06 2025 03:38:14 host2 maldet(18147): {update} hashing install files and checking against server... Dec 06 2025 03:38:14 host2 maldet(18147): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 06 2025 03:38:15 host2 maldet(18147): {update} latest version already installed. Dec 06 2025 03:38:15 host2 maldet(18257): {sigup} performing signature update check... Dec 06 2025 03:38:15 host2 maldet(18257): {sigup} local signature set is version 20251204452786 Dec 06 2025 03:38:15 host2 maldet(18257): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 06 2025 03:38:15 host2 maldet(18257): {sigup} latest signature set already installed Dec 06 2025 03:38:15 host2 maldet(18346): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 06 2025 03:38:15 host2 maldet(18346): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 06 2025 03:38:15 host2 maldet(18346): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 06 2025 03:38:15 host2 maldet(18346): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 06 2025 03:38:15 host2 maldet(18346): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 06 2025 03:38:24 host2 maldet(18346): {scan} file list completed in 9s, found 732 files... Dec 06 2025 03:38:24 host2 maldet(18346): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 06 2025 03:38:24 host2 maldet(18346): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (732 files) in progress... Dec 06 2025 03:38:40 host2 maldet(18346): {hit} malware hit {YARA}php_in_image found for /home/theheali/public_html/wp-content/plugins/wishlist-member-x/legacy/extlib/wlm_stripe/images/whatsapp7.png Dec 06 2025 03:38:40 host2 maldet(18346): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 732, malware hits 1, cleaned hits 0, time 25s Dec 06 2025 03:38:40 host2 maldet(18346): {scan} scan report saved, to view run: maldet --report 251206-0338.18346 Dec 06 2025 03:38:40 host2 maldet(18346): {scan} quarantine is disabled! set quarantine_hits=1 in conf.maldet or to quarantine results run: maldet -q 251206-0338.18346 Dec 06 2025 13:05:36 host2 maldet(1216): {mon} could not find inotifywait command, install yum package inotify-tools or download from https://github.com/rvoicilas/inotify-tools/wiki/ Dec 07 2025 03:41:15 host2 maldet(36106): {update} checking for available updates... Dec 07 2025 03:41:15 host2 maldet(36106): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 07 2025 03:41:15 host2 maldet(36106): {update} hashing install files and checking against server... Dec 07 2025 03:41:15 host2 maldet(36106): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 07 2025 03:41:15 host2 maldet(36106): {update} latest version already installed. Dec 07 2025 03:41:15 host2 maldet(36215): {sigup} performing signature update check... Dec 07 2025 03:41:15 host2 maldet(36215): {sigup} local signature set is version 20251204452786 Dec 07 2025 03:41:16 host2 maldet(36215): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 07 2025 03:41:16 host2 maldet(36215): {sigup} new signature set 202512071424671 available Dec 07 2025 03:41:16 host2 maldet(36215): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 07 2025 03:41:16 host2 maldet(36215): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 07 2025 03:41:16 host2 maldet(36215): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Dec 07 2025 03:41:16 host2 maldet(36215): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 07 2025 03:41:16 host2 maldet(36215): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 07 2025 03:41:17 host2 maldet(36215): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Dec 07 2025 03:41:17 host2 maldet(36215): {sigup} verified md5sum of maldet-sigpack.tgz Dec 07 2025 03:41:17 host2 maldet(36215): {sigup} unpacked and installed maldet-sigpack.tgz Dec 07 2025 03:41:17 host2 maldet(36215): {sigup} verified md5sum of maldet-clean.tgz Dec 07 2025 03:41:17 host2 maldet(36215): {sigup} unpacked and installed maldet-clean.tgz Dec 07 2025 03:41:17 host2 maldet(36215): {sigup} signature set update completed Dec 07 2025 03:41:17 host2 maldet(36215): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 07 2025 03:41:17 host2 maldet(36421): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 07 2025 03:41:17 host2 maldet(36421): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 07 2025 03:41:17 host2 maldet(36421): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 07 2025 03:41:17 host2 maldet(36421): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 07 2025 03:41:17 host2 maldet(36421): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 07 2025 03:41:25 host2 maldet(36421): {scan} file list completed in 8s, found 1706 files... Dec 07 2025 03:41:25 host2 maldet(36421): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 07 2025 03:41:25 host2 maldet(36421): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1706 files) in progress... Dec 07 2025 03:41:51 host2 maldet(36421): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1706, malware hits 0, cleaned hits 0, time 34s Dec 07 2025 03:41:51 host2 maldet(36421): {scan} scan report saved, to view run: maldet --report 251207-0341.36421 Dec 08 2025 03:52:37 host2 maldet(54433): {update} checking for available updates... Dec 08 2025 03:52:37 host2 maldet(54433): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 08 2025 03:52:37 host2 maldet(54433): {update} hashing install files and checking against server... Dec 08 2025 03:52:37 host2 maldet(54433): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 08 2025 03:52:37 host2 maldet(54433): {update} latest version already installed. Dec 08 2025 03:52:37 host2 maldet(54547): {sigup} performing signature update check... Dec 08 2025 03:52:37 host2 maldet(54547): {sigup} local signature set is version 202512071424671 Dec 08 2025 03:52:37 host2 maldet(54547): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 08 2025 03:52:37 host2 maldet(54547): {sigup} latest signature set already installed Dec 08 2025 03:52:38 host2 maldet(54635): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 08 2025 03:52:38 host2 maldet(54635): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 08 2025 03:52:38 host2 maldet(54635): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 08 2025 03:52:38 host2 maldet(54635): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 08 2025 03:52:38 host2 maldet(54635): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 08 2025 03:52:39 host2 maldet(54635): {scan} file list completed in 1s, found 164 files... Dec 08 2025 03:52:39 host2 maldet(54635): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 08 2025 03:52:39 host2 maldet(54635): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (164 files) in progress... Dec 08 2025 03:52:44 host2 maldet(54635): {hit} malware hit {YARA}r57shell_php_php found for /home/theheali/public_html/wp-content/plugins/fblikebutton/language/c.php Dec 08 2025 03:52:44 host2 maldet(54635): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 164, malware hits 1, cleaned hits 0, time 6s Dec 08 2025 03:52:44 host2 maldet(54635): {scan} scan report saved, to view run: maldet --report 251208-0352.54635 Dec 08 2025 03:52:44 host2 maldet(54635): {scan} quarantine is disabled! set quarantine_hits=1 in conf.maldet or to quarantine results run: maldet -q 251208-0352.54635 Dec 09 2025 03:19:03 host2 maldet(88350): {update} checking for available updates... Dec 09 2025 03:19:03 host2 maldet(88350): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 09 2025 03:19:03 host2 maldet(88350): {update} hashing install files and checking against server... Dec 09 2025 03:19:04 host2 maldet(88350): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 09 2025 03:19:04 host2 maldet(88350): {update} latest version already installed. Dec 09 2025 03:19:04 host2 maldet(88459): {sigup} performing signature update check... Dec 09 2025 03:19:04 host2 maldet(88459): {sigup} local signature set is version 202512071424671 Dec 09 2025 03:19:04 host2 maldet(88459): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 09 2025 03:19:04 host2 maldet(88459): {sigup} latest signature set already installed Dec 09 2025 03:19:04 host2 maldet(88547): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 09 2025 03:19:04 host2 maldet(88547): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 09 2025 03:19:04 host2 maldet(88547): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 09 2025 03:19:04 host2 maldet(88547): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 09 2025 03:19:04 host2 maldet(88547): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 09 2025 03:19:06 host2 maldet(88547): {scan} file list completed in 2s, found 342 files... Dec 09 2025 03:19:06 host2 maldet(88547): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 09 2025 03:19:06 host2 maldet(88547): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (342 files) in progress... Dec 09 2025 03:19:10 host2 maldet(88547): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 342, malware hits 0, cleaned hits 0, time 6s Dec 09 2025 03:19:10 host2 maldet(88547): {scan} scan report saved, to view run: maldet --report 251209-0319.88547 Dec 10 2025 03:14:58 host2 maldet(31003): {update} checking for available updates... Dec 10 2025 03:14:58 host2 maldet(31003): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 10 2025 03:14:58 host2 maldet(31003): {update} hashing install files and checking against server... Dec 10 2025 03:14:58 host2 maldet(31003): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 10 2025 03:14:58 host2 maldet(31003): {update} latest version already installed. Dec 10 2025 03:14:58 host2 maldet(31117): {sigup} performing signature update check... Dec 10 2025 03:14:58 host2 maldet(31117): {sigup} local signature set is version 202512071424671 Dec 10 2025 03:14:59 host2 maldet(31117): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 10 2025 03:14:59 host2 maldet(31117): {sigup} new signature set 202512102395847 available Dec 10 2025 03:14:59 host2 maldet(31117): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 10 2025 03:14:59 host2 maldet(31117): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 10 2025 03:14:59 host2 maldet(31117): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Dec 10 2025 03:14:59 host2 maldet(31117): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 10 2025 03:15:00 host2 maldet(31117): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 10 2025 03:15:00 host2 maldet(31117): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Dec 10 2025 03:15:00 host2 maldet(31117): {sigup} verified md5sum of maldet-sigpack.tgz Dec 10 2025 03:15:00 host2 maldet(31117): {sigup} unpacked and installed maldet-sigpack.tgz Dec 10 2025 03:15:00 host2 maldet(31117): {sigup} verified md5sum of maldet-clean.tgz Dec 10 2025 03:15:00 host2 maldet(31117): {sigup} unpacked and installed maldet-clean.tgz Dec 10 2025 03:15:00 host2 maldet(31117): {sigup} signature set update completed Dec 10 2025 03:15:00 host2 maldet(31117): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 10 2025 03:15:00 host2 maldet(31350): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 10 2025 03:15:00 host2 maldet(31350): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 10 2025 03:15:00 host2 maldet(31350): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 10 2025 03:15:00 host2 maldet(31350): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 10 2025 03:15:00 host2 maldet(31350): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 10 2025 03:15:02 host2 maldet(31350): {scan} file list completed in 2s, found 177 files... Dec 10 2025 03:15:02 host2 maldet(31350): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 10 2025 03:15:02 host2 maldet(31350): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (177 files) in progress... Dec 10 2025 03:15:08 host2 maldet(31350): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 177, malware hits 0, cleaned hits 0, time 8s Dec 10 2025 03:15:08 host2 maldet(31350): {scan} scan report saved, to view run: maldet --report 251210-0315.31350 Dec 11 2025 03:41:53 host2 maldet(42336): {update} checking for available updates... Dec 11 2025 03:41:54 host2 maldet(42336): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 11 2025 03:41:54 host2 maldet(42336): {update} hashing install files and checking against server... Dec 11 2025 03:41:54 host2 maldet(42336): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 11 2025 03:41:54 host2 maldet(42336): {update} latest version already installed. Dec 11 2025 03:41:54 host2 maldet(42445): {sigup} performing signature update check... Dec 11 2025 03:41:54 host2 maldet(42445): {sigup} local signature set is version 202512102395847 Dec 11 2025 03:41:54 host2 maldet(42445): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 11 2025 03:41:54 host2 maldet(42445): {sigup} latest signature set already installed Dec 11 2025 03:41:54 host2 maldet(42534): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 11 2025 03:41:54 host2 maldet(42534): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 11 2025 03:41:54 host2 maldet(42534): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 11 2025 03:41:54 host2 maldet(42534): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 11 2025 03:41:54 host2 maldet(42534): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 11 2025 03:41:56 host2 maldet(42534): {scan} file list completed in 2s, found 260 files... Dec 11 2025 03:41:56 host2 maldet(42534): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 11 2025 03:41:56 host2 maldet(42534): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (260 files) in progress... Dec 11 2025 03:42:03 host2 maldet(42534): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 260, malware hits 0, cleaned hits 0, time 9s Dec 11 2025 03:42:03 host2 maldet(42534): {scan} scan report saved, to view run: maldet --report 251211-0341.42534 Dec 12 2025 03:37:06 host2 maldet(36922): {update} checking for available updates... Dec 12 2025 03:37:06 host2 maldet(36922): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 12 2025 03:37:06 host2 maldet(36922): {update} hashing install files and checking against server... Dec 12 2025 03:37:07 host2 maldet(36922): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 12 2025 03:37:07 host2 maldet(36922): {update} latest version already installed. Dec 12 2025 03:37:07 host2 maldet(37031): {sigup} performing signature update check... Dec 12 2025 03:37:07 host2 maldet(37031): {sigup} local signature set is version 202512102395847 Dec 12 2025 03:37:07 host2 maldet(37031): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 12 2025 03:37:07 host2 maldet(37031): {sigup} latest signature set already installed Dec 12 2025 03:37:07 host2 maldet(37119): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 12 2025 03:37:07 host2 maldet(37119): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 12 2025 03:37:07 host2 maldet(37119): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 12 2025 03:37:07 host2 maldet(37119): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 12 2025 03:37:07 host2 maldet(37119): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 12 2025 03:37:09 host2 maldet(37119): {scan} file list completed in 2s, found 256 files... Dec 12 2025 03:37:09 host2 maldet(37119): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 12 2025 03:37:09 host2 maldet(37119): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (256 files) in progress... Dec 12 2025 03:37:14 host2 maldet(37119): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 256, malware hits 0, cleaned hits 0, time 7s Dec 12 2025 03:37:14 host2 maldet(37119): {scan} scan report saved, to view run: maldet --report 251212-0337.37119 Dec 13 2025 04:22:10 host2 maldet(70786): {update} checking for available updates... Dec 13 2025 04:22:10 host2 maldet(70786): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 13 2025 04:22:10 host2 maldet(70786): {update} hashing install files and checking against server... Dec 13 2025 04:22:10 host2 maldet(70786): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 13 2025 04:22:10 host2 maldet(70786): {update} latest version already installed. Dec 13 2025 04:22:10 host2 maldet(70896): {sigup} performing signature update check... Dec 13 2025 04:22:10 host2 maldet(70896): {sigup} local signature set is version 202512102395847 Dec 13 2025 04:22:11 host2 maldet(70896): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 13 2025 04:22:11 host2 maldet(70896): {sigup} new signature set 20251213586061 available Dec 13 2025 04:22:11 host2 maldet(70896): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 13 2025 04:22:11 host2 maldet(70896): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 13 2025 04:22:11 host2 maldet(70896): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Dec 13 2025 04:22:11 host2 maldet(70896): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 13 2025 04:22:12 host2 maldet(70896): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 13 2025 04:22:12 host2 maldet(70896): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Dec 13 2025 04:22:12 host2 maldet(70896): {sigup} verified md5sum of maldet-sigpack.tgz Dec 13 2025 04:22:12 host2 maldet(70896): {sigup} unpacked and installed maldet-sigpack.tgz Dec 13 2025 04:22:12 host2 maldet(70896): {sigup} verified md5sum of maldet-clean.tgz Dec 13 2025 04:22:12 host2 maldet(70896): {sigup} unpacked and installed maldet-clean.tgz Dec 13 2025 04:22:12 host2 maldet(70896): {sigup} signature set update completed Dec 13 2025 04:22:12 host2 maldet(70896): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 13 2025 04:22:12 host2 maldet(71108): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 13 2025 04:22:12 host2 maldet(71108): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 13 2025 04:22:12 host2 maldet(71108): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 13 2025 04:22:12 host2 maldet(71108): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 13 2025 04:22:12 host2 maldet(71108): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 13 2025 04:22:14 host2 maldet(71108): {scan} file list completed in 2s, found 322 files... Dec 13 2025 04:22:14 host2 maldet(71108): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 13 2025 04:22:14 host2 maldet(71108): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (322 files) in progress... Dec 13 2025 04:22:19 host2 maldet(71108): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 322, malware hits 0, cleaned hits 0, time 7s Dec 13 2025 04:22:19 host2 maldet(71108): {scan} scan report saved, to view run: maldet --report 251213-0422.71108 Dec 14 2025 03:46:10 host2 maldet(39033): {update} checking for available updates... Dec 14 2025 03:46:10 host2 maldet(39033): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 14 2025 03:46:10 host2 maldet(39033): {update} hashing install files and checking against server... Dec 14 2025 03:46:10 host2 maldet(39033): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 14 2025 03:46:10 host2 maldet(39033): {update} latest version already installed. Dec 14 2025 03:46:10 host2 maldet(39143): {sigup} performing signature update check... Dec 14 2025 03:46:10 host2 maldet(39143): {sigup} local signature set is version 20251213586061 Dec 14 2025 03:46:11 host2 maldet(39143): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 14 2025 03:46:11 host2 maldet(39143): {sigup} latest signature set already installed Dec 14 2025 03:46:11 host2 maldet(39233): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 14 2025 03:46:11 host2 maldet(39233): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 14 2025 03:46:11 host2 maldet(39233): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 14 2025 03:46:11 host2 maldet(39233): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 14 2025 03:46:11 host2 maldet(39233): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 14 2025 03:46:18 host2 maldet(39233): {scan} file list completed in 7s, found 304 files... Dec 14 2025 03:46:18 host2 maldet(39233): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 14 2025 03:46:18 host2 maldet(39233): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (304 files) in progress... Dec 14 2025 03:46:22 host2 maldet(39233): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 304, malware hits 0, cleaned hits 0, time 11s Dec 14 2025 03:46:22 host2 maldet(39233): {scan} scan report saved, to view run: maldet --report 251214-0346.39233 Dec 15 2025 03:54:52 host2 maldet(91922): {update} checking for available updates... Dec 15 2025 03:54:52 host2 maldet(91922): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 15 2025 03:54:52 host2 maldet(91922): {update} hashing install files and checking against server... Dec 15 2025 03:54:52 host2 maldet(91922): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 15 2025 03:54:52 host2 maldet(91922): {update} latest version already installed. Dec 15 2025 03:54:52 host2 maldet(92033): {sigup} performing signature update check... Dec 15 2025 03:54:52 host2 maldet(92033): {sigup} local signature set is version 20251213586061 Dec 15 2025 03:54:52 host2 maldet(92033): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 15 2025 03:54:52 host2 maldet(92033): {sigup} latest signature set already installed Dec 15 2025 03:54:53 host2 maldet(92122): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 15 2025 03:54:53 host2 maldet(92122): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 15 2025 03:54:53 host2 maldet(92122): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 15 2025 03:54:53 host2 maldet(92122): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 15 2025 03:54:53 host2 maldet(92122): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 15 2025 03:55:02 host2 maldet(92122): {scan} file list completed in 9s, found 8547 files... Dec 15 2025 03:55:02 host2 maldet(92122): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 15 2025 03:55:02 host2 maldet(92122): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (8547 files) in progress... Dec 15 2025 03:56:42 host2 maldet(92122): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 8547, malware hits 0, cleaned hits 0, time 109s Dec 15 2025 03:56:42 host2 maldet(92122): {scan} scan report saved, to view run: maldet --report 251215-0354.92122 Dec 16 2025 04:38:02 host2 maldet(94234): {update} checking for available updates... Dec 16 2025 04:38:03 host2 maldet(94234): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 16 2025 04:38:03 host2 maldet(94234): {update} hashing install files and checking against server... Dec 16 2025 04:38:03 host2 maldet(94234): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 16 2025 04:38:03 host2 maldet(94234): {update} latest version already installed. Dec 16 2025 04:38:03 host2 maldet(94551): {sigup} performing signature update check... Dec 16 2025 04:38:03 host2 maldet(94551): {sigup} local signature set is version 20251213586061 Dec 16 2025 04:38:03 host2 maldet(94551): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 16 2025 04:38:03 host2 maldet(94551): {sigup} new signature set 202512161556343 available Dec 16 2025 04:38:03 host2 maldet(94551): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 16 2025 04:38:04 host2 maldet(94551): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 16 2025 04:38:04 host2 maldet(94551): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Dec 16 2025 04:38:04 host2 maldet(94551): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 16 2025 04:38:04 host2 maldet(94551): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 16 2025 04:38:05 host2 maldet(94551): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Dec 16 2025 04:38:05 host2 maldet(94551): {sigup} verified md5sum of maldet-sigpack.tgz Dec 16 2025 04:38:05 host2 maldet(94551): {sigup} unpacked and installed maldet-sigpack.tgz Dec 16 2025 04:38:05 host2 maldet(94551): {sigup} verified md5sum of maldet-clean.tgz Dec 16 2025 04:38:05 host2 maldet(94551): {sigup} unpacked and installed maldet-clean.tgz Dec 16 2025 04:38:05 host2 maldet(94551): {sigup} signature set update completed Dec 16 2025 04:38:05 host2 maldet(94551): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 16 2025 04:38:05 host2 maldet(95345): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 16 2025 04:38:05 host2 maldet(95345): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 16 2025 04:38:05 host2 maldet(95345): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 16 2025 04:38:05 host2 maldet(95345): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 16 2025 04:38:05 host2 maldet(95345): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 16 2025 04:38:16 host2 maldet(95345): {scan} file list completed in 11s, found 483 files... Dec 16 2025 04:38:16 host2 maldet(95345): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 16 2025 04:38:16 host2 maldet(95345): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (483 files) in progress... Dec 16 2025 04:38:23 host2 maldet(95345): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 483, malware hits 0, cleaned hits 0, time 18s Dec 16 2025 04:38:23 host2 maldet(95345): {scan} scan report saved, to view run: maldet --report 251216-0438.95345 Dec 17 2025 03:51:03 host2 maldet(87988): {update} checking for available updates... Dec 17 2025 03:51:03 host2 maldet(87988): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 17 2025 03:51:03 host2 maldet(87988): {update} hashing install files and checking against server... Dec 17 2025 03:51:04 host2 maldet(87988): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 17 2025 03:51:04 host2 maldet(87988): {update} latest version already installed. Dec 17 2025 03:51:04 host2 maldet(88106): {sigup} performing signature update check... Dec 17 2025 03:51:04 host2 maldet(88106): {sigup} local signature set is version 202512161556343 Dec 17 2025 03:51:04 host2 maldet(88106): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 17 2025 03:51:04 host2 maldet(88106): {sigup} latest signature set already installed Dec 17 2025 03:51:04 host2 maldet(88195): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 17 2025 03:51:04 host2 maldet(88195): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 17 2025 03:51:04 host2 maldet(88195): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 17 2025 03:51:04 host2 maldet(88195): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 17 2025 03:51:04 host2 maldet(88195): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 17 2025 03:51:14 host2 maldet(88195): {scan} file list completed in 10s, found 203 files... Dec 17 2025 03:51:14 host2 maldet(88195): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 17 2025 03:51:14 host2 maldet(88195): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (203 files) in progress... Dec 17 2025 03:51:21 host2 maldet(88195): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 203, malware hits 0, cleaned hits 0, time 17s Dec 17 2025 03:51:21 host2 maldet(88195): {scan} scan report saved, to view run: maldet --report 251217-0351.88195 Dec 18 2025 03:30:21 host2 maldet(75185): {update} checking for available updates... Dec 18 2025 03:30:22 host2 maldet(75185): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 18 2025 03:30:22 host2 maldet(75185): {update} hashing install files and checking against server... Dec 18 2025 03:30:22 host2 maldet(75185): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 18 2025 03:30:22 host2 maldet(75185): {update} latest version already installed. Dec 18 2025 03:30:22 host2 maldet(75477): {sigup} performing signature update check... Dec 18 2025 03:30:22 host2 maldet(75477): {sigup} local signature set is version 202512161556343 Dec 18 2025 03:30:22 host2 maldet(75477): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 18 2025 03:30:22 host2 maldet(75477): {sigup} latest signature set already installed Dec 18 2025 03:30:22 host2 maldet(75641): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 18 2025 03:30:23 host2 maldet(75641): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 18 2025 03:30:23 host2 maldet(75641): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 18 2025 03:30:23 host2 maldet(75641): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 18 2025 03:30:23 host2 maldet(75641): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 18 2025 03:30:27 host2 maldet(75641): {scan} file list completed in 4s, found 302 files... Dec 18 2025 03:30:27 host2 maldet(75641): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 18 2025 03:30:27 host2 maldet(75641): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (302 files) in progress... Dec 18 2025 03:30:33 host2 maldet(75641): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 302, malware hits 0, cleaned hits 0, time 11s Dec 18 2025 03:30:33 host2 maldet(75641): {scan} scan report saved, to view run: maldet --report 251218-0330.75641 Dec 19 2025 04:06:50 host2 maldet(36455): {update} checking for available updates... Dec 19 2025 04:06:50 host2 maldet(36455): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 19 2025 04:06:51 host2 maldet(36455): {update} hashing install files and checking against server... Dec 19 2025 04:06:51 host2 maldet(36455): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 19 2025 04:06:51 host2 maldet(36455): {update} latest version already installed. Dec 19 2025 04:06:51 host2 maldet(36757): {sigup} performing signature update check... Dec 19 2025 04:06:51 host2 maldet(36757): {sigup} local signature set is version 202512161556343 Dec 19 2025 04:06:51 host2 maldet(36757): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 19 2025 04:06:51 host2 maldet(36757): {sigup} new signature set 202512192526679 available Dec 19 2025 04:06:51 host2 maldet(36757): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 19 2025 04:06:52 host2 maldet(36757): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 19 2025 04:06:52 host2 maldet(36757): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Dec 19 2025 04:06:52 host2 maldet(36757): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 19 2025 04:06:52 host2 maldet(36757): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 19 2025 04:06:53 host2 maldet(36757): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Dec 19 2025 04:06:53 host2 maldet(36757): {sigup} verified md5sum of maldet-sigpack.tgz Dec 19 2025 04:06:53 host2 maldet(36757): {sigup} unpacked and installed maldet-sigpack.tgz Dec 19 2025 04:06:53 host2 maldet(36757): {sigup} verified md5sum of maldet-clean.tgz Dec 19 2025 04:06:53 host2 maldet(36757): {sigup} unpacked and installed maldet-clean.tgz Dec 19 2025 04:06:53 host2 maldet(36757): {sigup} signature set update completed Dec 19 2025 04:06:53 host2 maldet(36757): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 19 2025 04:06:53 host2 maldet(37489): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 19 2025 04:06:53 host2 maldet(37489): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 19 2025 04:06:53 host2 maldet(37489): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 19 2025 04:06:53 host2 maldet(37489): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 19 2025 04:06:53 host2 maldet(37489): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 19 2025 04:06:57 host2 maldet(37489): {scan} file list completed in 4s, found 211 files... Dec 19 2025 04:06:57 host2 maldet(37489): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 19 2025 04:06:57 host2 maldet(37489): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (211 files) in progress... Dec 19 2025 04:07:04 host2 maldet(37489): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 211, malware hits 0, cleaned hits 0, time 11s Dec 19 2025 04:07:04 host2 maldet(37489): {scan} scan report saved, to view run: maldet --report 251219-0406.37489 Dec 20 2025 03:42:10 host2 maldet(21630): {update} checking for available updates... Dec 20 2025 03:42:10 host2 maldet(21630): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 20 2025 03:42:10 host2 maldet(21630): {update} hashing install files and checking against server... Dec 20 2025 03:42:10 host2 maldet(21630): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 20 2025 03:42:10 host2 maldet(21630): {update} latest version already installed. Dec 20 2025 03:42:10 host2 maldet(21834): {sigup} performing signature update check... Dec 20 2025 03:42:10 host2 maldet(21834): {sigup} local signature set is version 202512192526679 Dec 20 2025 03:42:11 host2 maldet(21834): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 20 2025 03:42:11 host2 maldet(21834): {sigup} latest signature set already installed Dec 20 2025 03:42:11 host2 maldet(21980): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 20 2025 03:42:11 host2 maldet(21980): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 20 2025 03:42:11 host2 maldet(21980): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 20 2025 03:42:11 host2 maldet(21980): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 20 2025 03:42:11 host2 maldet(21980): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 20 2025 03:42:19 host2 maldet(21980): {scan} file list completed in 8s, found 193 files... Dec 20 2025 03:42:19 host2 maldet(21980): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 20 2025 03:42:19 host2 maldet(21980): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (193 files) in progress... Dec 20 2025 03:42:24 host2 maldet(21980): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 193, malware hits 0, cleaned hits 0, time 13s Dec 20 2025 03:42:24 host2 maldet(21980): {scan} scan report saved, to view run: maldet --report 251220-0342.21980 Dec 21 2025 04:15:55 host2 maldet(93261): {update} checking for available updates... Dec 21 2025 04:15:56 host2 maldet(93261): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 21 2025 04:15:56 host2 maldet(93261): {update} hashing install files and checking against server... Dec 21 2025 04:15:56 host2 maldet(93261): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 21 2025 04:15:56 host2 maldet(93261): {update} latest version already installed. Dec 21 2025 04:15:56 host2 maldet(93467): {sigup} performing signature update check... Dec 21 2025 04:15:56 host2 maldet(93467): {sigup} local signature set is version 202512192526679 Dec 21 2025 04:15:56 host2 maldet(93467): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 21 2025 04:15:56 host2 maldet(93467): {sigup} latest signature set already installed Dec 21 2025 04:15:56 host2 maldet(93610): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 21 2025 04:15:56 host2 maldet(93610): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 21 2025 04:15:56 host2 maldet(93610): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 21 2025 04:15:56 host2 maldet(93610): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 21 2025 04:15:56 host2 maldet(93610): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 21 2025 04:16:06 host2 maldet(93610): {scan} file list completed in 10s, found 335 files... Dec 21 2025 04:16:06 host2 maldet(93610): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 21 2025 04:16:06 host2 maldet(93610): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (335 files) in progress... Dec 21 2025 04:16:14 host2 maldet(93610): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 335, malware hits 0, cleaned hits 0, time 18s Dec 21 2025 04:16:14 host2 maldet(93610): {scan} scan report saved, to view run: maldet --report 251221-0415.93610 Dec 22 2025 03:57:58 host2 maldet(70108): {update} checking for available updates... Dec 22 2025 03:57:58 host2 maldet(70108): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 22 2025 03:57:58 host2 maldet(70108): {update} hashing install files and checking against server... Dec 22 2025 03:57:58 host2 maldet(70108): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 22 2025 03:57:58 host2 maldet(70108): {update} latest version already installed. Dec 22 2025 03:57:58 host2 maldet(70393): {sigup} performing signature update check... Dec 22 2025 03:57:58 host2 maldet(70393): {sigup} local signature set is version 202512192526679 Dec 22 2025 03:57:59 host2 maldet(70393): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 22 2025 03:57:59 host2 maldet(70393): {sigup} new signature set 202512223496934 available Dec 22 2025 03:57:59 host2 maldet(70393): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 22 2025 03:57:59 host2 maldet(70393): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 22 2025 03:57:59 host2 maldet(70393): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Dec 22 2025 03:57:59 host2 maldet(70393): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 22 2025 03:58:00 host2 maldet(70393): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 22 2025 03:58:00 host2 maldet(70393): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Dec 22 2025 03:58:00 host2 maldet(70393): {sigup} verified md5sum of maldet-sigpack.tgz Dec 22 2025 03:58:00 host2 maldet(70393): {sigup} unpacked and installed maldet-sigpack.tgz Dec 22 2025 03:58:00 host2 maldet(70393): {sigup} verified md5sum of maldet-clean.tgz Dec 22 2025 03:58:00 host2 maldet(70393): {sigup} unpacked and installed maldet-clean.tgz Dec 22 2025 03:58:00 host2 maldet(70393): {sigup} signature set update completed Dec 22 2025 03:58:00 host2 maldet(70393): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 22 2025 03:58:00 host2 maldet(71112): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 22 2025 03:58:00 host2 maldet(71112): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 22 2025 03:58:00 host2 maldet(71112): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 22 2025 03:58:00 host2 maldet(71112): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 22 2025 03:58:00 host2 maldet(71112): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 22 2025 03:58:12 host2 maldet(71112): {scan} file list completed in 12s, found 205 files... Dec 22 2025 03:58:12 host2 maldet(71112): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 22 2025 03:58:12 host2 maldet(71112): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (205 files) in progress... Dec 22 2025 03:58:19 host2 maldet(71112): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 205, malware hits 0, cleaned hits 0, time 19s Dec 22 2025 03:58:19 host2 maldet(71112): {scan} scan report saved, to view run: maldet --report 251222-0358.71112 Dec 23 2025 03:42:17 host2 maldet(62922): {update} checking for available updates... Dec 23 2025 03:42:17 host2 maldet(62922): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 23 2025 03:42:17 host2 maldet(62922): {update} hashing install files and checking against server... Dec 23 2025 03:42:17 host2 maldet(62922): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 23 2025 03:42:17 host2 maldet(62922): {update} latest version already installed. Dec 23 2025 03:42:17 host2 maldet(63103): {sigup} performing signature update check... Dec 23 2025 03:42:17 host2 maldet(63103): {sigup} local signature set is version 202512223496934 Dec 23 2025 03:42:18 host2 maldet(63103): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 23 2025 03:42:18 host2 maldet(63103): {sigup} latest signature set already installed Dec 23 2025 03:42:18 host2 maldet(63246): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 23 2025 03:42:18 host2 maldet(63246): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 23 2025 03:42:18 host2 maldet(63246): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 23 2025 03:42:18 host2 maldet(63246): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 23 2025 03:42:18 host2 maldet(63246): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 23 2025 03:42:28 host2 maldet(63246): {scan} file list completed in 10s, found 631 files... Dec 23 2025 03:42:28 host2 maldet(63246): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 23 2025 03:42:28 host2 maldet(63246): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (631 files) in progress... Dec 23 2025 03:42:39 host2 maldet(63246): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 631, malware hits 0, cleaned hits 0, time 21s Dec 23 2025 03:42:39 host2 maldet(63246): {scan} scan report saved, to view run: maldet --report 251223-0342.63246 Dec 24 2025 04:06:23 host2 maldet(76368): {update} checking for available updates... Dec 24 2025 04:06:24 host2 maldet(76368): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 24 2025 04:06:24 host2 maldet(76368): {update} hashing install files and checking against server... Dec 24 2025 04:06:24 host2 maldet(76368): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 24 2025 04:06:24 host2 maldet(76368): {update} latest version already installed. Dec 24 2025 04:06:24 host2 maldet(76664): {sigup} performing signature update check... Dec 24 2025 04:06:24 host2 maldet(76664): {sigup} local signature set is version 202512223496934 Dec 24 2025 04:06:24 host2 maldet(76664): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 24 2025 04:06:24 host2 maldet(76664): {sigup} latest signature set already installed Dec 24 2025 04:06:25 host2 maldet(76875): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 24 2025 04:06:25 host2 maldet(76875): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 24 2025 04:06:25 host2 maldet(76875): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 24 2025 04:06:25 host2 maldet(76875): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 24 2025 04:06:25 host2 maldet(76875): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 24 2025 04:06:36 host2 maldet(76875): {scan} file list completed in 11s, found 162 files... Dec 24 2025 04:06:36 host2 maldet(76875): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 24 2025 04:06:36 host2 maldet(76875): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (162 files) in progress... Dec 24 2025 04:06:44 host2 maldet(76875): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 162, malware hits 0, cleaned hits 0, time 19s Dec 24 2025 04:06:44 host2 maldet(76875): {scan} scan report saved, to view run: maldet --report 251224-0406.76875 Dec 25 2025 04:12:21 host2 maldet(94094): {update} checking for available updates... Dec 25 2025 04:12:21 host2 maldet(94094): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 25 2025 04:12:21 host2 maldet(94094): {update} hashing install files and checking against server... Dec 25 2025 04:12:21 host2 maldet(94094): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 25 2025 04:12:21 host2 maldet(94094): {update} latest version already installed. Dec 25 2025 04:12:21 host2 maldet(94361): {sigup} performing signature update check... Dec 25 2025 04:12:21 host2 maldet(94361): {sigup} local signature set is version 202512223496934 Dec 25 2025 04:12:21 host2 maldet(94361): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 25 2025 04:12:21 host2 maldet(94361): {sigup} new signature set 20251225273290 available Dec 25 2025 04:12:21 host2 maldet(94361): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 25 2025 04:12:22 host2 maldet(94361): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 25 2025 04:12:22 host2 maldet(94361): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Dec 25 2025 04:12:22 host2 maldet(94361): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 25 2025 04:12:22 host2 maldet(94361): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 25 2025 04:12:23 host2 maldet(94361): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Dec 25 2025 04:12:23 host2 maldet(94361): {sigup} verified md5sum of maldet-sigpack.tgz Dec 25 2025 04:12:23 host2 maldet(94361): {sigup} unpacked and installed maldet-sigpack.tgz Dec 25 2025 04:12:23 host2 maldet(94361): {sigup} verified md5sum of maldet-clean.tgz Dec 25 2025 04:12:23 host2 maldet(94361): {sigup} unpacked and installed maldet-clean.tgz Dec 25 2025 04:12:23 host2 maldet(94361): {sigup} signature set update completed Dec 25 2025 04:12:23 host2 maldet(94361): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 25 2025 04:12:23 host2 maldet(95067): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 25 2025 04:12:23 host2 maldet(95067): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 25 2025 04:12:23 host2 maldet(95067): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 25 2025 04:12:23 host2 maldet(95067): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 25 2025 04:12:23 host2 maldet(95067): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 25 2025 04:12:35 host2 maldet(95067): {scan} file list completed in 12s, found 419 files... Dec 25 2025 04:12:35 host2 maldet(95067): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 25 2025 04:12:35 host2 maldet(95067): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (419 files) in progress... Dec 25 2025 04:12:45 host2 maldet(95067): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 419, malware hits 0, cleaned hits 0, time 22s Dec 25 2025 04:12:45 host2 maldet(95067): {scan} scan report saved, to view run: maldet --report 251225-0412.95067 Dec 26 2025 03:43:10 host2 maldet(69904): {update} checking for available updates... Dec 26 2025 03:43:10 host2 maldet(69904): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 26 2025 03:43:10 host2 maldet(69904): {update} hashing install files and checking against server... Dec 26 2025 03:43:11 host2 maldet(69904): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 26 2025 03:43:11 host2 maldet(69904): {update} latest version already installed. Dec 26 2025 03:43:11 host2 maldet(70203): {sigup} performing signature update check... Dec 26 2025 03:43:11 host2 maldet(70203): {sigup} local signature set is version 20251225273290 Dec 26 2025 03:43:11 host2 maldet(70203): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 26 2025 03:43:11 host2 maldet(70203): {sigup} latest signature set already installed Dec 26 2025 03:43:11 host2 maldet(70385): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 26 2025 03:43:11 host2 maldet(70385): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 26 2025 03:43:11 host2 maldet(70385): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 26 2025 03:43:11 host2 maldet(70385): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 26 2025 03:43:11 host2 maldet(70385): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 26 2025 03:43:21 host2 maldet(70385): {scan} file list completed in 10s, found 76 files... Dec 26 2025 03:43:21 host2 maldet(70385): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 26 2025 03:43:21 host2 maldet(70385): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (76 files) in progress... Dec 26 2025 03:43:24 host2 maldet(70385): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 76, malware hits 0, cleaned hits 0, time 13s Dec 26 2025 03:43:24 host2 maldet(70385): {scan} scan report saved, to view run: maldet --report 251226-0343.70385 Dec 27 2025 04:00:13 host2 maldet(42472): {update} checking for available updates... Dec 27 2025 04:00:14 host2 maldet(42472): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 27 2025 04:00:14 host2 maldet(42472): {update} hashing install files and checking against server... Dec 27 2025 04:00:14 host2 maldet(42472): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 27 2025 04:00:14 host2 maldet(42472): {update} latest version already installed. Dec 27 2025 04:00:14 host2 maldet(42760): {sigup} performing signature update check... Dec 27 2025 04:00:14 host2 maldet(42760): {sigup} local signature set is version 20251225273290 Dec 27 2025 04:00:14 host2 maldet(42760): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 27 2025 04:00:14 host2 maldet(42760): {sigup} latest signature set already installed Dec 27 2025 04:00:14 host2 maldet(42950): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 27 2025 04:00:15 host2 maldet(42950): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 27 2025 04:00:15 host2 maldet(42950): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 27 2025 04:00:15 host2 maldet(42950): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 27 2025 04:00:15 host2 maldet(42950): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 27 2025 04:00:26 host2 maldet(42950): {scan} file list completed in 11s, found 423 files... Dec 27 2025 04:00:26 host2 maldet(42950): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 27 2025 04:00:26 host2 maldet(42950): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (423 files) in progress... Dec 27 2025 04:00:32 host2 maldet(42950): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 423, malware hits 0, cleaned hits 0, time 17s Dec 27 2025 04:00:32 host2 maldet(42950): {scan} scan report saved, to view run: maldet --report 251227-0400.42950 Dec 28 2025 04:00:02 host2 maldet(21283): {update} checking for available updates... Dec 28 2025 04:00:02 host2 maldet(21283): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 28 2025 04:00:02 host2 maldet(21283): {update} hashing install files and checking against server... Dec 28 2025 04:00:02 host2 maldet(21283): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 28 2025 04:00:03 host2 maldet(21283): {update} latest version already installed. Dec 28 2025 04:00:03 host2 maldet(21640): {sigup} performing signature update check... Dec 28 2025 04:00:03 host2 maldet(21640): {sigup} local signature set is version 20251225273290 Dec 28 2025 04:00:03 host2 maldet(21640): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 28 2025 04:00:03 host2 maldet(21640): {sigup} new signature set 202512281244183 available Dec 28 2025 04:00:03 host2 maldet(21640): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 28 2025 04:00:03 host2 maldet(21640): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 28 2025 04:00:04 host2 maldet(21640): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Dec 28 2025 04:00:04 host2 maldet(21640): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 28 2025 04:00:04 host2 maldet(21640): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 28 2025 04:00:04 host2 maldet(21640): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Dec 28 2025 04:00:04 host2 maldet(21640): {sigup} verified md5sum of maldet-sigpack.tgz Dec 28 2025 04:00:04 host2 maldet(21640): {sigup} unpacked and installed maldet-sigpack.tgz Dec 28 2025 04:00:04 host2 maldet(21640): {sigup} verified md5sum of maldet-clean.tgz Dec 28 2025 04:00:04 host2 maldet(21640): {sigup} unpacked and installed maldet-clean.tgz Dec 28 2025 04:00:04 host2 maldet(21640): {sigup} signature set update completed Dec 28 2025 04:00:04 host2 maldet(21640): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 28 2025 04:00:04 host2 maldet(22324): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 28 2025 04:00:05 host2 maldet(22324): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 28 2025 04:00:05 host2 maldet(22324): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 28 2025 04:00:05 host2 maldet(22324): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 28 2025 04:00:05 host2 maldet(22324): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 28 2025 04:00:15 host2 maldet(22324): {scan} file list completed in 10s, found 437 files... Dec 28 2025 04:00:15 host2 maldet(22324): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 28 2025 04:00:15 host2 maldet(22324): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (437 files) in progress... Dec 28 2025 04:00:26 host2 maldet(22324): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 437, malware hits 0, cleaned hits 0, time 22s Dec 28 2025 04:00:26 host2 maldet(22324): {scan} scan report saved, to view run: maldet --report 251228-0400.22324 Dec 29 2025 04:25:08 host2 maldet(95078): {update} checking for available updates... Dec 29 2025 04:25:08 host2 maldet(95078): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 29 2025 04:25:08 host2 maldet(95078): {update} hashing install files and checking against server... Dec 29 2025 04:25:09 host2 maldet(95078): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 29 2025 04:25:09 host2 maldet(95078): {update} latest version already installed. Dec 29 2025 04:25:09 host2 maldet(95387): {sigup} performing signature update check... Dec 29 2025 04:25:09 host2 maldet(95387): {sigup} local signature set is version 202512281244183 Dec 29 2025 04:25:09 host2 maldet(95387): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 29 2025 04:25:09 host2 maldet(95387): {sigup} latest signature set already installed Dec 29 2025 04:25:09 host2 maldet(95537): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 29 2025 04:25:09 host2 maldet(95537): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 29 2025 04:25:09 host2 maldet(95537): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 29 2025 04:25:09 host2 maldet(95537): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 29 2025 04:25:09 host2 maldet(95537): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 29 2025 04:25:21 host2 maldet(95537): {scan} file list completed in 12s, found 279 files... Dec 29 2025 04:25:21 host2 maldet(95537): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 29 2025 04:25:21 host2 maldet(95537): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (279 files) in progress... Dec 29 2025 04:25:28 host2 maldet(95537): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 279, malware hits 0, cleaned hits 0, time 19s Dec 29 2025 04:25:28 host2 maldet(95537): {scan} scan report saved, to view run: maldet --report 251229-0425.95537 Dec 30 2025 03:55:57 host2 maldet(56445): {update} checking for available updates... Dec 30 2025 03:55:57 host2 maldet(56445): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 30 2025 03:55:57 host2 maldet(56445): {update} hashing install files and checking against server... Dec 30 2025 03:55:57 host2 maldet(56445): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 30 2025 03:55:57 host2 maldet(56445): {update} latest version already installed. Dec 30 2025 03:55:57 host2 maldet(56635): {sigup} performing signature update check... Dec 30 2025 03:55:57 host2 maldet(56635): {sigup} local signature set is version 202512281244183 Dec 30 2025 03:55:58 host2 maldet(56635): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 30 2025 03:55:58 host2 maldet(56635): {sigup} latest signature set already installed Dec 30 2025 03:55:58 host2 maldet(56771): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 30 2025 03:55:58 host2 maldet(56771): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 30 2025 03:55:58 host2 maldet(56771): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 30 2025 03:55:58 host2 maldet(56771): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 30 2025 03:55:58 host2 maldet(56771): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 30 2025 03:56:08 host2 maldet(56771): {scan} file list completed in 10s, found 90 files... Dec 30 2025 03:56:08 host2 maldet(56771): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 30 2025 03:56:08 host2 maldet(56771): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (90 files) in progress... Dec 30 2025 03:56:12 host2 maldet(56771): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 90, malware hits 0, cleaned hits 0, time 14s Dec 30 2025 03:56:12 host2 maldet(56771): {scan} scan report saved, to view run: maldet --report 251230-0355.56771 Dec 31 2025 04:20:18 host2 maldet(100193): {update} checking for available updates... Dec 31 2025 04:20:19 host2 maldet(100193): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 31 2025 04:20:19 host2 maldet(100193): {update} hashing install files and checking against server... Dec 31 2025 04:20:19 host2 maldet(100193): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 31 2025 04:20:19 host2 maldet(100193): {update} latest version already installed. Dec 31 2025 04:20:19 host2 maldet(100480): {sigup} performing signature update check... Dec 31 2025 04:20:19 host2 maldet(100480): {sigup} local signature set is version 202512281244183 Dec 31 2025 04:20:19 host2 maldet(100480): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 31 2025 04:20:19 host2 maldet(100480): {sigup} new signature set 202512312207256 available Dec 31 2025 04:20:19 host2 maldet(100480): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 31 2025 04:20:20 host2 maldet(100480): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 31 2025 04:20:20 host2 maldet(100480): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Dec 31 2025 04:20:20 host2 maldet(100480): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 31 2025 04:20:20 host2 maldet(100480): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 31 2025 04:20:20 host2 maldet(100480): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Dec 31 2025 04:20:20 host2 maldet(100480): {sigup} verified md5sum of maldet-sigpack.tgz Dec 31 2025 04:20:21 host2 maldet(100480): {sigup} unpacked and installed maldet-sigpack.tgz Dec 31 2025 04:20:21 host2 maldet(100480): {sigup} verified md5sum of maldet-clean.tgz Dec 31 2025 04:20:21 host2 maldet(100480): {sigup} unpacked and installed maldet-clean.tgz Dec 31 2025 04:20:21 host2 maldet(100480): {sigup} signature set update completed Dec 31 2025 04:20:21 host2 maldet(100480): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 31 2025 04:20:21 host2 maldet(101146): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 31 2025 04:20:21 host2 maldet(101146): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 31 2025 04:20:21 host2 maldet(101146): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 31 2025 04:20:21 host2 maldet(101146): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 31 2025 04:20:21 host2 maldet(101146): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 31 2025 04:20:30 host2 maldet(101146): {scan} file list completed in 9s, found 605 files... Dec 31 2025 04:20:30 host2 maldet(101146): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 31 2025 04:20:30 host2 maldet(101146): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (605 files) in progress... Dec 31 2025 04:20:47 host2 maldet(101146): {hit} malware hit {HEX}php.base64.inject.182 found for /home/theheali/public_html/wp-content/themes/delive-themes/laputa.php Dec 31 2025 04:20:47 host2 maldet(101146): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 605, malware hits 1, cleaned hits 0, time 26s Dec 31 2025 04:20:47 host2 maldet(101146): {scan} scan report saved, to view run: maldet --report 251231-0420.101146 Dec 31 2025 04:20:47 host2 maldet(101146): {scan} quarantine is disabled! set quarantine_hits=1 in conf.maldet or to quarantine results run: maldet -q 251231-0420.101146 Jan 01 2026 04:19:02 host2 maldet(36909): {update} checking for available updates... Jan 01 2026 04:19:02 host2 maldet(36909): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 01 2026 04:19:02 host2 maldet(36909): {update} hashing install files and checking against server... Jan 01 2026 04:19:02 host2 maldet(36909): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 01 2026 04:19:02 host2 maldet(36909): {update} latest version already installed. Jan 01 2026 04:19:02 host2 maldet(37199): {sigup} performing signature update check... Jan 01 2026 04:19:02 host2 maldet(37199): {sigup} local signature set is version 202512312207256 Jan 01 2026 04:19:03 host2 maldet(37199): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 01 2026 04:19:03 host2 maldet(37199): {sigup} new signature set 202601012945490 available Jan 01 2026 04:19:03 host2 maldet(37199): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 01 2026 04:19:03 host2 maldet(37199): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 01 2026 04:19:04 host2 maldet(37199): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jan 01 2026 04:19:04 host2 maldet(37199): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 01 2026 04:19:04 host2 maldet(37199): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 01 2026 04:19:04 host2 maldet(37199): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jan 01 2026 04:19:04 host2 maldet(37199): {sigup} verified md5sum of maldet-sigpack.tgz Jan 01 2026 04:19:04 host2 maldet(37199): {sigup} unpacked and installed maldet-sigpack.tgz Jan 01 2026 04:19:04 host2 maldet(37199): {sigup} verified md5sum of maldet-clean.tgz Jan 01 2026 04:19:04 host2 maldet(37199): {sigup} unpacked and installed maldet-clean.tgz Jan 01 2026 04:19:04 host2 maldet(37199): {sigup} signature set update completed Jan 01 2026 04:19:04 host2 maldet(37199): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 01 2026 04:19:04 host2 maldet(37942): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 01 2026 04:19:05 host2 maldet(37942): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 01 2026 04:19:05 host2 maldet(37942): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 01 2026 04:19:05 host2 maldet(37942): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 01 2026 04:19:05 host2 maldet(37942): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 01 2026 04:19:11 host2 maldet(37942): {scan} file list completed in 6s, found 1099 files... Jan 01 2026 04:19:11 host2 maldet(37942): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 01 2026 04:19:11 host2 maldet(37942): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1099 files) in progress... Jan 01 2026 04:19:22 host2 maldet(37942): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1099, malware hits 0, cleaned hits 0, time 18s Jan 01 2026 04:19:22 host2 maldet(37942): {scan} scan report saved, to view run: maldet --report 260101-0419.37942 Jan 02 2026 04:29:30 host2 maldet(85282): {update} checking for available updates... Jan 02 2026 04:29:30 host2 maldet(85282): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 02 2026 04:29:30 host2 maldet(85282): {update} hashing install files and checking against server... Jan 02 2026 04:29:30 host2 maldet(85282): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 02 2026 04:29:30 host2 maldet(85282): {update} latest version already installed. Jan 02 2026 04:29:30 host2 maldet(85486): {sigup} performing signature update check... Jan 02 2026 04:29:30 host2 maldet(85486): {sigup} local signature set is version 202601012945490 Jan 02 2026 04:29:31 host2 maldet(85486): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 02 2026 04:29:31 host2 maldet(85486): {sigup} latest signature set already installed Jan 02 2026 04:29:31 host2 maldet(85601): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 02 2026 04:29:31 host2 maldet(85601): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 02 2026 04:29:31 host2 maldet(85601): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 02 2026 04:29:31 host2 maldet(85601): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 02 2026 04:29:31 host2 maldet(85601): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 02 2026 04:29:33 host2 maldet(85601): {scan} file list completed in 2s, found 212 files... Jan 02 2026 04:29:33 host2 maldet(85601): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 02 2026 04:29:33 host2 maldet(85601): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (212 files) in progress... Jan 02 2026 04:29:40 host2 maldet(85601): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 212, malware hits 0, cleaned hits 0, time 9s Jan 02 2026 04:29:40 host2 maldet(85601): {scan} scan report saved, to view run: maldet --report 260102-0429.85601 Jan 03 2026 04:12:58 host2 maldet(54439): {update} checking for available updates... Jan 03 2026 04:12:59 host2 maldet(54439): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 03 2026 04:12:59 host2 maldet(54439): {update} hashing install files and checking against server... Jan 03 2026 04:12:59 host2 maldet(54439): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 03 2026 04:12:59 host2 maldet(54439): {update} latest version already installed. Jan 03 2026 04:12:59 host2 maldet(54724): {sigup} performing signature update check... Jan 03 2026 04:12:59 host2 maldet(54724): {sigup} local signature set is version 202601012945490 Jan 03 2026 04:12:59 host2 maldet(54724): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 03 2026 04:12:59 host2 maldet(54724): {sigup} latest signature set already installed Jan 03 2026 04:12:59 host2 maldet(54919): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 03 2026 04:13:00 host2 maldet(54919): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 03 2026 04:13:00 host2 maldet(54919): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 03 2026 04:13:00 host2 maldet(54919): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 03 2026 04:13:00 host2 maldet(54919): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 03 2026 04:13:05 host2 maldet(54919): {scan} file list completed in 5s, found 337 files... Jan 03 2026 04:13:05 host2 maldet(54919): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 03 2026 04:13:05 host2 maldet(54919): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (337 files) in progress... Jan 03 2026 04:13:11 host2 maldet(54919): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 337, malware hits 0, cleaned hits 0, time 12s Jan 03 2026 04:13:11 host2 maldet(54919): {scan} scan report saved, to view run: maldet --report 260103-0412.54919 Jan 04 2026 04:39:25 host2 maldet(49523): {update} checking for available updates... Jan 04 2026 04:39:25 host2 maldet(49523): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 04 2026 04:39:25 host2 maldet(49523): {update} hashing install files and checking against server... Jan 04 2026 04:39:25 host2 maldet(49523): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 04 2026 04:39:25 host2 maldet(49523): {update} latest version already installed. Jan 04 2026 04:39:25 host2 maldet(49781): {sigup} performing signature update check... Jan 04 2026 04:39:25 host2 maldet(49781): {sigup} local signature set is version 202601012945490 Jan 04 2026 04:39:26 host2 maldet(49781): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 04 2026 04:39:26 host2 maldet(49781): {sigup} new signature set 202601043906265 available Jan 04 2026 04:39:26 host2 maldet(49781): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 04 2026 04:39:26 host2 maldet(49781): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 04 2026 04:39:26 host2 maldet(49781): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jan 04 2026 04:39:26 host2 maldet(49781): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 04 2026 04:39:27 host2 maldet(49781): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 04 2026 04:39:27 host2 maldet(49781): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jan 04 2026 04:39:27 host2 maldet(49781): {sigup} verified md5sum of maldet-sigpack.tgz Jan 04 2026 04:39:27 host2 maldet(49781): {sigup} unpacked and installed maldet-sigpack.tgz Jan 04 2026 04:39:27 host2 maldet(49781): {sigup} verified md5sum of maldet-clean.tgz Jan 04 2026 04:39:27 host2 maldet(49781): {sigup} unpacked and installed maldet-clean.tgz Jan 04 2026 04:39:27 host2 maldet(49781): {sigup} signature set update completed Jan 04 2026 04:39:27 host2 maldet(49781): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 04 2026 04:39:27 host2 maldet(50503): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 04 2026 04:39:27 host2 maldet(50503): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 04 2026 04:39:27 host2 maldet(50503): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 04 2026 04:39:27 host2 maldet(50503): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 04 2026 04:39:27 host2 maldet(50503): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 04 2026 04:39:36 host2 maldet(50503): {scan} file list completed in 9s, found 110 files... Jan 04 2026 04:39:36 host2 maldet(50503): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 04 2026 04:39:36 host2 maldet(50503): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (110 files) in progress... Jan 04 2026 04:39:42 host2 maldet(50503): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 110, malware hits 0, cleaned hits 0, time 15s Jan 04 2026 04:39:42 host2 maldet(50503): {scan} scan report saved, to view run: maldet --report 260104-0439.50503 Jan 05 2026 03:25:13 host2 maldet(80981): {update} checking for available updates... Jan 05 2026 03:25:13 host2 maldet(80981): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 05 2026 03:25:13 host2 maldet(80981): {update} hashing install files and checking against server... Jan 05 2026 03:25:13 host2 maldet(80981): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 05 2026 03:25:13 host2 maldet(80981): {update} latest version already installed. Jan 05 2026 03:25:13 host2 maldet(81097): {sigup} performing signature update check... Jan 05 2026 03:25:13 host2 maldet(81097): {sigup} local signature set is version 202601043906265 Jan 05 2026 03:25:13 host2 maldet(81097): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 05 2026 03:25:13 host2 maldet(81097): {sigup} latest signature set already installed Jan 05 2026 03:25:14 host2 maldet(81187): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 05 2026 03:25:14 host2 maldet(81187): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 05 2026 03:25:14 host2 maldet(81187): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 05 2026 03:25:14 host2 maldet(81187): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 05 2026 03:25:14 host2 maldet(81187): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 05 2026 03:25:23 host2 maldet(81187): {scan} file list completed in 9s, found 109 files... Jan 05 2026 03:25:23 host2 maldet(81187): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 05 2026 03:25:23 host2 maldet(81187): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (109 files) in progress... Jan 05 2026 03:25:27 host2 maldet(81187): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 109, malware hits 0, cleaned hits 0, time 13s Jan 05 2026 03:25:27 host2 maldet(81187): {scan} scan report saved, to view run: maldet --report 260105-0325.81187 Jan 06 2026 04:03:27 host2 maldet(10353): {update} checking for available updates... Jan 06 2026 04:03:28 host2 maldet(10353): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 06 2026 04:03:28 host2 maldet(10353): {update} hashing install files and checking against server... Jan 06 2026 04:03:28 host2 maldet(10353): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 06 2026 04:03:28 host2 maldet(10353): {update} latest version already installed. Jan 06 2026 04:03:28 host2 maldet(10647): {sigup} performing signature update check... Jan 06 2026 04:03:28 host2 maldet(10647): {sigup} local signature set is version 202601043906265 Jan 06 2026 04:03:28 host2 maldet(10647): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 06 2026 04:03:28 host2 maldet(10647): {sigup} latest signature set already installed Jan 06 2026 04:03:28 host2 maldet(10836): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 06 2026 04:03:29 host2 maldet(10836): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 06 2026 04:03:29 host2 maldet(10836): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 06 2026 04:03:29 host2 maldet(10836): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 06 2026 04:03:29 host2 maldet(10836): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 06 2026 04:03:40 host2 maldet(10836): {scan} file list completed in 11s, found 300 files... Jan 06 2026 04:03:40 host2 maldet(10836): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 06 2026 04:03:40 host2 maldet(10836): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (300 files) in progress... Jan 06 2026 04:03:44 host2 maldet(10836): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 300, malware hits 0, cleaned hits 0, time 16s Jan 06 2026 04:03:44 host2 maldet(10836): {scan} scan report saved, to view run: maldet --report 260106-0403.10836 Jan 07 2026 04:02:29 host2 maldet(100731): {update} checking for available updates... Jan 07 2026 04:02:30 host2 maldet(100731): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 07 2026 04:02:30 host2 maldet(100731): {update} hashing install files and checking against server... Jan 07 2026 04:02:30 host2 maldet(100731): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 07 2026 04:02:30 host2 maldet(100731): {update} latest version already installed. Jan 07 2026 04:02:30 host2 maldet(100931): {sigup} performing signature update check... Jan 07 2026 04:02:30 host2 maldet(100931): {sigup} local signature set is version 202601043906265 Jan 07 2026 04:02:30 host2 maldet(100931): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 07 2026 04:02:30 host2 maldet(100931): {sigup} new signature set 20260107676235 available Jan 07 2026 04:02:30 host2 maldet(100931): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 07 2026 04:02:31 host2 maldet(100931): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 07 2026 04:02:31 host2 maldet(100931): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jan 07 2026 04:02:31 host2 maldet(100931): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 07 2026 04:02:31 host2 maldet(100931): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 07 2026 04:02:32 host2 maldet(100931): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jan 07 2026 04:02:32 host2 maldet(100931): {sigup} verified md5sum of maldet-sigpack.tgz Jan 07 2026 04:02:32 host2 maldet(100931): {sigup} unpacked and installed maldet-sigpack.tgz Jan 07 2026 04:02:32 host2 maldet(100931): {sigup} verified md5sum of maldet-clean.tgz Jan 07 2026 04:02:32 host2 maldet(100931): {sigup} unpacked and installed maldet-clean.tgz Jan 07 2026 04:02:32 host2 maldet(100931): {sigup} signature set update completed Jan 07 2026 04:02:32 host2 maldet(100931): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 07 2026 04:02:32 host2 maldet(101413): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 07 2026 04:02:32 host2 maldet(101413): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 07 2026 04:02:32 host2 maldet(101413): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 07 2026 04:02:32 host2 maldet(101413): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 07 2026 04:02:32 host2 maldet(101413): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 07 2026 04:02:41 host2 maldet(101413): {scan} file list completed in 9s, found 93 files... Jan 07 2026 04:02:41 host2 maldet(101413): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 07 2026 04:02:41 host2 maldet(101413): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (93 files) in progress... Jan 07 2026 04:02:46 host2 maldet(101413): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 93, malware hits 0, cleaned hits 0, time 14s Jan 07 2026 04:02:46 host2 maldet(101413): {scan} scan report saved, to view run: maldet --report 260107-0402.101413 Jan 08 2026 04:22:19 host2 maldet(95925): {update} checking for available updates... Jan 08 2026 04:22:19 host2 maldet(95925): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 08 2026 04:22:19 host2 maldet(95925): {update} hashing install files and checking against server... Jan 08 2026 04:22:20 host2 maldet(95925): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 08 2026 04:22:20 host2 maldet(95925): {update} latest version already installed. Jan 08 2026 04:22:20 host2 maldet(96225): {sigup} performing signature update check... Jan 08 2026 04:22:20 host2 maldet(96225): {sigup} local signature set is version 20260107676235 Jan 08 2026 04:22:20 host2 maldet(96225): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 08 2026 04:22:20 host2 maldet(96225): {sigup} latest signature set already installed Jan 08 2026 04:22:20 host2 maldet(96415): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 08 2026 04:22:20 host2 maldet(96415): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 08 2026 04:22:20 host2 maldet(96415): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 08 2026 04:22:20 host2 maldet(96415): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 08 2026 04:22:20 host2 maldet(96415): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 08 2026 04:22:28 host2 maldet(96415): {scan} file list completed in 8s, found 330 files... Jan 08 2026 04:22:28 host2 maldet(96415): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 08 2026 04:22:28 host2 maldet(96415): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (330 files) in progress... Jan 08 2026 04:22:36 host2 maldet(96415): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 330, malware hits 0, cleaned hits 0, time 16s Jan 08 2026 04:22:36 host2 maldet(96415): {scan} scan report saved, to view run: maldet --report 260108-0422.96415 Jan 09 2026 03:46:16 host2 maldet(30608): {update} checking for available updates... Jan 09 2026 03:46:17 host2 maldet(30608): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 09 2026 03:46:17 host2 maldet(30608): {update} hashing install files and checking against server... Jan 09 2026 03:46:17 host2 maldet(30608): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 09 2026 03:46:17 host2 maldet(30608): {update} latest version already installed. Jan 09 2026 03:46:17 host2 maldet(30927): {sigup} performing signature update check... Jan 09 2026 03:46:17 host2 maldet(30927): {sigup} local signature set is version 20260107676235 Jan 09 2026 03:46:18 host2 maldet(30927): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 09 2026 03:46:18 host2 maldet(30927): {sigup} latest signature set already installed Jan 09 2026 03:46:18 host2 maldet(31127): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 09 2026 03:46:18 host2 maldet(31127): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 09 2026 03:46:18 host2 maldet(31127): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 09 2026 03:46:18 host2 maldet(31127): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 09 2026 03:46:18 host2 maldet(31127): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 09 2026 03:46:26 host2 maldet(31127): {scan} file list completed in 8s, found 99 files... Jan 09 2026 03:46:26 host2 maldet(31127): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 09 2026 03:46:26 host2 maldet(31127): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (99 files) in progress... Jan 09 2026 03:46:30 host2 maldet(31127): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 99, malware hits 0, cleaned hits 0, time 12s Jan 09 2026 03:46:30 host2 maldet(31127): {scan} scan report saved, to view run: maldet --report 260109-0346.31127 Jan 10 2026 03:54:49 host2 maldet(35061): {update} checking for available updates... Jan 10 2026 03:54:49 host2 maldet(35061): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 10 2026 03:54:49 host2 maldet(35061): {update} hashing install files and checking against server... Jan 10 2026 03:54:50 host2 maldet(35061): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 10 2026 03:54:50 host2 maldet(35061): {update} latest version already installed. Jan 10 2026 03:54:50 host2 maldet(35523): {sigup} performing signature update check... Jan 10 2026 03:54:50 host2 maldet(35523): {sigup} local signature set is version 20260107676235 Jan 10 2026 03:54:50 host2 maldet(35523): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 10 2026 03:54:50 host2 maldet(35523): {sigup} new signature set 202601101643813 available Jan 10 2026 03:54:50 host2 maldet(35523): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 10 2026 03:54:50 host2 maldet(35523): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 10 2026 03:54:51 host2 maldet(35523): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jan 10 2026 03:54:51 host2 maldet(35523): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 10 2026 03:54:51 host2 maldet(35523): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 10 2026 03:54:51 host2 maldet(35523): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jan 10 2026 03:54:51 host2 maldet(35523): {sigup} verified md5sum of maldet-sigpack.tgz Jan 10 2026 03:54:51 host2 maldet(35523): {sigup} unpacked and installed maldet-sigpack.tgz Jan 10 2026 03:54:51 host2 maldet(35523): {sigup} verified md5sum of maldet-clean.tgz Jan 10 2026 03:54:51 host2 maldet(35523): {sigup} unpacked and installed maldet-clean.tgz Jan 10 2026 03:54:51 host2 maldet(35523): {sigup} signature set update completed Jan 10 2026 03:54:51 host2 maldet(35523): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 10 2026 03:54:51 host2 maldet(36557): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 10 2026 03:54:52 host2 maldet(36557): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 10 2026 03:54:52 host2 maldet(36557): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 10 2026 03:54:52 host2 maldet(36557): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 10 2026 03:54:52 host2 maldet(36557): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 10 2026 03:55:03 host2 maldet(36557): {scan} file list completed in 11s, found 354 files... Jan 10 2026 03:55:03 host2 maldet(36557): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 10 2026 03:55:03 host2 maldet(36557): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (354 files) in progress... Jan 10 2026 03:55:11 host2 maldet(36557): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 354, malware hits 0, cleaned hits 0, time 20s Jan 10 2026 03:55:11 host2 maldet(36557): {scan} scan report saved, to view run: maldet --report 260110-0354.36557 Jan 11 2026 04:08:16 host2 maldet(83133): {update} checking for available updates... Jan 11 2026 04:08:16 host2 maldet(83133): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 11 2026 04:08:16 host2 maldet(83133): {update} hashing install files and checking against server... Jan 11 2026 04:08:17 host2 maldet(83133): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 11 2026 04:08:17 host2 maldet(83133): {update} latest version already installed. Jan 11 2026 04:08:17 host2 maldet(83416): {sigup} performing signature update check... Jan 11 2026 04:08:17 host2 maldet(83416): {sigup} local signature set is version 202601101643813 Jan 11 2026 04:08:17 host2 maldet(83416): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 11 2026 04:08:17 host2 maldet(83416): {sigup} latest signature set already installed Jan 11 2026 04:08:17 host2 maldet(83603): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 11 2026 04:08:17 host2 maldet(83603): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 11 2026 04:08:17 host2 maldet(83603): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 11 2026 04:08:17 host2 maldet(83603): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 11 2026 04:08:17 host2 maldet(83603): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 11 2026 04:08:28 host2 maldet(83603): {scan} file list completed in 11s, found 2315 files... Jan 11 2026 04:08:28 host2 maldet(83603): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 11 2026 04:08:28 host2 maldet(83603): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2315 files) in progress... Jan 11 2026 04:08:43 host2 maldet(83603): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2315, malware hits 0, cleaned hits 0, time 26s Jan 11 2026 04:08:43 host2 maldet(83603): {scan} scan report saved, to view run: maldet --report 260111-0408.83603 Jan 12 2026 03:38:01 host2 maldet(15856): {update} checking for available updates... Jan 12 2026 03:38:02 host2 maldet(15856): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 12 2026 03:38:02 host2 maldet(15856): {update} hashing install files and checking against server... Jan 12 2026 03:38:02 host2 maldet(15856): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 12 2026 03:38:02 host2 maldet(15856): {update} latest version already installed. Jan 12 2026 03:38:02 host2 maldet(16153): {sigup} performing signature update check... Jan 12 2026 03:38:02 host2 maldet(16153): {sigup} local signature set is version 202601101643813 Jan 12 2026 03:38:02 host2 maldet(16153): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 12 2026 03:38:02 host2 maldet(16153): {sigup} latest signature set already installed Jan 12 2026 03:38:02 host2 maldet(16342): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 12 2026 03:38:02 host2 maldet(16342): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 12 2026 03:38:02 host2 maldet(16342): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 12 2026 03:38:02 host2 maldet(16342): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 12 2026 03:38:02 host2 maldet(16342): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 12 2026 03:38:11 host2 maldet(16342): {scan} file list completed in 9s, found 223 files... Jan 12 2026 03:38:11 host2 maldet(16342): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 12 2026 03:38:11 host2 maldet(16342): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (223 files) in progress... Jan 12 2026 03:38:17 host2 maldet(16342): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 223, malware hits 0, cleaned hits 0, time 15s Jan 12 2026 03:38:17 host2 maldet(16342): {scan} scan report saved, to view run: maldet --report 260112-0338.16342 Jan 13 2026 03:40:11 host2 maldet(87796): {update} checking for available updates... Jan 13 2026 03:40:11 host2 maldet(87796): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 13 2026 03:40:11 host2 maldet(87796): {update} hashing install files and checking against server... Jan 13 2026 03:40:12 host2 maldet(87796): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 13 2026 03:40:12 host2 maldet(87796): {update} latest version already installed. Jan 13 2026 03:40:12 host2 maldet(88119): {sigup} performing signature update check... Jan 13 2026 03:40:12 host2 maldet(88119): {sigup} local signature set is version 202601101643813 Jan 13 2026 03:40:12 host2 maldet(88119): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 13 2026 03:40:12 host2 maldet(88119): {sigup} latest signature set already installed Jan 13 2026 03:40:12 host2 maldet(88331): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 13 2026 03:40:12 host2 maldet(88331): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 13 2026 03:40:12 host2 maldet(88331): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 13 2026 03:40:12 host2 maldet(88331): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 13 2026 03:40:12 host2 maldet(88331): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 13 2026 03:40:21 host2 maldet(88331): {scan} file list completed in 9s, found 186 files... Jan 13 2026 03:40:21 host2 maldet(88331): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 13 2026 03:40:21 host2 maldet(88331): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (186 files) in progress... Jan 13 2026 03:40:28 host2 maldet(88331): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 186, malware hits 0, cleaned hits 0, time 16s Jan 13 2026 03:40:28 host2 maldet(88331): {scan} scan report saved, to view run: maldet --report 260113-0340.88331 Jan 14 2026 04:02:41 host2 maldet(44012): {update} checking for available updates... Jan 14 2026 04:02:42 host2 maldet(44012): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 14 2026 04:02:42 host2 maldet(44012): {update} hashing install files and checking against server... Jan 14 2026 04:02:42 host2 maldet(44012): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 14 2026 04:02:42 host2 maldet(44012): {update} latest version already installed. Jan 14 2026 04:02:42 host2 maldet(44222): {sigup} performing signature update check... Jan 14 2026 04:02:42 host2 maldet(44222): {sigup} local signature set is version 202601101643813 Jan 14 2026 04:02:42 host2 maldet(44222): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 14 2026 04:02:42 host2 maldet(44222): {sigup} latest signature set already installed Jan 14 2026 04:02:43 host2 maldet(44381): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 14 2026 04:02:43 host2 maldet(44381): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 14 2026 04:02:43 host2 maldet(44381): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 14 2026 04:02:43 host2 maldet(44381): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 14 2026 04:02:43 host2 maldet(44381): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 14 2026 04:02:52 host2 maldet(44381): {scan} file list completed in 9s, found 397 files... Jan 14 2026 04:02:52 host2 maldet(44381): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 14 2026 04:02:52 host2 maldet(44381): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (397 files) in progress... Jan 14 2026 04:02:59 host2 maldet(44381): {hit} malware hit {HEX}php.exe.globals.416 found for /home/christia/public_html/wp-includes/hqgyot.php Jan 14 2026 04:02:59 host2 maldet(44381): {hit} malware hit {HEX}php.exe.globals.416 found for /home/christia/public_html/wp-includes/xbdfze.php Jan 14 2026 04:02:59 host2 maldet(44381): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 397, malware hits 2, cleaned hits 0, time 16s Jan 14 2026 04:02:59 host2 maldet(44381): {scan} scan report saved, to view run: maldet --report 260114-0402.44381 Jan 14 2026 04:02:59 host2 maldet(44381): {scan} quarantine is disabled! set quarantine_hits=1 in conf.maldet or to quarantine results run: maldet -q 260114-0402.44381 Jan 15 2026 04:13:33 host2 maldet(101838): {update} checking for available updates... Jan 15 2026 04:13:34 host2 maldet(101838): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 15 2026 04:13:34 host2 maldet(101838): {update} hashing install files and checking against server... Jan 15 2026 04:13:34 host2 maldet(101838): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 15 2026 04:13:34 host2 maldet(101838): {update} latest version already installed. Jan 15 2026 04:13:34 host2 maldet(102064): {sigup} performing signature update check... Jan 15 2026 04:13:34 host2 maldet(102064): {sigup} local signature set is version 202601101643813 Jan 15 2026 04:13:34 host2 maldet(102064): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 15 2026 04:13:34 host2 maldet(102064): {sigup} latest signature set already installed Jan 15 2026 04:13:34 host2 maldet(102237): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 15 2026 04:13:35 host2 maldet(102237): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 15 2026 04:13:35 host2 maldet(102237): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 15 2026 04:13:35 host2 maldet(102237): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 15 2026 04:13:35 host2 maldet(102237): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 15 2026 04:13:40 host2 maldet(102237): {scan} file list completed in 5s, found 549 files... Jan 15 2026 04:13:40 host2 maldet(102237): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 15 2026 04:13:40 host2 maldet(102237): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (549 files) in progress... Jan 15 2026 04:13:50 host2 maldet(102237): {hit} malware hit {HEX}php.exe.globals.416 found for /home/christia/public_html/wp-includes/yfhhfw.php Jan 15 2026 04:13:50 host2 maldet(102237): {hit} malware hit {HEX}php.nested.base64.652 found for /tmp/systemd-private-c2152d32c06546f7932b08ae47342309-ea-php73-php-fpm.service-nZ3dgm/tmp/run_69685d5f20d8c.php Jan 15 2026 04:13:50 host2 maldet(102237): {hit} malware hit {HEX}php.nested.base64.652 found for /var/tmp/systemd-private-c2152d32c06546f7932b08ae47342309-ea-php73-php-fpm.service-nZ3dgm/tmp/run_69685d5f20d8c.php Jan 15 2026 04:13:50 host2 maldet(102237): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 549, malware hits 3, cleaned hits 0, time 16s Jan 15 2026 04:13:50 host2 maldet(102237): {scan} scan report saved, to view run: maldet --report 260115-0413.102237 Jan 15 2026 04:13:50 host2 maldet(102237): {scan} quarantine is disabled! set quarantine_hits=1 in conf.maldet or to quarantine results run: maldet -q 260115-0413.102237 Jan 16 2026 03:16:38 host2 maldet(68453): {update} checking for available updates... Jan 16 2026 03:16:38 host2 maldet(68453): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 16 2026 03:16:38 host2 maldet(68453): {update} hashing install files and checking against server... Jan 16 2026 03:16:38 host2 maldet(68453): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 16 2026 03:16:38 host2 maldet(68453): {update} latest version already installed. Jan 16 2026 03:16:38 host2 maldet(68662): {sigup} performing signature update check... Jan 16 2026 03:16:38 host2 maldet(68662): {sigup} local signature set is version 202601101643813 Jan 16 2026 03:16:39 host2 maldet(68662): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 16 2026 03:16:39 host2 maldet(68662): {sigup} new signature set 20260116700884 available Jan 16 2026 03:16:39 host2 maldet(68662): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 16 2026 03:16:39 host2 maldet(68662): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 16 2026 03:16:39 host2 maldet(68662): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jan 16 2026 03:16:39 host2 maldet(68662): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 16 2026 03:16:39 host2 maldet(68662): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 16 2026 03:16:40 host2 maldet(68662): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jan 16 2026 03:16:40 host2 maldet(68662): {sigup} verified md5sum of maldet-sigpack.tgz Jan 16 2026 03:16:40 host2 maldet(68662): {sigup} unpacked and installed maldet-sigpack.tgz Jan 16 2026 03:16:40 host2 maldet(68662): {sigup} verified md5sum of maldet-clean.tgz Jan 16 2026 03:16:40 host2 maldet(68662): {sigup} unpacked and installed maldet-clean.tgz Jan 16 2026 03:16:40 host2 maldet(68662): {sigup} signature set update completed Jan 16 2026 03:16:40 host2 maldet(68662): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 16 2026 03:16:40 host2 maldet(69133): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 16 2026 03:16:40 host2 maldet(69133): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 16 2026 03:16:40 host2 maldet(69133): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 16 2026 03:16:40 host2 maldet(69133): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 16 2026 03:16:40 host2 maldet(69133): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 16 2026 03:16:49 host2 maldet(69133): {scan} file list completed in 8s, found 332 files... Jan 16 2026 03:16:49 host2 maldet(69133): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 16 2026 03:16:49 host2 maldet(69133): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (332 files) in progress... Jan 16 2026 03:16:54 host2 maldet(69133): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 332, malware hits 0, cleaned hits 0, time 14s Jan 16 2026 03:16:54 host2 maldet(69133): {scan} scan report saved, to view run: maldet --report 260116-0316.69133 Jan 17 2026 04:07:03 host2 maldet(64472): {update} checking for available updates... Jan 17 2026 04:07:03 host2 maldet(64472): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 17 2026 04:07:03 host2 maldet(64472): {update} hashing install files and checking against server... Jan 17 2026 04:07:04 host2 maldet(64472): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 17 2026 04:07:04 host2 maldet(64472): {update} latest version already installed. Jan 17 2026 04:07:04 host2 maldet(64678): {sigup} performing signature update check... Jan 17 2026 04:07:04 host2 maldet(64678): {sigup} local signature set is version 20260116700884 Jan 17 2026 04:07:04 host2 maldet(64678): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 17 2026 04:07:04 host2 maldet(64678): {sigup} latest signature set already installed Jan 17 2026 04:07:04 host2 maldet(64827): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 17 2026 04:07:04 host2 maldet(64827): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 17 2026 04:07:04 host2 maldet(64827): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 17 2026 04:07:04 host2 maldet(64827): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 17 2026 04:07:04 host2 maldet(64827): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 17 2026 04:07:13 host2 maldet(64827): {scan} file list completed in 9s, found 299 files... Jan 17 2026 04:07:13 host2 maldet(64827): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 17 2026 04:07:13 host2 maldet(64827): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (299 files) in progress... Jan 17 2026 04:07:19 host2 maldet(64827): {hit} malware hit {HEX}php.nested.base64.663 found for /home/christia/public_html/wp-includes/SfhtMc4JRYy.php Jan 17 2026 04:07:19 host2 maldet(64827): {hit} malware hit {HEX}php.exe.globals.416 found for /home/christia/public_html/wp-includes/ovrlid.php Jan 17 2026 04:07:19 host2 maldet(64827): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 299, malware hits 2, cleaned hits 0, time 15s Jan 17 2026 04:07:19 host2 maldet(64827): {scan} scan report saved, to view run: maldet --report 260117-0407.64827 Jan 17 2026 04:07:19 host2 maldet(64827): {scan} quarantine is disabled! set quarantine_hits=1 in conf.maldet or to quarantine results run: maldet -q 260117-0407.64827 Jan 18 2026 04:16:17 host2 maldet(48619): {update} checking for available updates... Jan 18 2026 04:16:17 host2 maldet(48619): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 18 2026 04:16:17 host2 maldet(48619): {update} hashing install files and checking against server... Jan 18 2026 04:16:18 host2 maldet(48619): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 18 2026 04:16:18 host2 maldet(48619): {update} latest version already installed. Jan 18 2026 04:16:18 host2 maldet(48910): {sigup} performing signature update check... Jan 18 2026 04:16:18 host2 maldet(48910): {sigup} local signature set is version 20260116700884 Jan 18 2026 04:16:18 host2 maldet(48910): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 18 2026 04:16:18 host2 maldet(48910): {sigup} latest signature set already installed Jan 18 2026 04:16:18 host2 maldet(49102): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 18 2026 04:16:18 host2 maldet(49102): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 18 2026 04:16:18 host2 maldet(49102): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 18 2026 04:16:18 host2 maldet(49102): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 18 2026 04:16:18 host2 maldet(49102): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 18 2026 04:16:28 host2 maldet(49102): {scan} file list completed in 10s, found 149 files... Jan 18 2026 04:16:28 host2 maldet(49102): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 18 2026 04:16:28 host2 maldet(49102): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (149 files) in progress... Jan 18 2026 04:16:32 host2 maldet(49102): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 149, malware hits 0, cleaned hits 0, time 14s Jan 18 2026 04:16:32 host2 maldet(49102): {scan} scan report saved, to view run: maldet --report 260118-0416.49102 Jan 19 2026 04:28:47 host2 maldet(4441): {update} checking for available updates... Jan 19 2026 04:28:47 host2 maldet(4441): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 19 2026 04:28:47 host2 maldet(4441): {update} hashing install files and checking against server... Jan 19 2026 04:28:47 host2 maldet(4441): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 19 2026 04:28:47 host2 maldet(4441): {update} latest version already installed. Jan 19 2026 04:28:48 host2 maldet(4562): {sigup} performing signature update check... Jan 19 2026 04:28:48 host2 maldet(4562): {sigup} local signature set is version 20260116700884 Jan 19 2026 04:28:48 host2 maldet(4562): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 19 2026 04:28:48 host2 maldet(4562): {sigup} new signature set 202601191671201 available Jan 19 2026 04:28:48 host2 maldet(4562): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 19 2026 04:28:48 host2 maldet(4562): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 19 2026 04:28:48 host2 maldet(4562): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jan 19 2026 04:28:48 host2 maldet(4562): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 19 2026 04:28:49 host2 maldet(4562): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 19 2026 04:28:49 host2 maldet(4562): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jan 19 2026 04:28:49 host2 maldet(4562): {sigup} verified md5sum of maldet-sigpack.tgz Jan 19 2026 04:28:49 host2 maldet(4562): {sigup} unpacked and installed maldet-sigpack.tgz Jan 19 2026 04:28:49 host2 maldet(4562): {sigup} verified md5sum of maldet-clean.tgz Jan 19 2026 04:28:49 host2 maldet(4562): {sigup} unpacked and installed maldet-clean.tgz Jan 19 2026 04:28:49 host2 maldet(4562): {sigup} signature set update completed Jan 19 2026 04:28:49 host2 maldet(4562): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 19 2026 04:28:49 host2 maldet(4784): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 19 2026 04:28:49 host2 maldet(4784): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 19 2026 04:28:49 host2 maldet(4784): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 19 2026 04:28:49 host2 maldet(4784): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 19 2026 04:28:49 host2 maldet(4784): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 19 2026 04:28:58 host2 maldet(4784): {scan} file list completed in 9s, found 373 files... Jan 19 2026 04:28:58 host2 maldet(4784): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 19 2026 04:28:58 host2 maldet(4784): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (373 files) in progress... Jan 19 2026 04:29:03 host2 maldet(4784): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 373, malware hits 0, cleaned hits 0, time 14s Jan 19 2026 04:29:03 host2 maldet(4784): {scan} scan report saved, to view run: maldet --report 260119-0428.4784 Jan 20 2026 04:15:34 host2 maldet(11609): {update} checking for available updates... Jan 20 2026 04:15:35 host2 maldet(11609): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 20 2026 04:15:35 host2 maldet(11609): {update} hashing install files and checking against server... Jan 20 2026 04:15:35 host2 maldet(11609): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 20 2026 04:15:35 host2 maldet(11609): {update} latest version already installed. Jan 20 2026 04:15:35 host2 maldet(11784): {sigup} performing signature update check... Jan 20 2026 04:15:35 host2 maldet(11784): {sigup} local signature set is version 202601191671201 Jan 20 2026 04:15:35 host2 maldet(11784): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 20 2026 04:15:35 host2 maldet(11784): {sigup} latest signature set already installed Jan 20 2026 04:15:35 host2 maldet(11911): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 20 2026 04:15:36 host2 maldet(11911): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 20 2026 04:15:36 host2 maldet(11911): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 20 2026 04:15:36 host2 maldet(11911): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 20 2026 04:15:36 host2 maldet(11911): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 20 2026 04:15:43 host2 maldet(11911): {scan} file list completed in 7s, found 748 files... Jan 20 2026 04:15:43 host2 maldet(11911): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 20 2026 04:15:43 host2 maldet(11911): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (748 files) in progress... Jan 20 2026 04:15:54 host2 maldet(11911): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 748, malware hits 0, cleaned hits 0, time 19s Jan 20 2026 04:15:54 host2 maldet(11911): {scan} scan report saved, to view run: maldet --report 260120-0415.11911 Jan 21 2026 03:50:28 host2 maldet(44976): {update} checking for available updates... Jan 21 2026 03:50:28 host2 maldet(44976): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 21 2026 03:50:28 host2 maldet(44976): {update} hashing install files and checking against server... Jan 21 2026 03:50:29 host2 maldet(44976): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 21 2026 03:50:29 host2 maldet(44976): {update} latest version already installed. Jan 21 2026 03:50:29 host2 maldet(45098): {sigup} performing signature update check... Jan 21 2026 03:50:29 host2 maldet(45098): {sigup} local signature set is version 202601191671201 Jan 21 2026 03:50:29 host2 maldet(45098): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 21 2026 03:50:29 host2 maldet(45098): {sigup} latest signature set already installed Jan 21 2026 03:50:29 host2 maldet(45204): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 21 2026 03:50:29 host2 maldet(45204): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 21 2026 03:50:29 host2 maldet(45204): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 21 2026 03:50:29 host2 maldet(45204): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 21 2026 03:50:29 host2 maldet(45204): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 21 2026 03:50:37 host2 maldet(45204): {scan} file list completed in 8s, found 403 files... Jan 21 2026 03:50:37 host2 maldet(45204): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 21 2026 03:50:37 host2 maldet(45204): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (403 files) in progress... Jan 21 2026 03:50:46 host2 maldet(45204): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 403, malware hits 0, cleaned hits 0, time 17s Jan 21 2026 03:50:46 host2 maldet(45204): {scan} scan report saved, to view run: maldet --report 260121-0350.45204 Jan 22 2026 04:25:22 host2 maldet(32923): {update} checking for available updates... Jan 22 2026 04:25:22 host2 maldet(32923): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 22 2026 04:25:22 host2 maldet(32923): {update} hashing install files and checking against server... Jan 22 2026 04:25:22 host2 maldet(32923): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 22 2026 04:25:22 host2 maldet(32923): {update} latest version already installed. Jan 22 2026 04:25:22 host2 maldet(33132): {sigup} performing signature update check... Jan 22 2026 04:25:22 host2 maldet(33132): {sigup} local signature set is version 202601191671201 Jan 22 2026 04:25:22 host2 maldet(33132): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 22 2026 04:25:22 host2 maldet(33132): {sigup} new signature set 202601222641432 available Jan 22 2026 04:25:22 host2 maldet(33132): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 22 2026 04:25:23 host2 maldet(33132): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 22 2026 04:25:23 host2 maldet(33132): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jan 22 2026 04:25:23 host2 maldet(33132): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 22 2026 04:25:24 host2 maldet(33132): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 22 2026 04:25:24 host2 maldet(33132): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jan 22 2026 04:25:24 host2 maldet(33132): {sigup} verified md5sum of maldet-sigpack.tgz Jan 22 2026 04:25:24 host2 maldet(33132): {sigup} unpacked and installed maldet-sigpack.tgz Jan 22 2026 04:25:24 host2 maldet(33132): {sigup} verified md5sum of maldet-clean.tgz Jan 22 2026 04:25:24 host2 maldet(33132): {sigup} unpacked and installed maldet-clean.tgz Jan 22 2026 04:25:24 host2 maldet(33132): {sigup} signature set update completed Jan 22 2026 04:25:24 host2 maldet(33132): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 22 2026 04:25:24 host2 maldet(33644): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 22 2026 04:25:24 host2 maldet(33644): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 22 2026 04:25:24 host2 maldet(33644): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 22 2026 04:25:24 host2 maldet(33644): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 22 2026 04:25:24 host2 maldet(33644): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 22 2026 04:25:32 host2 maldet(33644): {scan} file list completed in 8s, found 219 files... Jan 22 2026 04:25:32 host2 maldet(33644): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 22 2026 04:25:32 host2 maldet(33644): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (219 files) in progress... Jan 22 2026 04:25:38 host2 maldet(33644): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 219, malware hits 0, cleaned hits 0, time 14s Jan 22 2026 04:25:38 host2 maldet(33644): {scan} scan report saved, to view run: maldet --report 260122-0425.33644 Jan 23 2026 03:58:59 host2 maldet(102126): {update} checking for available updates... Jan 23 2026 03:58:59 host2 maldet(102126): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 23 2026 03:58:59 host2 maldet(102126): {update} hashing install files and checking against server... Jan 23 2026 03:59:00 host2 maldet(102126): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 23 2026 03:59:00 host2 maldet(102126): {update} latest version already installed. Jan 23 2026 03:59:00 host2 maldet(102348): {sigup} performing signature update check... Jan 23 2026 03:59:00 host2 maldet(102348): {sigup} local signature set is version 202601222641432 Jan 23 2026 03:59:00 host2 maldet(102348): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 23 2026 03:59:00 host2 maldet(102348): {sigup} latest signature set already installed Jan 23 2026 03:59:00 host2 maldet(402): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 23 2026 03:59:00 host2 maldet(402): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 23 2026 03:59:00 host2 maldet(402): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 23 2026 03:59:00 host2 maldet(402): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 23 2026 03:59:00 host2 maldet(402): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 23 2026 03:59:06 host2 maldet(402): {scan} file list completed in 6s, found 803 files... Jan 23 2026 03:59:06 host2 maldet(402): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 23 2026 03:59:06 host2 maldet(402): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (803 files) in progress... Jan 23 2026 03:59:13 host2 maldet(402): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 803, malware hits 0, cleaned hits 0, time 13s Jan 23 2026 03:59:13 host2 maldet(402): {scan} scan report saved, to view run: maldet --report 260123-0359.402 Jan 24 2026 03:36:30 host2 maldet(55359): {update} checking for available updates... Jan 24 2026 03:36:30 host2 maldet(55359): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 24 2026 03:36:30 host2 maldet(55359): {update} hashing install files and checking against server... Jan 24 2026 03:36:30 host2 maldet(55359): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 24 2026 03:36:30 host2 maldet(55359): {update} latest version already installed. Jan 24 2026 03:36:30 host2 maldet(55557): {sigup} performing signature update check... Jan 24 2026 03:36:30 host2 maldet(55557): {sigup} local signature set is version 202601222641432 Jan 24 2026 03:36:31 host2 maldet(55557): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 24 2026 03:36:31 host2 maldet(55557): {sigup} latest signature set already installed Jan 24 2026 03:36:31 host2 maldet(55694): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 24 2026 03:36:31 host2 maldet(55694): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 24 2026 03:36:31 host2 maldet(55694): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 24 2026 03:36:31 host2 maldet(55694): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 24 2026 03:36:31 host2 maldet(55694): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 24 2026 03:36:39 host2 maldet(55694): {scan} file list completed in 8s, found 297 files... Jan 24 2026 03:36:39 host2 maldet(55694): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 24 2026 03:36:39 host2 maldet(55694): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (297 files) in progress... Jan 24 2026 03:36:45 host2 maldet(55694): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 297, malware hits 0, cleaned hits 0, time 14s Jan 24 2026 03:36:45 host2 maldet(55694): {scan} scan report saved, to view run: maldet --report 260124-0336.55694 Jan 25 2026 03:22:20 host2 maldet(84938): {update} checking for available updates... Jan 25 2026 03:22:21 host2 maldet(84938): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 25 2026 03:22:21 host2 maldet(84938): {update} hashing install files and checking against server... Jan 25 2026 03:22:21 host2 maldet(84938): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 25 2026 03:22:21 host2 maldet(84938): {update} latest version already installed. Jan 25 2026 03:22:21 host2 maldet(85063): {sigup} performing signature update check... Jan 25 2026 03:22:21 host2 maldet(85063): {sigup} local signature set is version 202601222641432 Jan 25 2026 03:22:21 host2 maldet(85063): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 25 2026 03:22:21 host2 maldet(85063): {sigup} new signature set 202601253611720 available Jan 25 2026 03:22:21 host2 maldet(85063): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 25 2026 03:22:22 host2 maldet(85063): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 25 2026 03:22:22 host2 maldet(85063): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jan 25 2026 03:22:22 host2 maldet(85063): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 25 2026 03:22:22 host2 maldet(85063): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 25 2026 03:22:22 host2 maldet(85063): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jan 25 2026 03:22:22 host2 maldet(85063): {sigup} verified md5sum of maldet-sigpack.tgz Jan 25 2026 03:22:22 host2 maldet(85063): {sigup} unpacked and installed maldet-sigpack.tgz Jan 25 2026 03:22:22 host2 maldet(85063): {sigup} verified md5sum of maldet-clean.tgz Jan 25 2026 03:22:22 host2 maldet(85063): {sigup} unpacked and installed maldet-clean.tgz Jan 25 2026 03:22:22 host2 maldet(85063): {sigup} signature set update completed Jan 25 2026 03:22:22 host2 maldet(85063): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 25 2026 03:22:22 host2 maldet(85301): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 25 2026 03:22:23 host2 maldet(85301): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 25 2026 03:22:23 host2 maldet(85301): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 25 2026 03:22:23 host2 maldet(85301): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 25 2026 03:22:23 host2 maldet(85301): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 25 2026 03:22:31 host2 maldet(85301): {scan} file list completed in 8s, found 376 files... Jan 25 2026 03:22:31 host2 maldet(85301): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 25 2026 03:22:31 host2 maldet(85301): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (376 files) in progress... Jan 25 2026 03:22:39 host2 maldet(85301): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 376, malware hits 0, cleaned hits 0, time 17s Jan 25 2026 03:22:39 host2 maldet(85301): {scan} scan report saved, to view run: maldet --report 260125-0322.85301 Jan 26 2026 03:57:19 host2 maldet(70754): {update} checking for available updates... Jan 26 2026 03:57:19 host2 maldet(70754): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 26 2026 03:57:19 host2 maldet(70754): {update} hashing install files and checking against server... Jan 26 2026 03:57:20 host2 maldet(70754): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 26 2026 03:57:20 host2 maldet(70754): {update} latest version already installed. Jan 26 2026 03:57:20 host2 maldet(70878): {sigup} performing signature update check... Jan 26 2026 03:57:20 host2 maldet(70878): {sigup} local signature set is version 202601253611720 Jan 26 2026 03:57:20 host2 maldet(70878): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 26 2026 03:57:20 host2 maldet(70878): {sigup} latest signature set already installed Jan 26 2026 03:57:20 host2 maldet(70967): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 26 2026 03:57:20 host2 maldet(70967): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 26 2026 03:57:20 host2 maldet(70967): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 26 2026 03:57:20 host2 maldet(70967): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 26 2026 03:57:20 host2 maldet(70967): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 26 2026 03:57:28 host2 maldet(70967): {scan} file list completed in 8s, found 191 files... Jan 26 2026 03:57:28 host2 maldet(70967): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 26 2026 03:57:28 host2 maldet(70967): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (191 files) in progress... Jan 26 2026 03:57:34 host2 maldet(70967): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 191, malware hits 0, cleaned hits 0, time 14s Jan 26 2026 03:57:34 host2 maldet(70967): {scan} scan report saved, to view run: maldet --report 260126-0357.70967 Jan 27 2026 03:41:47 host2 maldet(6071): {update} checking for available updates... Jan 27 2026 03:41:47 host2 maldet(6071): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 27 2026 03:41:47 host2 maldet(6071): {update} hashing install files and checking against server... Jan 27 2026 03:41:47 host2 maldet(6071): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 27 2026 03:41:47 host2 maldet(6071): {update} latest version already installed. Jan 27 2026 03:41:47 host2 maldet(6190): {sigup} performing signature update check... Jan 27 2026 03:41:47 host2 maldet(6190): {sigup} local signature set is version 202601253611720 Jan 27 2026 03:41:48 host2 maldet(6190): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 27 2026 03:41:48 host2 maldet(6190): {sigup} latest signature set already installed Jan 27 2026 03:41:48 host2 maldet(6292): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 27 2026 03:41:48 host2 maldet(6292): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 27 2026 03:41:48 host2 maldet(6292): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 27 2026 03:41:48 host2 maldet(6292): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 27 2026 03:41:48 host2 maldet(6292): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 27 2026 03:41:56 host2 maldet(6292): {scan} file list completed in 8s, found 229 files... Jan 27 2026 03:41:56 host2 maldet(6292): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 27 2026 03:41:56 host2 maldet(6292): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (229 files) in progress... Jan 27 2026 03:42:01 host2 maldet(6292): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 229, malware hits 0, cleaned hits 0, time 13s Jan 27 2026 03:42:01 host2 maldet(6292): {scan} scan report saved, to view run: maldet --report 260127-0341.6292 Jan 28 2026 04:42:27 host2 maldet(8641): {update} checking for available updates... Jan 28 2026 04:42:27 host2 maldet(8641): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 28 2026 04:42:27 host2 maldet(8641): {update} hashing install files and checking against server... Jan 28 2026 04:42:27 host2 maldet(8641): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 28 2026 04:42:27 host2 maldet(8641): {update} latest version already installed. Jan 28 2026 04:42:27 host2 maldet(8759): {sigup} performing signature update check... Jan 28 2026 04:42:27 host2 maldet(8759): {sigup} local signature set is version 202601253611720 Jan 28 2026 04:42:28 host2 maldet(8759): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 28 2026 04:42:28 host2 maldet(8759): {sigup} new signature set 20260128388144 available Jan 28 2026 04:42:28 host2 maldet(8759): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 28 2026 04:42:28 host2 maldet(8759): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 28 2026 04:42:28 host2 maldet(8759): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jan 28 2026 04:42:28 host2 maldet(8759): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 28 2026 04:42:29 host2 maldet(8759): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 28 2026 04:42:29 host2 maldet(8759): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jan 28 2026 04:42:29 host2 maldet(8759): {sigup} verified md5sum of maldet-sigpack.tgz Jan 28 2026 04:42:29 host2 maldet(8759): {sigup} unpacked and installed maldet-sigpack.tgz Jan 28 2026 04:42:29 host2 maldet(8759): {sigup} verified md5sum of maldet-clean.tgz Jan 28 2026 04:42:29 host2 maldet(8759): {sigup} unpacked and installed maldet-clean.tgz Jan 28 2026 04:42:29 host2 maldet(8759): {sigup} signature set update completed Jan 28 2026 04:42:29 host2 maldet(8759): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 28 2026 04:42:29 host2 maldet(9005): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 28 2026 04:42:29 host2 maldet(9005): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 28 2026 04:42:29 host2 maldet(9005): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 28 2026 04:42:29 host2 maldet(9005): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 28 2026 04:42:29 host2 maldet(9005): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 28 2026 04:42:37 host2 maldet(9005): {scan} file list completed in 8s, found 179 files... Jan 28 2026 04:42:37 host2 maldet(9005): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 28 2026 04:42:37 host2 maldet(9005): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (179 files) in progress... Jan 28 2026 04:42:45 host2 maldet(9005): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 179, malware hits 0, cleaned hits 0, time 16s Jan 28 2026 04:42:45 host2 maldet(9005): {scan} scan report saved, to view run: maldet --report 260128-0442.9005 Jan 29 2026 04:18:00 host2 maldet(64240): {update} checking for available updates... Jan 29 2026 04:18:00 host2 maldet(64240): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 29 2026 04:18:00 host2 maldet(64240): {update} hashing install files and checking against server... Jan 29 2026 04:18:00 host2 maldet(64240): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 29 2026 04:18:00 host2 maldet(64240): {update} latest version already installed. Jan 29 2026 04:18:00 host2 maldet(64378): {sigup} performing signature update check... Jan 29 2026 04:18:00 host2 maldet(64378): {sigup} local signature set is version 20260128388144 Jan 29 2026 04:18:00 host2 maldet(64378): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 29 2026 04:18:00 host2 maldet(64378): {sigup} latest signature set already installed Jan 29 2026 04:18:00 host2 maldet(64468): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 29 2026 04:18:01 host2 maldet(64468): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 29 2026 04:18:01 host2 maldet(64468): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 29 2026 04:18:01 host2 maldet(64468): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 29 2026 04:18:01 host2 maldet(64468): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 29 2026 04:18:07 host2 maldet(64468): {scan} file list completed in 6s, found 639 files... Jan 29 2026 04:18:07 host2 maldet(64468): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 29 2026 04:18:07 host2 maldet(64468): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (639 files) in progress... Jan 29 2026 04:18:13 host2 maldet(64468): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 639, malware hits 0, cleaned hits 0, time 13s Jan 29 2026 04:18:13 host2 maldet(64468): {scan} scan report saved, to view run: maldet --report 260129-0418.64468 Jan 30 2026 04:33:19 host2 maldet(62352): {update} checking for available updates... Jan 30 2026 04:33:20 host2 maldet(62352): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 30 2026 04:33:20 host2 maldet(62352): {update} hashing install files and checking against server... Jan 30 2026 04:33:20 host2 maldet(62352): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 30 2026 04:33:20 host2 maldet(62352): {update} latest version already installed. Jan 30 2026 04:33:20 host2 maldet(62468): {sigup} performing signature update check... Jan 30 2026 04:33:20 host2 maldet(62468): {sigup} local signature set is version 20260128388144 Jan 30 2026 04:33:20 host2 maldet(62468): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 30 2026 04:33:20 host2 maldet(62468): {sigup} latest signature set already installed Jan 30 2026 04:33:20 host2 maldet(62563): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 30 2026 04:33:20 host2 maldet(62563): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 30 2026 04:33:20 host2 maldet(62563): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 30 2026 04:33:20 host2 maldet(62563): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 30 2026 04:33:20 host2 maldet(62563): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 30 2026 04:33:28 host2 maldet(62563): {scan} file list completed in 8s, found 202 files... Jan 30 2026 04:33:28 host2 maldet(62563): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 30 2026 04:33:28 host2 maldet(62563): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (202 files) in progress... Jan 30 2026 04:33:31 host2 maldet(62563): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 202, malware hits 0, cleaned hits 0, time 11s Jan 30 2026 04:33:31 host2 maldet(62563): {scan} scan report saved, to view run: maldet --report 260130-0433.62563 Jan 31 2026 03:58:22 host2 maldet(45387): {update} checking for available updates... Jan 31 2026 03:58:22 host2 maldet(45387): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 31 2026 03:58:22 host2 maldet(45387): {update} hashing install files and checking against server... Jan 31 2026 03:58:22 host2 maldet(45387): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 31 2026 03:58:22 host2 maldet(45387): {update} latest version already installed. Jan 31 2026 03:58:22 host2 maldet(45516): {sigup} performing signature update check... Jan 31 2026 03:58:22 host2 maldet(45516): {sigup} local signature set is version 20260128388144 Jan 31 2026 03:58:23 host2 maldet(45516): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 31 2026 03:58:23 host2 maldet(45516): {sigup} new signature set 202601311395689 available Jan 31 2026 03:58:23 host2 maldet(45516): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 31 2026 03:58:23 host2 maldet(45516): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 31 2026 03:58:23 host2 maldet(45516): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jan 31 2026 03:58:23 host2 maldet(45516): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 31 2026 03:58:24 host2 maldet(45516): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 31 2026 03:58:24 host2 maldet(45516): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jan 31 2026 03:58:24 host2 maldet(45516): {sigup} verified md5sum of maldet-sigpack.tgz Jan 31 2026 03:58:24 host2 maldet(45516): {sigup} unpacked and installed maldet-sigpack.tgz Jan 31 2026 03:58:24 host2 maldet(45516): {sigup} verified md5sum of maldet-clean.tgz Jan 31 2026 03:58:24 host2 maldet(45516): {sigup} unpacked and installed maldet-clean.tgz Jan 31 2026 03:58:24 host2 maldet(45516): {sigup} signature set update completed Jan 31 2026 03:58:24 host2 maldet(45516): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 31 2026 03:58:24 host2 maldet(45738): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 31 2026 03:58:24 host2 maldet(45738): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 31 2026 03:58:24 host2 maldet(45738): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 31 2026 03:58:24 host2 maldet(45738): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 31 2026 03:58:24 host2 maldet(45738): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 31 2026 03:58:31 host2 maldet(45738): {scan} file list completed in 7s, found 301 files... Jan 31 2026 03:58:31 host2 maldet(45738): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 31 2026 03:58:31 host2 maldet(45738): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (301 files) in progress... Jan 31 2026 03:58:36 host2 maldet(45738): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 301, malware hits 0, cleaned hits 0, time 12s Jan 31 2026 03:58:36 host2 maldet(45738): {scan} scan report saved, to view run: maldet --report 260131-0358.45738 Feb 01 2026 03:37:28 host2 maldet(51547): {update} checking for available updates... Feb 01 2026 03:37:28 host2 maldet(51547): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 01 2026 03:37:28 host2 maldet(51547): {update} hashing install files and checking against server... Feb 01 2026 03:37:28 host2 maldet(51547): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 01 2026 03:37:28 host2 maldet(51547): {update} latest version already installed. Feb 01 2026 03:37:28 host2 maldet(51675): {sigup} performing signature update check... Feb 01 2026 03:37:28 host2 maldet(51675): {sigup} local signature set is version 202601311395689 Feb 01 2026 03:37:28 host2 maldet(51675): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 01 2026 03:37:28 host2 maldet(51675): {sigup} new signature set 202602012137134 available Feb 01 2026 03:37:28 host2 maldet(51675): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 01 2026 03:37:29 host2 maldet(51675): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 01 2026 03:37:29 host2 maldet(51675): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Feb 01 2026 03:37:29 host2 maldet(51675): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 01 2026 03:37:29 host2 maldet(51675): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 01 2026 03:37:30 host2 maldet(51675): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Feb 01 2026 03:37:30 host2 maldet(51675): {sigup} verified md5sum of maldet-sigpack.tgz Feb 01 2026 03:37:30 host2 maldet(51675): {sigup} unpacked and installed maldet-sigpack.tgz Feb 01 2026 03:37:30 host2 maldet(51675): {sigup} verified md5sum of maldet-clean.tgz Feb 01 2026 03:37:30 host2 maldet(51675): {sigup} unpacked and installed maldet-clean.tgz Feb 01 2026 03:37:30 host2 maldet(51675): {sigup} signature set update completed Feb 01 2026 03:37:30 host2 maldet(51675): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 01 2026 03:37:30 host2 maldet(52040): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 01 2026 03:37:30 host2 maldet(52040): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 01 2026 03:37:30 host2 maldet(52040): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Feb 01 2026 03:37:30 host2 maldet(52040): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 01 2026 03:37:30 host2 maldet(52040): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 01 2026 03:37:33 host2 maldet(52040): {scan} file list completed in 3s, found 260 files... Feb 01 2026 03:37:33 host2 maldet(52040): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 01 2026 03:37:33 host2 maldet(52040): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (260 files) in progress... Feb 01 2026 03:37:42 host2 maldet(52040): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 260, malware hits 0, cleaned hits 0, time 12s Feb 01 2026 03:37:42 host2 maldet(52040): {scan} scan report saved, to view run: maldet --report 260201-0337.52040 Feb 02 2026 03:23:43 host2 maldet(89477): {update} checking for available updates... Feb 02 2026 03:23:43 host2 maldet(89477): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 02 2026 03:23:43 host2 maldet(89477): {update} hashing install files and checking against server... Feb 02 2026 03:23:43 host2 maldet(89477): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 02 2026 03:23:43 host2 maldet(89477): {update} latest version already installed. Feb 02 2026 03:23:44 host2 maldet(89587): {sigup} performing signature update check... Feb 02 2026 03:23:44 host2 maldet(89587): {sigup} local signature set is version 202602012137134 Feb 02 2026 03:23:44 host2 maldet(89587): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 02 2026 03:23:44 host2 maldet(89587): {sigup} latest signature set already installed Feb 02 2026 03:23:44 host2 maldet(89688): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 02 2026 03:23:44 host2 maldet(89688): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 02 2026 03:23:44 host2 maldet(89688): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Feb 02 2026 03:23:44 host2 maldet(89688): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 02 2026 03:23:44 host2 maldet(89688): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 02 2026 03:23:50 host2 maldet(89688): {scan} file list completed in 6s, found 294 files... Feb 02 2026 03:23:50 host2 maldet(89688): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 02 2026 03:23:50 host2 maldet(89688): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (294 files) in progress... Feb 02 2026 03:23:59 host2 maldet(89688): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 294, malware hits 0, cleaned hits 0, time 15s Feb 02 2026 03:23:59 host2 maldet(89688): {scan} scan report saved, to view run: maldet --report 260202-0323.89688 Feb 03 2026 03:56:17 host2 maldet(22606): {update} checking for available updates... Feb 03 2026 03:56:17 host2 maldet(22606): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 03 2026 03:56:17 host2 maldet(22606): {update} hashing install files and checking against server... Feb 03 2026 03:56:17 host2 maldet(22606): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 03 2026 03:56:17 host2 maldet(22606): {update} latest version already installed. Feb 03 2026 03:56:17 host2 maldet(22728): {sigup} performing signature update check... Feb 03 2026 03:56:17 host2 maldet(22728): {sigup} local signature set is version 202602012137134 Feb 03 2026 03:56:18 host2 maldet(22728): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 03 2026 03:56:18 host2 maldet(22728): {sigup} latest signature set already installed Feb 03 2026 03:56:18 host2 maldet(22819): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 03 2026 03:56:18 host2 maldet(22819): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 03 2026 03:56:18 host2 maldet(22819): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Feb 03 2026 03:56:18 host2 maldet(22819): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 03 2026 03:56:18 host2 maldet(22819): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 03 2026 03:56:24 host2 maldet(22819): {scan} file list completed in 6s, found 256 files... Feb 03 2026 03:56:24 host2 maldet(22819): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 03 2026 03:56:24 host2 maldet(22819): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (256 files) in progress... Feb 03 2026 03:56:31 host2 maldet(22819): {hit} malware hit {HEX}php.exe.globals.416 found for /home/christia/public_html/wp-includes/vuguxt.php Feb 03 2026 03:56:32 host2 maldet(22819): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 256, malware hits 1, cleaned hits 0, time 13s Feb 03 2026 03:56:32 host2 maldet(22819): {scan} scan report saved, to view run: maldet --report 260203-0356.22819 Feb 03 2026 03:56:32 host2 maldet(22819): {scan} quarantine is disabled! set quarantine_hits=1 in conf.maldet or to quarantine results run: maldet -q 260203-0356.22819 Feb 04 2026 04:23:47 host2 maldet(1163): {update} checking for available updates... Feb 04 2026 04:23:47 host2 maldet(1163): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 04 2026 04:23:47 host2 maldet(1163): {update} hashing install files and checking against server... Feb 04 2026 04:23:47 host2 maldet(1163): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 04 2026 04:23:47 host2 maldet(1163): {update} latest version already installed. Feb 04 2026 04:23:47 host2 maldet(1318): {sigup} performing signature update check... Feb 04 2026 04:23:47 host2 maldet(1318): {sigup} local signature set is version 202602012137134 Feb 04 2026 04:23:47 host2 maldet(1318): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 04 2026 04:23:47 host2 maldet(1318): {sigup} new signature set 202602043110684 available Feb 04 2026 04:23:47 host2 maldet(1318): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 04 2026 04:23:48 host2 maldet(1318): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 04 2026 04:23:48 host2 maldet(1318): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Feb 04 2026 04:23:48 host2 maldet(1318): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 04 2026 04:23:48 host2 maldet(1318): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 04 2026 04:23:48 host2 maldet(1318): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Feb 04 2026 04:23:48 host2 maldet(1318): {sigup} verified md5sum of maldet-sigpack.tgz Feb 04 2026 04:23:48 host2 maldet(1318): {sigup} unpacked and installed maldet-sigpack.tgz Feb 04 2026 04:23:49 host2 maldet(1318): {sigup} verified md5sum of maldet-clean.tgz Feb 04 2026 04:23:49 host2 maldet(1318): {sigup} unpacked and installed maldet-clean.tgz Feb 04 2026 04:23:49 host2 maldet(1318): {sigup} signature set update completed Feb 04 2026 04:23:49 host2 maldet(1318): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 04 2026 04:23:49 host2 maldet(1599): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 04 2026 04:23:49 host2 maldet(1599): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 04 2026 04:23:49 host2 maldet(1599): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Feb 04 2026 04:23:49 host2 maldet(1599): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 04 2026 04:23:49 host2 maldet(1599): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 04 2026 04:23:55 host2 maldet(1599): {scan} file list completed in 6s, found 1929 files... Feb 04 2026 04:23:55 host2 maldet(1599): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 04 2026 04:23:55 host2 maldet(1599): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1929 files) in progress... Feb 04 2026 04:24:03 host2 maldet(1599): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1929, malware hits 0, cleaned hits 0, time 14s Feb 04 2026 04:24:03 host2 maldet(1599): {scan} scan report saved, to view run: maldet --report 260204-0423.1599 Feb 05 2026 04:08:23 host2 maldet(25937): {update} checking for available updates... Feb 05 2026 04:08:23 host2 maldet(25937): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 05 2026 04:08:23 host2 maldet(25937): {update} hashing install files and checking against server... Feb 05 2026 04:08:24 host2 maldet(25937): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 05 2026 04:08:24 host2 maldet(25937): {update} latest version already installed. Feb 05 2026 04:08:24 host2 maldet(26096): {sigup} performing signature update check... Feb 05 2026 04:08:24 host2 maldet(26096): {sigup} local signature set is version 202602043110684 Feb 05 2026 04:08:24 host2 maldet(26096): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 05 2026 04:08:24 host2 maldet(26096): {sigup} latest signature set already installed Feb 05 2026 04:08:24 host2 maldet(26205): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 05 2026 04:08:24 host2 maldet(26205): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 05 2026 04:08:24 host2 maldet(26205): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Feb 05 2026 04:08:24 host2 maldet(26205): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 05 2026 04:08:24 host2 maldet(26205): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 05 2026 04:08:31 host2 maldet(26205): {scan} file list completed in 7s, found 807 files... Feb 05 2026 04:08:31 host2 maldet(26205): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 05 2026 04:08:31 host2 maldet(26205): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (807 files) in progress... Feb 05 2026 04:08:40 host2 maldet(26205): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 807, malware hits 0, cleaned hits 0, time 16s Feb 05 2026 04:08:40 host2 maldet(26205): {scan} scan report saved, to view run: maldet --report 260205-0408.26205 Feb 06 2026 03:43:37 host2 maldet(21435): {update} checking for available updates... Feb 06 2026 03:43:37 host2 maldet(21435): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 06 2026 03:43:37 host2 maldet(21435): {update} hashing install files and checking against server... Feb 06 2026 03:43:37 host2 maldet(21435): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 06 2026 03:43:37 host2 maldet(21435): {update} latest version already installed. Feb 06 2026 03:43:37 host2 maldet(21548): {sigup} performing signature update check... Feb 06 2026 03:43:37 host2 maldet(21548): {sigup} local signature set is version 202602043110684 Feb 06 2026 03:43:38 host2 maldet(21548): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 06 2026 03:43:38 host2 maldet(21548): {sigup} latest signature set already installed Feb 06 2026 03:43:38 host2 maldet(21636): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 06 2026 03:43:38 host2 maldet(21636): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 06 2026 03:43:38 host2 maldet(21636): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Feb 06 2026 03:43:38 host2 maldet(21636): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 06 2026 03:43:38 host2 maldet(21636): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 06 2026 03:43:45 host2 maldet(21636): {scan} file list completed in 7s, found 369 files... Feb 06 2026 03:43:45 host2 maldet(21636): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 06 2026 03:43:45 host2 maldet(21636): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (369 files) in progress... Feb 06 2026 03:43:50 host2 maldet(21636): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 369, malware hits 0, cleaned hits 0, time 12s Feb 06 2026 03:43:50 host2 maldet(21636): {scan} scan report saved, to view run: maldet --report 260206-0343.21636 Feb 07 2026 04:29:57 host2 maldet(55374): {update} checking for available updates... Feb 07 2026 04:29:57 host2 maldet(55374): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 07 2026 04:29:57 host2 maldet(55374): {update} hashing install files and checking against server... Feb 07 2026 04:29:58 host2 maldet(55374): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 07 2026 04:29:58 host2 maldet(55374): {update} latest version already installed. Feb 07 2026 04:29:58 host2 maldet(55491): {sigup} performing signature update check... Feb 07 2026 04:29:58 host2 maldet(55491): {sigup} local signature set is version 202602043110684 Feb 07 2026 04:29:58 host2 maldet(55491): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 07 2026 04:29:58 host2 maldet(55491): {sigup} new signature set 202602074095392 available Feb 07 2026 04:29:58 host2 maldet(55491): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 07 2026 04:29:58 host2 maldet(55491): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 07 2026 04:29:59 host2 maldet(55491): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Feb 07 2026 04:29:59 host2 maldet(55491): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 07 2026 04:29:59 host2 maldet(55491): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 07 2026 04:29:59 host2 maldet(55491): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Feb 07 2026 04:29:59 host2 maldet(55491): {sigup} verified md5sum of maldet-sigpack.tgz Feb 07 2026 04:29:59 host2 maldet(55491): {sigup} unpacked and installed maldet-sigpack.tgz Feb 07 2026 04:29:59 host2 maldet(55491): {sigup} verified md5sum of maldet-clean.tgz Feb 07 2026 04:29:59 host2 maldet(55491): {sigup} unpacked and installed maldet-clean.tgz Feb 07 2026 04:29:59 host2 maldet(55491): {sigup} signature set update completed Feb 07 2026 04:29:59 host2 maldet(55491): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 07 2026 04:29:59 host2 maldet(55714): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 07 2026 04:30:00 host2 maldet(55714): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 07 2026 04:30:00 host2 maldet(55714): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Feb 07 2026 04:30:00 host2 maldet(55714): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 07 2026 04:30:00 host2 maldet(55714): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 07 2026 04:30:08 host2 maldet(55714): {scan} file list completed in 8s, found 701 files... Feb 07 2026 04:30:08 host2 maldet(55714): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 07 2026 04:30:08 host2 maldet(55714): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (701 files) in progress... Feb 07 2026 04:30:14 host2 maldet(55714): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 701, malware hits 0, cleaned hits 0, time 15s Feb 07 2026 04:30:14 host2 maldet(55714): {scan} scan report saved, to view run: maldet --report 260207-0429.55714 Feb 08 2026 03:39:41 host2 maldet(77843): {update} checking for available updates... Feb 08 2026 03:39:42 host2 maldet(77843): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 08 2026 03:39:42 host2 maldet(77843): {update} hashing install files and checking against server... Feb 08 2026 03:39:42 host2 maldet(77843): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 08 2026 03:39:42 host2 maldet(77843): {update} latest version already installed. Feb 08 2026 03:39:42 host2 maldet(77960): {sigup} performing signature update check... Feb 08 2026 03:39:42 host2 maldet(77960): {sigup} local signature set is version 202602074095392 Feb 08 2026 03:39:42 host2 maldet(77960): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 08 2026 03:39:42 host2 maldet(77960): {sigup} latest signature set already installed Feb 08 2026 03:39:42 host2 maldet(78049): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 08 2026 03:39:42 host2 maldet(78049): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 08 2026 03:39:42 host2 maldet(78049): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Feb 08 2026 03:39:42 host2 maldet(78049): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 08 2026 03:39:42 host2 maldet(78049): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 08 2026 03:39:50 host2 maldet(78049): {scan} file list completed in 8s, found 423 files... Feb 08 2026 03:39:50 host2 maldet(78049): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 08 2026 03:39:50 host2 maldet(78049): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (423 files) in progress... Feb 08 2026 03:39:55 host2 maldet(78049): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 423, malware hits 0, cleaned hits 0, time 13s Feb 08 2026 03:39:55 host2 maldet(78049): {scan} scan report saved, to view run: maldet --report 260208-0339.78049 Feb 09 2026 04:09:24 host2 maldet(10936): {update} checking for available updates... Feb 09 2026 04:09:25 host2 maldet(10936): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 09 2026 04:09:25 host2 maldet(10936): {update} hashing install files and checking against server... Feb 09 2026 04:09:25 host2 maldet(10936): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 09 2026 04:09:25 host2 maldet(10936): {update} latest version already installed. Feb 09 2026 04:09:25 host2 maldet(11052): {sigup} performing signature update check... Feb 09 2026 04:09:25 host2 maldet(11052): {sigup} local signature set is version 202602074095392 Feb 09 2026 04:09:25 host2 maldet(11052): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 09 2026 04:09:25 host2 maldet(11052): {sigup} latest signature set already installed Feb 09 2026 04:09:25 host2 maldet(11140): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 09 2026 04:09:25 host2 maldet(11140): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 09 2026 04:09:25 host2 maldet(11140): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Feb 09 2026 04:09:25 host2 maldet(11140): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 09 2026 04:09:25 host2 maldet(11140): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 09 2026 04:09:33 host2 maldet(11140): {scan} file list completed in 8s, found 611 files... Feb 09 2026 04:09:33 host2 maldet(11140): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 09 2026 04:09:33 host2 maldet(11140): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (611 files) in progress... Feb 09 2026 04:09:38 host2 maldet(11140): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 611, malware hits 0, cleaned hits 0, time 13s Feb 09 2026 04:09:38 host2 maldet(11140): {scan} scan report saved, to view run: maldet --report 260209-0409.11140 Feb 10 2026 04:16:53 host2 maldet(99340): {update} checking for available updates... Feb 10 2026 04:16:53 host2 maldet(99340): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 10 2026 04:16:53 host2 maldet(99340): {update} hashing install files and checking against server... Feb 10 2026 04:16:54 host2 maldet(99340): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 10 2026 04:16:54 host2 maldet(99340): {update} latest version already installed. Feb 10 2026 04:16:54 host2 maldet(99459): {sigup} performing signature update check... Feb 10 2026 04:16:54 host2 maldet(99459): {sigup} local signature set is version 202602074095392 Feb 10 2026 04:16:54 host2 maldet(99459): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 10 2026 04:16:54 host2 maldet(99459): {sigup} new signature set 20260210873235 available Feb 10 2026 04:16:54 host2 maldet(99459): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 10 2026 04:16:54 host2 maldet(99459): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 10 2026 04:16:55 host2 maldet(99459): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Feb 10 2026 04:16:55 host2 maldet(99459): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 10 2026 04:16:55 host2 maldet(99459): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 10 2026 04:16:55 host2 maldet(99459): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Feb 10 2026 04:16:55 host2 maldet(99459): {sigup} verified md5sum of maldet-sigpack.tgz Feb 10 2026 04:16:55 host2 maldet(99459): {sigup} unpacked and installed maldet-sigpack.tgz Feb 10 2026 04:16:55 host2 maldet(99459): {sigup} verified md5sum of maldet-clean.tgz Feb 10 2026 04:16:55 host2 maldet(99459): {sigup} unpacked and installed maldet-clean.tgz Feb 10 2026 04:16:55 host2 maldet(99459): {sigup} signature set update completed Feb 10 2026 04:16:55 host2 maldet(99459): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 10 2026 04:16:55 host2 maldet(99693): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 10 2026 04:16:55 host2 maldet(99693): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 10 2026 04:16:55 host2 maldet(99693): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Feb 10 2026 04:16:55 host2 maldet(99693): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 10 2026 04:16:55 host2 maldet(99693): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 10 2026 04:17:04 host2 maldet(99693): {scan} file list completed in 9s, found 533 files... Feb 10 2026 04:17:04 host2 maldet(99693): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 10 2026 04:17:04 host2 maldet(99693): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (533 files) in progress... Feb 10 2026 04:17:13 host2 maldet(99693): {hit} malware hit {HEX}php.exe.globals.416 found for /home/christia/public_html/wp-includes/thfxij.php Feb 10 2026 04:17:13 host2 maldet(99693): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 533, malware hits 1, cleaned hits 0, time 18s Feb 10 2026 04:17:13 host2 maldet(99693): {scan} scan report saved, to view run: maldet --report 260210-0416.99693 Feb 10 2026 04:17:13 host2 maldet(99693): {scan} quarantine is disabled! set quarantine_hits=1 in conf.maldet or to quarantine results run: maldet -q 260210-0416.99693 Feb 11 2026 04:36:15 host2 maldet(93968): {update} checking for available updates... Feb 11 2026 04:36:15 host2 maldet(93968): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 11 2026 04:36:15 host2 maldet(93968): {update} hashing install files and checking against server... Feb 11 2026 04:36:15 host2 maldet(93968): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 11 2026 04:36:15 host2 maldet(93968): {update} latest version already installed. Feb 11 2026 04:36:15 host2 maldet(94183): {sigup} performing signature update check... Feb 11 2026 04:36:15 host2 maldet(94183): {sigup} local signature set is version 20260210873235 Feb 11 2026 04:36:15 host2 maldet(94183): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 11 2026 04:36:15 host2 maldet(94183): {sigup} latest signature set already installed Feb 11 2026 04:36:16 host2 maldet(94320): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 11 2026 04:36:16 host2 maldet(94320): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 11 2026 04:36:16 host2 maldet(94320): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Feb 11 2026 04:36:16 host2 maldet(94320): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 11 2026 04:36:16 host2 maldet(94320): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 11 2026 04:36:23 host2 maldet(94320): {scan} file list completed in 7s, found 340 files... Feb 11 2026 04:36:23 host2 maldet(94320): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 11 2026 04:36:23 host2 maldet(94320): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (340 files) in progress... Feb 11 2026 04:36:29 host2 maldet(94320): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 340, malware hits 0, cleaned hits 0, time 13s Feb 11 2026 04:36:29 host2 maldet(94320): {scan} scan report saved, to view run: maldet --report 260211-0436.94320 Feb 12 2026 03:41:14 host2 maldet(24276): {update} checking for available updates... Feb 12 2026 03:41:14 host2 maldet(24276): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 12 2026 03:41:14 host2 maldet(24276): {update} hashing install files and checking against server... Feb 12 2026 03:41:14 host2 maldet(24276): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 12 2026 03:41:14 host2 maldet(24276): {update} latest version already installed. Feb 12 2026 03:41:14 host2 maldet(24571): {sigup} performing signature update check... Feb 12 2026 03:41:14 host2 maldet(24571): {sigup} local signature set is version 20260210873235 Feb 12 2026 03:41:15 host2 maldet(24571): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 12 2026 03:41:15 host2 maldet(24571): {sigup} latest signature set already installed Feb 12 2026 03:41:15 host2 maldet(24759): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 12 2026 03:41:15 host2 maldet(24759): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 12 2026 03:41:15 host2 maldet(24759): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Feb 12 2026 03:41:15 host2 maldet(24759): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 12 2026 03:41:15 host2 maldet(24759): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 12 2026 03:41:22 host2 maldet(24759): {scan} file list completed in 7s, found 185 files... Feb 12 2026 03:41:22 host2 maldet(24759): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 12 2026 03:41:22 host2 maldet(24759): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (185 files) in progress... Feb 12 2026 03:41:28 host2 maldet(24759): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 185, malware hits 0, cleaned hits 0, time 13s Feb 12 2026 03:41:28 host2 maldet(24759): {scan} scan report saved, to view run: maldet --report 260212-0341.24759 Feb 13 2026 03:51:47 host2 maldet(24789): {update} checking for available updates... Feb 13 2026 03:51:47 host2 maldet(24789): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 13 2026 03:51:47 host2 maldet(24789): {update} hashing install files and checking against server... Feb 13 2026 03:51:48 host2 maldet(24789): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 13 2026 03:51:48 host2 maldet(24789): {update} latest version already installed. Feb 13 2026 03:51:48 host2 maldet(25288): {sigup} performing signature update check... Feb 13 2026 03:51:48 host2 maldet(25288): {sigup} local signature set is version 20260210873235 Feb 13 2026 03:51:48 host2 maldet(25288): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 13 2026 03:51:48 host2 maldet(25288): {sigup} new signature set 202602131845305 available Feb 13 2026 03:51:48 host2 maldet(25288): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 13 2026 03:51:48 host2 maldet(25288): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 13 2026 03:51:49 host2 maldet(25288): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Feb 13 2026 03:51:49 host2 maldet(25288): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 13 2026 03:51:49 host2 maldet(25288): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 13 2026 03:51:49 host2 maldet(25288): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Feb 13 2026 03:51:49 host2 maldet(25288): {sigup} verified md5sum of maldet-sigpack.tgz Feb 13 2026 03:51:49 host2 maldet(25288): {sigup} unpacked and installed maldet-sigpack.tgz Feb 13 2026 03:51:49 host2 maldet(25288): {sigup} verified md5sum of maldet-clean.tgz Feb 13 2026 03:51:49 host2 maldet(25288): {sigup} unpacked and installed maldet-clean.tgz Feb 13 2026 03:51:50 host2 maldet(25288): {sigup} signature set update completed Feb 13 2026 03:51:50 host2 maldet(25288): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 13 2026 03:51:50 host2 maldet(26405): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 13 2026 03:51:50 host2 maldet(26405): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 13 2026 03:51:50 host2 maldet(26405): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Feb 13 2026 03:51:50 host2 maldet(26405): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 13 2026 03:51:50 host2 maldet(26405): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 13 2026 03:52:00 host2 maldet(26405): {scan} file list completed in 10s, found 623 files... Feb 13 2026 03:52:00 host2 maldet(26405): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 13 2026 03:52:00 host2 maldet(26405): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (623 files) in progress... Feb 13 2026 03:52:09 host2 maldet(26405): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 623, malware hits 0, cleaned hits 0, time 19s Feb 13 2026 03:52:09 host2 maldet(26405): {scan} scan report saved, to view run: maldet --report 260213-0351.26405 Feb 14 2026 03:59:58 host2 maldet(73627): {update} checking for available updates... Feb 14 2026 03:59:59 host2 maldet(73627): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 14 2026 03:59:59 host2 maldet(73627): {update} hashing install files and checking against server... Feb 14 2026 03:59:59 host2 maldet(73627): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 14 2026 03:59:59 host2 maldet(73627): {update} latest version already installed. Feb 14 2026 03:59:59 host2 maldet(73992): {sigup} performing signature update check... Feb 14 2026 03:59:59 host2 maldet(73992): {sigup} local signature set is version 202602131845305 Feb 14 2026 03:59:59 host2 maldet(73992): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 14 2026 03:59:59 host2 maldet(73992): {sigup} latest signature set already installed Feb 14 2026 03:59:59 host2 maldet(74246): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 14 2026 04:00:00 host2 maldet(74246): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 14 2026 04:00:00 host2 maldet(74246): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Feb 14 2026 04:00:00 host2 maldet(74246): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 14 2026 04:00:00 host2 maldet(74246): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 14 2026 04:00:09 host2 maldet(74246): {scan} file list completed in 9s, found 377 files... Feb 14 2026 04:00:09 host2 maldet(74246): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 14 2026 04:00:09 host2 maldet(74246): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (377 files) in progress... Feb 14 2026 04:00:17 host2 maldet(74246): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Feb 14 2026 04:00:17 host2 maldet(74246): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 377, malware hits 0, cleaned hits 0, time 18s Feb 14 2026 04:00:17 host2 maldet(74246): {scan} scan report saved, to view run: maldet --report 260214-0359.74246 Feb 15 2026 04:14:53 host2 maldet(8462): {update} checking for available updates... Feb 15 2026 04:14:53 host2 maldet(8462): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 15 2026 04:14:53 host2 maldet(8462): {update} hashing install files and checking against server... Feb 15 2026 04:14:54 host2 maldet(8462): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 15 2026 04:14:54 host2 maldet(8462): {update} latest version already installed. Feb 15 2026 04:14:54 host2 maldet(8684): {sigup} performing signature update check... Feb 15 2026 04:14:54 host2 maldet(8684): {sigup} local signature set is version 202602131845305 Feb 15 2026 04:14:54 host2 maldet(8684): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 15 2026 04:14:54 host2 maldet(8684): {sigup} latest signature set already installed Feb 15 2026 04:14:54 host2 maldet(8840): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 15 2026 04:14:54 host2 maldet(8840): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 15 2026 04:14:54 host2 maldet(8840): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Feb 15 2026 04:14:54 host2 maldet(8840): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 15 2026 04:14:54 host2 maldet(8840): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 15 2026 04:15:02 host2 maldet(8840): {scan} file list completed in 8s, found 842 files... Feb 15 2026 04:15:02 host2 maldet(8840): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 15 2026 04:15:02 host2 maldet(8840): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (842 files) in progress... Feb 15 2026 04:15:10 host2 maldet(8840): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 842, malware hits 0, cleaned hits 0, time 16s Feb 15 2026 04:15:10 host2 maldet(8840): {scan} scan report saved, to view run: maldet --report 260215-0414.8840 Feb 16 2026 03:16:25 host2 maldet(92823): {update} checking for available updates... Feb 16 2026 03:16:25 host2 maldet(92823): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 16 2026 03:16:25 host2 maldet(92823): {update} hashing install files and checking against server... Feb 16 2026 03:16:25 host2 maldet(92823): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 16 2026 03:16:25 host2 maldet(92823): {update} latest version already installed. Feb 16 2026 03:16:25 host2 maldet(93022): {sigup} performing signature update check... Feb 16 2026 03:16:25 host2 maldet(93022): {sigup} local signature set is version 202602131845305 Feb 16 2026 03:16:26 host2 maldet(93022): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 16 2026 03:16:26 host2 maldet(93022): {sigup} new signature set 202602163981045 available Feb 16 2026 03:16:26 host2 maldet(93022): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 16 2026 03:16:26 host2 maldet(93022): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 16 2026 03:16:26 host2 maldet(93022): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Feb 16 2026 03:16:26 host2 maldet(93022): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 16 2026 03:16:26 host2 maldet(93022): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 16 2026 03:16:27 host2 maldet(93022): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Feb 16 2026 03:16:27 host2 maldet(93022): {sigup} verified md5sum of maldet-sigpack.tgz Feb 16 2026 03:16:27 host2 maldet(93022): {sigup} unpacked and installed maldet-sigpack.tgz Feb 16 2026 03:16:27 host2 maldet(93022): {sigup} verified md5sum of maldet-clean.tgz Feb 16 2026 03:16:27 host2 maldet(93022): {sigup} unpacked and installed maldet-clean.tgz Feb 16 2026 03:16:27 host2 maldet(93022): {sigup} signature set update completed Feb 16 2026 03:16:27 host2 maldet(93022): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 16 2026 03:16:27 host2 maldet(93469): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 16 2026 03:16:27 host2 maldet(93469): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 16 2026 03:16:27 host2 maldet(93469): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Feb 16 2026 03:16:27 host2 maldet(93469): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 16 2026 03:16:27 host2 maldet(93469): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 16 2026 03:16:34 host2 maldet(93469): {scan} file list completed in 7s, found 339 files... Feb 16 2026 03:16:34 host2 maldet(93469): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 16 2026 03:16:34 host2 maldet(93469): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (339 files) in progress... Feb 16 2026 03:16:41 host2 maldet(93469): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 339, malware hits 0, cleaned hits 0, time 14s Feb 16 2026 03:16:41 host2 maldet(93469): {scan} scan report saved, to view run: maldet --report 260216-0316.93469 Feb 17 2026 03:55:09 host2 maldet(70611): {update} checking for available updates... Feb 17 2026 03:55:10 host2 maldet(70611): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 17 2026 03:55:10 host2 maldet(70611): {update} hashing install files and checking against server... Feb 17 2026 03:55:10 host2 maldet(70611): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 17 2026 03:55:10 host2 maldet(70611): {update} latest version already installed. Feb 17 2026 03:55:10 host2 maldet(70808): {sigup} performing signature update check... Feb 17 2026 03:55:10 host2 maldet(70808): {sigup} local signature set is version 202602163981045 Feb 17 2026 03:55:10 host2 maldet(70808): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 17 2026 03:55:10 host2 maldet(70808): {sigup} latest signature set already installed Feb 17 2026 03:55:10 host2 maldet(70951): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 17 2026 03:55:10 host2 maldet(70951): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 17 2026 03:55:10 host2 maldet(70951): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Feb 17 2026 03:55:10 host2 maldet(70951): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 17 2026 03:55:10 host2 maldet(70951): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 17 2026 03:55:18 host2 maldet(70951): {scan} file list completed in 8s, found 253 files... Feb 17 2026 03:55:18 host2 maldet(70951): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 17 2026 03:55:18 host2 maldet(70951): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (253 files) in progress... Feb 17 2026 03:55:25 host2 maldet(70951): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 253, malware hits 0, cleaned hits 0, time 15s Feb 17 2026 03:55:25 host2 maldet(70951): {scan} scan report saved, to view run: maldet --report 260217-0355.70951 Feb 18 2026 03:41:17 host2 maldet(72953): {update} checking for available updates... Feb 18 2026 03:41:18 host2 maldet(72953): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 18 2026 03:41:18 host2 maldet(72953): {update} hashing install files and checking against server... Feb 18 2026 03:41:18 host2 maldet(72953): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 18 2026 03:41:18 host2 maldet(72953): {update} latest version already installed. Feb 18 2026 03:41:18 host2 maldet(73171): {sigup} performing signature update check... Feb 18 2026 03:41:18 host2 maldet(73171): {sigup} local signature set is version 202602163981045 Feb 18 2026 03:41:18 host2 maldet(73171): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 18 2026 03:41:18 host2 maldet(73171): {sigup} latest signature set already installed Feb 18 2026 03:41:18 host2 maldet(73311): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 18 2026 03:41:19 host2 maldet(73311): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 18 2026 03:41:19 host2 maldet(73311): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Feb 18 2026 03:41:19 host2 maldet(73311): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 18 2026 03:41:19 host2 maldet(73311): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 18 2026 03:41:25 host2 maldet(73311): {scan} file list completed in 6s, found 415 files... Feb 18 2026 03:41:25 host2 maldet(73311): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 18 2026 03:41:25 host2 maldet(73311): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (415 files) in progress... Feb 18 2026 03:41:31 host2 maldet(73311): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 415, malware hits 0, cleaned hits 0, time 13s Feb 18 2026 03:41:31 host2 maldet(73311): {scan} scan report saved, to view run: maldet --report 260218-0341.73311 Feb 19 2026 04:05:44 host2 maldet(69761): {update} checking for available updates... Feb 19 2026 04:05:45 host2 maldet(69761): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 19 2026 04:05:45 host2 maldet(69761): {update} hashing install files and checking against server... Feb 19 2026 04:05:45 host2 maldet(69761): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 19 2026 04:05:45 host2 maldet(69761): {update} latest version already installed. Feb 19 2026 04:05:45 host2 maldet(69962): {sigup} performing signature update check... Feb 19 2026 04:05:45 host2 maldet(69962): {sigup} local signature set is version 202602163981045 Feb 19 2026 04:05:45 host2 maldet(69962): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 19 2026 04:05:45 host2 maldet(69962): {sigup} new signature set 202602193480447 available Feb 19 2026 04:05:45 host2 maldet(69962): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 19 2026 04:05:46 host2 maldet(69962): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 19 2026 04:05:46 host2 maldet(69962): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Feb 19 2026 04:05:46 host2 maldet(69962): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 19 2026 04:05:46 host2 maldet(69962): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 19 2026 04:05:46 host2 maldet(69962): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Feb 19 2026 04:05:46 host2 maldet(69962): {sigup} verified md5sum of maldet-sigpack.tgz Feb 19 2026 04:05:46 host2 maldet(69962): {sigup} unpacked and installed maldet-sigpack.tgz Feb 19 2026 04:05:47 host2 maldet(69962): {sigup} verified md5sum of maldet-clean.tgz Feb 19 2026 04:05:47 host2 maldet(69962): {sigup} unpacked and installed maldet-clean.tgz Feb 19 2026 04:05:47 host2 maldet(69962): {sigup} signature set update completed Feb 19 2026 04:05:47 host2 maldet(69962): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 19 2026 04:05:47 host2 maldet(70437): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 19 2026 04:05:47 host2 maldet(70437): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 19 2026 04:05:47 host2 maldet(70437): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Feb 19 2026 04:05:47 host2 maldet(70437): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 19 2026 04:05:47 host2 maldet(70437): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 19 2026 04:05:55 host2 maldet(70437): {scan} file list completed in 8s, found 220 files... Feb 19 2026 04:05:55 host2 maldet(70437): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 19 2026 04:05:55 host2 maldet(70437): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (220 files) in progress... Feb 19 2026 04:06:02 host2 maldet(70437): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 220, malware hits 0, cleaned hits 0, time 15s Feb 19 2026 04:06:02 host2 maldet(70437): {scan} scan report saved, to view run: maldet --report 260219-0405.70437 Feb 20 2026 04:25:50 host2 maldet(26189): {update} checking for available updates... Feb 20 2026 04:25:50 host2 maldet(26189): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 20 2026 04:25:50 host2 maldet(26189): {update} hashing install files and checking against server... Feb 20 2026 04:25:51 host2 maldet(26189): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 20 2026 04:25:51 host2 maldet(26189): {update} latest version already installed. Feb 20 2026 04:25:51 host2 maldet(26406): {sigup} performing signature update check... Feb 20 2026 04:25:51 host2 maldet(26406): {sigup} local signature set is version 202602193480447 Feb 20 2026 04:25:51 host2 maldet(26406): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 20 2026 04:25:51 host2 maldet(26406): {sigup} latest signature set already installed Feb 20 2026 04:25:51 host2 maldet(26533): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 20 2026 04:25:51 host2 maldet(26533): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 20 2026 04:25:51 host2 maldet(26533): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Feb 20 2026 04:25:51 host2 maldet(26533): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 20 2026 04:25:51 host2 maldet(26533): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 20 2026 04:25:59 host2 maldet(26533): {scan} file list completed in 8s, found 700 files... Feb 20 2026 04:25:59 host2 maldet(26533): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 20 2026 04:25:59 host2 maldet(26533): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (700 files) in progress... Feb 20 2026 04:26:08 host2 maldet(26533): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 700, malware hits 0, cleaned hits 0, time 17s Feb 20 2026 04:26:08 host2 maldet(26533): {scan} scan report saved, to view run: maldet --report 260220-0425.26533 Feb 21 2026 03:42:21 host2 maldet(23713): {update} checking for available updates... Feb 21 2026 03:42:21 host2 maldet(23713): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 21 2026 03:42:21 host2 maldet(23713): {update} hashing install files and checking against server... Feb 21 2026 03:42:22 host2 maldet(23713): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 21 2026 03:42:22 host2 maldet(23713): {update} latest version already installed. Feb 21 2026 03:42:22 host2 maldet(23916): {sigup} performing signature update check... Feb 21 2026 03:42:22 host2 maldet(23916): {sigup} local signature set is version 202602193480447 Feb 21 2026 03:42:22 host2 maldet(23916): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 21 2026 03:42:22 host2 maldet(23916): {sigup} latest signature set already installed Feb 21 2026 03:42:22 host2 maldet(24046): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 21 2026 03:42:22 host2 maldet(24046): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 21 2026 03:42:22 host2 maldet(24046): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Feb 21 2026 03:42:22 host2 maldet(24046): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 21 2026 03:42:22 host2 maldet(24046): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 21 2026 03:42:30 host2 maldet(24046): {scan} file list completed in 8s, found 319 files... Feb 21 2026 03:42:30 host2 maldet(24046): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 21 2026 03:42:30 host2 maldet(24046): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (319 files) in progress... Feb 21 2026 03:42:39 host2 maldet(24046): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 319, malware hits 0, cleaned hits 0, time 17s Feb 21 2026 03:42:39 host2 maldet(24046): {scan} scan report saved, to view run: maldet --report 260221-0342.24046 Feb 22 2026 03:56:46 host2 maldet(78406): {update} checking for available updates... Feb 22 2026 03:56:46 host2 maldet(78406): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 22 2026 03:56:46 host2 maldet(78406): {update} hashing install files and checking against server... Feb 22 2026 03:56:46 host2 maldet(78406): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 22 2026 03:56:46 host2 maldet(78406): {update} latest version already installed. Feb 22 2026 03:56:46 host2 maldet(78624): {sigup} performing signature update check... Feb 22 2026 03:56:46 host2 maldet(78624): {sigup} local signature set is version 202602193480447 Feb 22 2026 03:56:47 host2 maldet(78624): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 22 2026 03:56:47 host2 maldet(78624): {sigup} new signature set 202602221122240 available Feb 22 2026 03:56:47 host2 maldet(78624): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 22 2026 03:56:47 host2 maldet(78624): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 22 2026 03:56:47 host2 maldet(78624): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Feb 22 2026 03:56:47 host2 maldet(78624): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 22 2026 03:56:48 host2 maldet(78624): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 22 2026 03:56:48 host2 maldet(78624): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Feb 22 2026 03:56:48 host2 maldet(78624): {sigup} verified md5sum of maldet-sigpack.tgz Feb 22 2026 03:56:48 host2 maldet(78624): {sigup} unpacked and installed maldet-sigpack.tgz Feb 22 2026 03:56:48 host2 maldet(78624): {sigup} verified md5sum of maldet-clean.tgz Feb 22 2026 03:56:48 host2 maldet(78624): {sigup} unpacked and installed maldet-clean.tgz Feb 22 2026 03:56:48 host2 maldet(78624): {sigup} signature set update completed Feb 22 2026 03:56:48 host2 maldet(78624): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 22 2026 03:56:48 host2 maldet(79064): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 22 2026 03:56:48 host2 maldet(79064): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 22 2026 03:56:48 host2 maldet(79064): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Feb 22 2026 03:56:48 host2 maldet(79064): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 22 2026 03:56:48 host2 maldet(79064): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 22 2026 03:56:56 host2 maldet(79064): {scan} file list completed in 8s, found 165 files... Feb 22 2026 03:56:56 host2 maldet(79064): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 22 2026 03:56:56 host2 maldet(79064): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (165 files) in progress... Feb 22 2026 03:57:02 host2 maldet(79064): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 165, malware hits 0, cleaned hits 0, time 14s Feb 22 2026 03:57:02 host2 maldet(79064): {scan} scan report saved, to view run: maldet --report 260222-0356.79064 Feb 23 2026 03:58:01 host2 maldet(87156): {update} checking for available updates... Feb 23 2026 03:58:01 host2 maldet(87156): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 23 2026 03:58:01 host2 maldet(87156): {update} hashing install files and checking against server... Feb 23 2026 03:58:01 host2 maldet(87156): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 23 2026 03:58:01 host2 maldet(87156): {update} latest version already installed. Feb 23 2026 03:58:01 host2 maldet(87394): {sigup} performing signature update check... Feb 23 2026 03:58:01 host2 maldet(87394): {sigup} local signature set is version 202602221122240 Feb 23 2026 03:58:02 host2 maldet(87394): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 23 2026 03:58:02 host2 maldet(87394): {sigup} latest signature set already installed Feb 23 2026 03:58:02 host2 maldet(87533): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 23 2026 03:58:02 host2 maldet(87533): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 23 2026 03:58:02 host2 maldet(87533): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Feb 23 2026 03:58:02 host2 maldet(87533): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 23 2026 03:58:02 host2 maldet(87533): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 23 2026 03:58:09 host2 maldet(87533): {scan} file list completed in 7s, found 350 files... Feb 23 2026 03:58:09 host2 maldet(87533): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 23 2026 03:58:09 host2 maldet(87533): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (350 files) in progress... Feb 23 2026 03:58:17 host2 maldet(87533): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 350, malware hits 0, cleaned hits 0, time 15s Feb 23 2026 03:58:17 host2 maldet(87533): {scan} scan report saved, to view run: maldet --report 260223-0358.87533 Feb 24 2026 03:28:01 host2 maldet(1977): {update} checking for available updates... Feb 24 2026 03:28:01 host2 maldet(1977): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 24 2026 03:28:01 host2 maldet(1977): {update} hashing install files and checking against server... Feb 24 2026 03:28:02 host2 maldet(1977): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 24 2026 03:28:02 host2 maldet(1977): {update} latest version already installed. Feb 24 2026 03:28:02 host2 maldet(2180): {sigup} performing signature update check... Feb 24 2026 03:28:02 host2 maldet(2180): {sigup} local signature set is version 202602221122240 Feb 24 2026 03:28:02 host2 maldet(2180): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 24 2026 03:28:02 host2 maldet(2180): {sigup} latest signature set already installed Feb 24 2026 03:28:02 host2 maldet(2323): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 24 2026 03:28:02 host2 maldet(2323): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 24 2026 03:28:02 host2 maldet(2323): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Feb 24 2026 03:28:02 host2 maldet(2323): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 24 2026 03:28:02 host2 maldet(2323): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 24 2026 03:28:10 host2 maldet(2323): {scan} file list completed in 8s, found 381 files... Feb 24 2026 03:28:10 host2 maldet(2323): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 24 2026 03:28:10 host2 maldet(2323): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (381 files) in progress... Feb 24 2026 03:28:18 host2 maldet(2323): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 381, malware hits 0, cleaned hits 0, time 16s Feb 24 2026 03:28:18 host2 maldet(2323): {scan} scan report saved, to view run: maldet --report 260224-0328.2323 Feb 25 2026 03:58:26 host2 maldet(17397): {update} checking for available updates... Feb 25 2026 03:58:26 host2 maldet(17397): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 25 2026 03:58:26 host2 maldet(17397): {update} hashing install files and checking against server... Feb 25 2026 03:58:26 host2 maldet(17397): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 25 2026 03:58:26 host2 maldet(17397): {update} latest version already installed. Feb 25 2026 03:58:26 host2 maldet(17605): {sigup} performing signature update check... Feb 25 2026 03:58:26 host2 maldet(17605): {sigup} local signature set is version 202602221122240 Feb 25 2026 03:58:27 host2 maldet(17605): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 25 2026 03:58:27 host2 maldet(17605): {sigup} new signature set 202602253750710 available Feb 25 2026 03:58:27 host2 maldet(17605): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 25 2026 03:58:27 host2 maldet(17605): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 25 2026 03:58:27 host2 maldet(17605): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Feb 25 2026 03:58:27 host2 maldet(17605): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 25 2026 03:58:28 host2 maldet(17605): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 25 2026 03:58:28 host2 maldet(17605): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Feb 25 2026 03:58:28 host2 maldet(17605): {sigup} verified md5sum of maldet-sigpack.tgz Feb 25 2026 03:58:28 host2 maldet(17605): {sigup} unpacked and installed maldet-sigpack.tgz Feb 25 2026 03:58:28 host2 maldet(17605): {sigup} verified md5sum of maldet-clean.tgz Feb 25 2026 03:58:28 host2 maldet(17605): {sigup} unpacked and installed maldet-clean.tgz Feb 25 2026 03:58:28 host2 maldet(17605): {sigup} signature set update completed Feb 25 2026 03:58:28 host2 maldet(17605): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 25 2026 03:58:28 host2 maldet(18089): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 25 2026 03:58:28 host2 maldet(18089): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 25 2026 03:58:28 host2 maldet(18089): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Feb 25 2026 03:58:28 host2 maldet(18089): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 25 2026 03:58:28 host2 maldet(18089): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 25 2026 03:58:37 host2 maldet(18089): {scan} file list completed in 9s, found 192 files... Feb 25 2026 03:58:37 host2 maldet(18089): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 25 2026 03:58:37 host2 maldet(18089): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (192 files) in progress... Feb 25 2026 03:58:40 host2 maldet(18089): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Feb 25 2026 03:58:40 host2 maldet(18089): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 192, malware hits 0, cleaned hits 0, time 12s Feb 25 2026 03:58:40 host2 maldet(18089): {scan} scan report saved, to view run: maldet --report 260225-0358.18089 Feb 26 2026 03:53:08 host2 maldet(101799): {update} checking for available updates... Feb 26 2026 03:53:09 host2 maldet(101799): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 26 2026 03:53:09 host2 maldet(101799): {update} hashing install files and checking against server... Feb 26 2026 03:53:09 host2 maldet(101799): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 26 2026 03:53:09 host2 maldet(101799): {update} latest version already installed. Feb 26 2026 03:53:09 host2 maldet(101914): {sigup} performing signature update check... Feb 26 2026 03:53:09 host2 maldet(101914): {sigup} local signature set is version 202602253750710 Feb 26 2026 03:53:09 host2 maldet(101914): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 26 2026 03:53:09 host2 maldet(101914): {sigup} new signature set 202602251468141 available Feb 26 2026 03:53:09 host2 maldet(101914): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 26 2026 03:53:10 host2 maldet(101914): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 26 2026 03:53:10 host2 maldet(101914): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Feb 26 2026 03:53:10 host2 maldet(101914): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 26 2026 03:53:10 host2 maldet(101914): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 26 2026 03:53:10 host2 maldet(101914): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Feb 26 2026 03:53:10 host2 maldet(101914): {sigup} verified md5sum of maldet-sigpack.tgz Feb 26 2026 03:53:10 host2 maldet(101914): {sigup} unpacked and installed maldet-sigpack.tgz Feb 26 2026 03:53:10 host2 maldet(101914): {sigup} verified md5sum of maldet-clean.tgz Feb 26 2026 03:53:10 host2 maldet(101914): {sigup} unpacked and installed maldet-clean.tgz Feb 26 2026 03:53:10 host2 maldet(101914): {sigup} signature set update completed Feb 26 2026 03:53:10 host2 maldet(101914): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 26 2026 03:53:11 host2 maldet(102154): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 26 2026 03:53:11 host2 maldet(102154): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 26 2026 03:53:11 host2 maldet(102154): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Feb 26 2026 03:53:11 host2 maldet(102154): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 26 2026 03:53:11 host2 maldet(102154): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 26 2026 03:53:18 host2 maldet(102154): {scan} file list completed in 7s, found 160 files... Feb 26 2026 03:53:18 host2 maldet(102154): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 26 2026 03:53:18 host2 maldet(102154): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (160 files) in progress... Feb 26 2026 03:53:22 host2 maldet(102154): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 160, malware hits 0, cleaned hits 0, time 11s Feb 26 2026 03:53:22 host2 maldet(102154): {scan} scan report saved, to view run: maldet --report 260226-0353.102154 Feb 27 2026 04:53:49 host2 maldet(2750): {update} checking for available updates... Feb 27 2026 04:53:49 host2 maldet(2750): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 27 2026 04:53:49 host2 maldet(2750): {update} hashing install files and checking against server... Feb 27 2026 04:53:50 host2 maldet(2750): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 27 2026 04:53:50 host2 maldet(2750): {update} latest version already installed. Feb 27 2026 04:53:50 host2 maldet(2862): {sigup} performing signature update check... Feb 27 2026 04:53:50 host2 maldet(2862): {sigup} local signature set is version 202602251468141 Feb 27 2026 04:53:50 host2 maldet(2862): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 27 2026 04:53:50 host2 maldet(2862): {sigup} latest signature set already installed Feb 27 2026 04:53:50 host2 maldet(2951): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 27 2026 04:53:50 host2 maldet(2951): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 27 2026 04:53:50 host2 maldet(2951): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Feb 27 2026 04:53:50 host2 maldet(2951): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 27 2026 04:53:50 host2 maldet(2951): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 27 2026 04:53:59 host2 maldet(2951): {scan} file list completed in 9s, found 321 files... Feb 27 2026 04:53:59 host2 maldet(2951): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 27 2026 04:53:59 host2 maldet(2951): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (321 files) in progress... Feb 27 2026 04:54:04 host2 maldet(2951): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Feb 27 2026 04:54:04 host2 maldet(2951): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 321, malware hits 0, cleaned hits 0, time 14s Feb 27 2026 04:54:04 host2 maldet(2951): {scan} scan report saved, to view run: maldet --report 260227-0453.2951 Feb 28 2026 04:18:41 host2 maldet(71741): {update} checking for available updates... Feb 28 2026 04:18:42 host2 maldet(71741): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 28 2026 04:18:42 host2 maldet(71741): {update} hashing install files and checking against server... Feb 28 2026 04:18:42 host2 maldet(71741): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 28 2026 04:18:42 host2 maldet(71741): {update} latest version already installed. Feb 28 2026 04:18:42 host2 maldet(71852): {sigup} performing signature update check... Feb 28 2026 04:18:42 host2 maldet(71852): {sigup} local signature set is version 202602251468141 Feb 28 2026 04:18:42 host2 maldet(71852): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 28 2026 04:18:42 host2 maldet(71852): {sigup} new signature set 202602283144378 available Feb 28 2026 04:18:42 host2 maldet(71852): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 28 2026 04:18:43 host2 maldet(71852): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 28 2026 04:18:43 host2 maldet(71852): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Feb 28 2026 04:18:43 host2 maldet(71852): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 28 2026 04:18:43 host2 maldet(71852): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 28 2026 04:18:44 host2 maldet(71852): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Feb 28 2026 04:18:44 host2 maldet(71852): {sigup} verified md5sum of maldet-sigpack.tgz Feb 28 2026 04:18:44 host2 maldet(71852): {sigup} unpacked and installed maldet-sigpack.tgz Feb 28 2026 04:18:44 host2 maldet(71852): {sigup} verified md5sum of maldet-clean.tgz Feb 28 2026 04:18:44 host2 maldet(71852): {sigup} unpacked and installed maldet-clean.tgz Feb 28 2026 04:18:44 host2 maldet(71852): {sigup} signature set update completed Feb 28 2026 04:18:44 host2 maldet(71852): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 28 2026 04:18:44 host2 maldet(72075): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 28 2026 04:18:44 host2 maldet(72075): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 28 2026 04:18:44 host2 maldet(72075): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Feb 28 2026 04:18:44 host2 maldet(72075): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 28 2026 04:18:44 host2 maldet(72075): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 28 2026 04:18:51 host2 maldet(72075): {scan} file list completed in 7s, found 398 files... Feb 28 2026 04:18:51 host2 maldet(72075): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 28 2026 04:18:51 host2 maldet(72075): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (398 files) in progress... Feb 28 2026 04:18:56 host2 maldet(72075): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 398, malware hits 0, cleaned hits 0, time 12s Feb 28 2026 04:18:56 host2 maldet(72075): {scan} scan report saved, to view run: maldet --report 260228-0418.72075 Mar 01 2026 03:31:41 host2 maldet(49611): {update} checking for available updates... Mar 01 2026 03:31:41 host2 maldet(49611): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 01 2026 03:31:41 host2 maldet(49611): {update} hashing install files and checking against server... Mar 01 2026 03:31:41 host2 maldet(49611): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 01 2026 03:31:41 host2 maldet(49611): {update} latest version already installed. Mar 01 2026 03:31:41 host2 maldet(49727): {sigup} performing signature update check... Mar 01 2026 03:31:41 host2 maldet(49727): {sigup} local signature set is version 202602283144378 Mar 01 2026 03:31:42 host2 maldet(49727): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 01 2026 03:31:42 host2 maldet(49727): {sigup} new signature set 202603013092728 available Mar 01 2026 03:31:42 host2 maldet(49727): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 01 2026 03:31:42 host2 maldet(49727): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 01 2026 03:31:42 host2 maldet(49727): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 01 2026 03:31:42 host2 maldet(49727): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 01 2026 03:31:43 host2 maldet(49727): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 01 2026 03:31:43 host2 maldet(49727): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 01 2026 03:31:43 host2 maldet(49727): {sigup} verified md5sum of maldet-sigpack.tgz Mar 01 2026 03:31:43 host2 maldet(49727): {sigup} unpacked and installed maldet-sigpack.tgz Mar 01 2026 03:31:43 host2 maldet(49727): {sigup} verified md5sum of maldet-clean.tgz Mar 01 2026 03:31:43 host2 maldet(49727): {sigup} unpacked and installed maldet-clean.tgz Mar 01 2026 03:31:43 host2 maldet(49727): {sigup} signature set update completed Mar 01 2026 03:31:43 host2 maldet(49727): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 01 2026 03:31:43 host2 maldet(49943): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 01 2026 03:31:43 host2 maldet(49943): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 01 2026 03:31:43 host2 maldet(49943): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 01 2026 03:31:43 host2 maldet(49943): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 01 2026 03:31:43 host2 maldet(49943): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 01 2026 03:31:47 host2 maldet(49943): {scan} file list completed in 4s, found 294 files... Mar 01 2026 03:31:47 host2 maldet(49943): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 01 2026 03:31:47 host2 maldet(49943): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (294 files) in progress... Mar 01 2026 03:31:52 host2 maldet(49943): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 294, malware hits 0, cleaned hits 0, time 9s Mar 01 2026 03:31:52 host2 maldet(49943): {scan} scan report saved, to view run: maldet --report 260301-0331.49943 Mar 02 2026 04:10:48 host2 maldet(43691): {update} checking for available updates... Mar 02 2026 04:10:48 host2 maldet(43691): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 02 2026 04:10:48 host2 maldet(43691): {update} hashing install files and checking against server... Mar 02 2026 04:10:48 host2 maldet(43691): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 02 2026 04:10:48 host2 maldet(43691): {update} latest version already installed. Mar 02 2026 04:10:48 host2 maldet(43804): {sigup} performing signature update check... Mar 02 2026 04:10:48 host2 maldet(43804): {sigup} local signature set is version 202603013092728 Mar 02 2026 04:10:49 host2 maldet(43804): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 02 2026 04:10:49 host2 maldet(43804): {sigup} latest signature set already installed Mar 02 2026 04:10:49 host2 maldet(43899): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 02 2026 04:10:49 host2 maldet(43899): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 02 2026 04:10:49 host2 maldet(43899): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 02 2026 04:10:49 host2 maldet(43899): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 02 2026 04:10:49 host2 maldet(43899): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 02 2026 04:10:56 host2 maldet(43899): {scan} file list completed in 7s, found 369 files... Mar 02 2026 04:10:56 host2 maldet(43899): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 02 2026 04:10:56 host2 maldet(43899): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (369 files) in progress... Mar 02 2026 04:11:00 host2 maldet(43899): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 369, malware hits 0, cleaned hits 0, time 11s Mar 02 2026 04:11:00 host2 maldet(43899): {scan} scan report saved, to view run: maldet --report 260302-0410.43899 Mar 03 2026 03:56:57 host2 maldet(15486): {update} checking for available updates... Mar 03 2026 03:56:58 host2 maldet(15486): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 03 2026 03:56:58 host2 maldet(15486): {update} hashing install files and checking against server... Mar 03 2026 03:56:58 host2 maldet(15486): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 03 2026 03:56:58 host2 maldet(15486): {update} latest version already installed. Mar 03 2026 03:56:58 host2 maldet(15609): {sigup} performing signature update check... Mar 03 2026 03:56:58 host2 maldet(15609): {sigup} local signature set is version 202603013092728 Mar 03 2026 03:56:58 host2 maldet(15609): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 03 2026 03:56:58 host2 maldet(15609): {sigup} latest signature set already installed Mar 03 2026 03:56:58 host2 maldet(15715): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 03 2026 03:56:59 host2 maldet(15715): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 03 2026 03:56:59 host2 maldet(15715): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 03 2026 03:56:59 host2 maldet(15715): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 03 2026 03:56:59 host2 maldet(15715): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 03 2026 03:57:06 host2 maldet(15715): {scan} file list completed in 7s, found 439 files... Mar 03 2026 03:57:06 host2 maldet(15715): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 03 2026 03:57:06 host2 maldet(15715): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (439 files) in progress... Mar 03 2026 03:57:11 host2 maldet(15715): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 439, malware hits 0, cleaned hits 0, time 13s Mar 03 2026 03:57:11 host2 maldet(15715): {scan} scan report saved, to view run: maldet --report 260303-0356.15715 Mar 04 2026 03:58:27 host2 maldet(46840): {update} checking for available updates... Mar 04 2026 03:58:27 host2 maldet(46840): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 04 2026 03:58:27 host2 maldet(46840): {update} hashing install files and checking against server... Mar 04 2026 03:58:28 host2 maldet(46840): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 04 2026 03:58:28 host2 maldet(46840): {update} latest version already installed. Mar 04 2026 03:58:28 host2 maldet(47053): {sigup} performing signature update check... Mar 04 2026 03:58:28 host2 maldet(47053): {sigup} local signature set is version 202603013092728 Mar 04 2026 03:58:28 host2 maldet(47053): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 04 2026 03:58:28 host2 maldet(47053): {sigup} new signature set 202603041988132 available Mar 04 2026 03:58:28 host2 maldet(47053): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 04 2026 03:58:28 host2 maldet(47053): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 04 2026 03:58:29 host2 maldet(47053): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 04 2026 03:58:29 host2 maldet(47053): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 04 2026 03:58:29 host2 maldet(47053): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 04 2026 03:58:29 host2 maldet(47053): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 04 2026 03:58:29 host2 maldet(47053): {sigup} verified md5sum of maldet-sigpack.tgz Mar 04 2026 03:58:29 host2 maldet(47053): {sigup} unpacked and installed maldet-sigpack.tgz Mar 04 2026 03:58:29 host2 maldet(47053): {sigup} verified md5sum of maldet-clean.tgz Mar 04 2026 03:58:29 host2 maldet(47053): {sigup} unpacked and installed maldet-clean.tgz Mar 04 2026 03:58:29 host2 maldet(47053): {sigup} signature set update completed Mar 04 2026 03:58:29 host2 maldet(47053): {sigup} 17660 signatures (14823 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 04 2026 03:58:29 host2 maldet(47532): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 04 2026 03:58:30 host2 maldet(47532): {scan} signatures loaded: 17660 (14823 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 04 2026 03:58:30 host2 maldet(47532): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 04 2026 03:58:30 host2 maldet(47532): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 04 2026 03:58:30 host2 maldet(47532): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 04 2026 03:58:38 host2 maldet(47532): {scan} file list completed in 8s, found 341 files... Mar 04 2026 03:58:38 host2 maldet(47532): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 04 2026 03:58:38 host2 maldet(47532): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (341 files) in progress... Mar 04 2026 03:58:47 host2 maldet(47532): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 341, malware hits 0, cleaned hits 0, time 17s Mar 04 2026 03:58:47 host2 maldet(47532): {scan} scan report saved, to view run: maldet --report 260304-0358.47532 Mar 05 2026 04:20:13 host2 maldet(71195): {update} checking for available updates... Mar 05 2026 04:20:13 host2 maldet(71195): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 05 2026 04:20:13 host2 maldet(71195): {update} hashing install files and checking against server... Mar 05 2026 04:20:13 host2 maldet(71195): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 05 2026 04:20:13 host2 maldet(71195): {update} latest version already installed. Mar 05 2026 04:20:13 host2 maldet(71409): {sigup} performing signature update check... Mar 05 2026 04:20:13 host2 maldet(71409): {sigup} local signature set is version 202603041988132 Mar 05 2026 04:20:14 host2 maldet(71409): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 05 2026 04:20:14 host2 maldet(71409): {sigup} latest signature set already installed Mar 05 2026 04:20:14 host2 maldet(71554): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 05 2026 04:20:14 host2 maldet(71554): {scan} signatures loaded: 17660 (14823 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 05 2026 04:20:14 host2 maldet(71554): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 05 2026 04:20:14 host2 maldet(71554): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 05 2026 04:20:14 host2 maldet(71554): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 05 2026 04:20:22 host2 maldet(71554): {scan} file list completed in 8s, found 459 files... Mar 05 2026 04:20:22 host2 maldet(71554): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 05 2026 04:20:22 host2 maldet(71554): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (459 files) in progress... Mar 05 2026 04:20:29 host2 maldet(71554): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Mar 05 2026 04:20:29 host2 maldet(71554): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 459, malware hits 0, cleaned hits 0, time 15s Mar 05 2026 04:20:29 host2 maldet(71554): {scan} scan report saved, to view run: maldet --report 260305-0420.71554 Mar 06 2026 04:17:06 host2 maldet(8326): {update} checking for available updates... Mar 06 2026 04:17:06 host2 maldet(8326): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 06 2026 04:17:06 host2 maldet(8326): {update} hashing install files and checking against server... Mar 06 2026 04:17:06 host2 maldet(8326): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 06 2026 04:17:06 host2 maldet(8326): {update} latest version already installed. Mar 06 2026 04:17:06 host2 maldet(8462): {sigup} performing signature update check... Mar 06 2026 04:17:06 host2 maldet(8462): {sigup} local signature set is version 202603041988132 Mar 06 2026 04:17:06 host2 maldet(8462): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 06 2026 04:17:07 host2 maldet(8462): {sigup} latest signature set already installed Mar 06 2026 04:17:07 host2 maldet(8564): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 06 2026 04:17:07 host2 maldet(8564): {scan} signatures loaded: 17660 (14823 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 06 2026 04:17:07 host2 maldet(8564): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 06 2026 04:17:07 host2 maldet(8564): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 06 2026 04:17:07 host2 maldet(8564): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 06 2026 04:17:13 host2 maldet(8564): {scan} file list completed in 6s, found 655 files... Mar 06 2026 04:17:13 host2 maldet(8564): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 06 2026 04:17:13 host2 maldet(8564): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (655 files) in progress... Mar 06 2026 04:17:19 host2 maldet(8564): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 655, malware hits 0, cleaned hits 0, time 12s Mar 06 2026 04:17:19 host2 maldet(8564): {scan} scan report saved, to view run: maldet --report 260306-0417.8564 Mar 07 2026 03:44:35 host2 maldet(71526): {update} checking for available updates... Mar 07 2026 03:44:35 host2 maldet(71526): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 07 2026 03:44:35 host2 maldet(71526): {update} hashing install files and checking against server... Mar 07 2026 03:44:36 host2 maldet(71526): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 07 2026 03:44:36 host2 maldet(71526): {update} latest version already installed. Mar 07 2026 03:44:36 host2 maldet(71644): {sigup} performing signature update check... Mar 07 2026 03:44:36 host2 maldet(71644): {sigup} local signature set is version 202603041988132 Mar 07 2026 03:44:36 host2 maldet(71644): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 07 2026 03:44:36 host2 maldet(71644): {sigup} new signature set 202603071550177 available Mar 07 2026 03:44:36 host2 maldet(71644): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 07 2026 03:44:36 host2 maldet(71644): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 07 2026 03:44:36 host2 maldet(71644): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 07 2026 03:44:37 host2 maldet(71644): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 07 2026 03:44:37 host2 maldet(71644): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 07 2026 03:44:37 host2 maldet(71644): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 07 2026 03:44:37 host2 maldet(71644): {sigup} verified md5sum of maldet-sigpack.tgz Mar 07 2026 03:44:37 host2 maldet(71644): {sigup} unpacked and installed maldet-sigpack.tgz Mar 07 2026 03:44:37 host2 maldet(71644): {sigup} verified md5sum of maldet-clean.tgz Mar 07 2026 03:44:37 host2 maldet(71644): {sigup} unpacked and installed maldet-clean.tgz Mar 07 2026 03:44:37 host2 maldet(71644): {sigup} signature set update completed Mar 07 2026 03:44:37 host2 maldet(71644): {sigup} 17660 signatures (14823 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 07 2026 03:44:37 host2 maldet(71890): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 07 2026 03:44:37 host2 maldet(71890): {scan} signatures loaded: 17660 (14823 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 07 2026 03:44:37 host2 maldet(71890): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 07 2026 03:44:37 host2 maldet(71890): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 07 2026 03:44:37 host2 maldet(71890): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 07 2026 03:44:45 host2 maldet(71890): {scan} file list completed in 8s, found 1011 files... Mar 07 2026 03:44:45 host2 maldet(71890): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 07 2026 03:44:45 host2 maldet(71890): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1011 files) in progress... Mar 07 2026 03:44:54 host2 maldet(71890): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1011, malware hits 0, cleaned hits 0, time 17s Mar 07 2026 03:44:54 host2 maldet(71890): {scan} scan report saved, to view run: maldet --report 260307-0344.71890 Mar 08 2026 04:27:34 host2 maldet(26420): {update} checking for available updates... Mar 08 2026 04:27:34 host2 maldet(26420): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 08 2026 04:27:34 host2 maldet(26420): {update} hashing install files and checking against server... Mar 08 2026 04:27:34 host2 maldet(26420): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 08 2026 04:27:34 host2 maldet(26420): {update} latest version already installed. Mar 08 2026 04:27:34 host2 maldet(26595): {sigup} performing signature update check... Mar 08 2026 04:27:34 host2 maldet(26595): {sigup} local signature set is version 202603071550177 Mar 08 2026 04:27:35 host2 maldet(26595): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 08 2026 04:27:35 host2 maldet(26595): {sigup} latest signature set already installed Mar 08 2026 04:27:35 host2 maldet(26718): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 08 2026 04:27:35 host2 maldet(26718): {scan} signatures loaded: 17660 (14823 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 08 2026 04:27:35 host2 maldet(26718): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 08 2026 04:27:35 host2 maldet(26718): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 08 2026 04:27:35 host2 maldet(26718): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 08 2026 04:27:42 host2 maldet(26718): {scan} file list completed in 7s, found 257 files... Mar 08 2026 04:27:42 host2 maldet(26718): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 08 2026 04:27:42 host2 maldet(26718): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (257 files) in progress... Mar 08 2026 04:27:51 host2 maldet(26718): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 257, malware hits 0, cleaned hits 0, time 16s Mar 08 2026 04:27:51 host2 maldet(26718): {scan} scan report saved, to view run: maldet --report 260308-0427.26718 Mar 09 2026 04:08:14 host2 maldet(57357): {update} checking for available updates... Mar 09 2026 04:08:14 host2 maldet(57357): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 09 2026 04:08:14 host2 maldet(57357): {update} hashing install files and checking against server... Mar 09 2026 04:08:14 host2 maldet(57357): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 09 2026 04:08:14 host2 maldet(57357): {update} latest version already installed. Mar 09 2026 04:08:14 host2 maldet(57486): {sigup} performing signature update check... Mar 09 2026 04:08:14 host2 maldet(57486): {sigup} local signature set is version 202603071550177 Mar 09 2026 04:08:14 host2 maldet(57486): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 09 2026 04:08:14 host2 maldet(57486): {sigup} latest signature set already installed Mar 09 2026 04:08:15 host2 maldet(57575): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 09 2026 04:08:15 host2 maldet(57575): {scan} signatures loaded: 17660 (14823 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 09 2026 04:08:15 host2 maldet(57575): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 09 2026 04:08:15 host2 maldet(57575): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 09 2026 04:08:15 host2 maldet(57575): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 09 2026 04:08:22 host2 maldet(57575): {scan} file list completed in 7s, found 400 files... Mar 09 2026 04:08:22 host2 maldet(57575): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 09 2026 04:08:22 host2 maldet(57575): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (400 files) in progress... Mar 09 2026 04:08:27 host2 maldet(57575): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 400, malware hits 0, cleaned hits 0, time 12s Mar 09 2026 04:08:27 host2 maldet(57575): {scan} scan report saved, to view run: maldet --report 260309-0408.57575 Mar 10 2026 03:26:00 host2 maldet(39183): {update} checking for available updates... Mar 10 2026 03:26:00 host2 maldet(39183): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 10 2026 03:26:00 host2 maldet(39183): {update} hashing install files and checking against server... Mar 10 2026 03:26:01 host2 maldet(39183): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 10 2026 03:26:01 host2 maldet(39183): {update} latest version already installed. Mar 10 2026 03:26:01 host2 maldet(39396): {sigup} performing signature update check... Mar 10 2026 03:26:01 host2 maldet(39396): {sigup} local signature set is version 202603071550177 Mar 10 2026 03:26:01 host2 maldet(39396): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 10 2026 03:26:01 host2 maldet(39396): {sigup} new signature set 202603103603122 available Mar 10 2026 03:26:01 host2 maldet(39396): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 10 2026 03:26:01 host2 maldet(39396): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 10 2026 03:26:02 host2 maldet(39396): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 10 2026 03:26:02 host2 maldet(39396): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 10 2026 03:26:02 host2 maldet(39396): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 10 2026 03:26:02 host2 maldet(39396): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 10 2026 03:26:02 host2 maldet(39396): {sigup} verified md5sum of maldet-sigpack.tgz Mar 10 2026 03:26:02 host2 maldet(39396): {sigup} unpacked and installed maldet-sigpack.tgz Mar 10 2026 03:26:02 host2 maldet(39396): {sigup} verified md5sum of maldet-clean.tgz Mar 10 2026 03:26:02 host2 maldet(39396): {sigup} unpacked and installed maldet-clean.tgz Mar 10 2026 03:26:02 host2 maldet(39396): {sigup} signature set update completed Mar 10 2026 03:26:02 host2 maldet(39396): {sigup} 17660 signatures (14823 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 10 2026 03:26:02 host2 maldet(39910): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 10 2026 03:26:02 host2 maldet(39910): {scan} signatures loaded: 17660 (14823 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 10 2026 03:26:02 host2 maldet(39910): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 10 2026 03:26:02 host2 maldet(39910): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 10 2026 03:26:02 host2 maldet(39910): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 10 2026 03:26:10 host2 maldet(39910): {scan} file list completed in 8s, found 234 files... Mar 10 2026 03:26:10 host2 maldet(39910): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 10 2026 03:26:10 host2 maldet(39910): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (234 files) in progress... Mar 10 2026 03:26:18 host2 maldet(39910): {hit} malware hit {HEX}php.nested.base64.663 found for /home/biblical/public_html/EZALU6kfMKz.php Mar 10 2026 03:26:18 host2 maldet(39910): {hit} malware hit {HEX}php.nested.base64.663 found for /home/justaskd/public_html/Hn5S9fYvlrj.php Mar 10 2026 03:26:18 host2 maldet(39910): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 234, malware hits 2, cleaned hits 0, time 16s Mar 10 2026 03:26:18 host2 maldet(39910): {scan} scan report saved, to view run: maldet --report 260310-0326.39910 Mar 10 2026 03:26:18 host2 maldet(39910): {scan} quarantine is disabled! set quarantine_hits=1 in conf.maldet or to quarantine results run: maldet -q 260310-0326.39910 Mar 11 2026 04:18:11 host2 maldet(91075): {update} checking for available updates... Mar 11 2026 04:18:12 host2 maldet(91075): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 11 2026 04:18:12 host2 maldet(91075): {update} hashing install files and checking against server... Mar 11 2026 04:18:12 host2 maldet(91075): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 11 2026 04:18:12 host2 maldet(91075): {update} latest version already installed. Mar 11 2026 04:18:12 host2 maldet(91443): {sigup} performing signature update check... Mar 11 2026 04:18:12 host2 maldet(91443): {sigup} local signature set is version 202603103603122 Mar 11 2026 04:18:12 host2 maldet(91443): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 11 2026 04:18:12 host2 maldet(91443): {sigup} latest signature set already installed Mar 11 2026 04:18:12 host2 maldet(91690): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 11 2026 04:18:13 host2 maldet(91690): {scan} signatures loaded: 17660 (14823 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 11 2026 04:18:13 host2 maldet(91690): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 11 2026 04:18:13 host2 maldet(91690): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 11 2026 04:18:13 host2 maldet(91690): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 11 2026 04:18:21 host2 maldet(91690): {scan} file list completed in 8s, found 818 files... Mar 11 2026 04:18:21 host2 maldet(91690): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 11 2026 04:18:21 host2 maldet(91690): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (818 files) in progress... Mar 11 2026 04:18:34 host2 maldet(91690): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 818, malware hits 0, cleaned hits 0, time 22s Mar 11 2026 04:18:34 host2 maldet(91690): {scan} scan report saved, to view run: maldet --report 260311-0418.91690 Mar 12 2026 03:17:04 host2 maldet(94939): {update} checking for available updates... Mar 12 2026 03:17:05 host2 maldet(94939): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 12 2026 03:17:05 host2 maldet(94939): {update} hashing install files and checking against server... Mar 12 2026 03:17:05 host2 maldet(94939): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 12 2026 03:17:05 host2 maldet(94939): {update} latest version already installed. Mar 12 2026 03:17:05 host2 maldet(95316): {sigup} performing signature update check... Mar 12 2026 03:17:05 host2 maldet(95316): {sigup} local signature set is version 202603103603122 Mar 12 2026 03:17:06 host2 maldet(95316): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 12 2026 03:17:06 host2 maldet(95316): {sigup} latest signature set already installed Mar 12 2026 03:17:06 host2 maldet(95559): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 12 2026 03:17:06 host2 maldet(95559): {scan} signatures loaded: 17660 (14823 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 12 2026 03:17:06 host2 maldet(95559): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 12 2026 03:17:06 host2 maldet(95559): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 12 2026 03:17:06 host2 maldet(95559): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 12 2026 03:17:15 host2 maldet(95559): {scan} file list completed in 9s, found 259 files... Mar 12 2026 03:17:15 host2 maldet(95559): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 12 2026 03:17:15 host2 maldet(95559): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (259 files) in progress... Mar 12 2026 03:17:26 host2 maldet(95559): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 259, malware hits 0, cleaned hits 0, time 20s Mar 12 2026 03:17:26 host2 maldet(95559): {scan} scan report saved, to view run: maldet --report 260312-0317.95559 Mar 13 2026 04:37:45 host2 maldet(80457): {update} checking for available updates... Mar 13 2026 04:37:45 host2 maldet(80457): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 13 2026 04:37:45 host2 maldet(80457): {update} hashing install files and checking against server... Mar 13 2026 04:37:46 host2 maldet(80457): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 13 2026 04:37:46 host2 maldet(80457): {update} latest version already installed. Mar 13 2026 04:37:46 host2 maldet(80581): {sigup} performing signature update check... Mar 13 2026 04:37:46 host2 maldet(80581): {sigup} local signature set is version 202603103603122 Mar 13 2026 04:37:46 host2 maldet(80581): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 13 2026 04:37:46 host2 maldet(80581): {sigup} new signature set 202603132091366 available Mar 13 2026 04:37:46 host2 maldet(80581): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 13 2026 04:37:46 host2 maldet(80581): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 13 2026 04:37:47 host2 maldet(80581): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 13 2026 04:37:47 host2 maldet(80581): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 13 2026 04:37:47 host2 maldet(80581): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 13 2026 04:37:47 host2 maldet(80581): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 13 2026 04:37:47 host2 maldet(80581): {sigup} verified md5sum of maldet-sigpack.tgz Mar 13 2026 04:37:47 host2 maldet(80581): {sigup} unpacked and installed maldet-sigpack.tgz Mar 13 2026 04:37:47 host2 maldet(80581): {sigup} verified md5sum of maldet-clean.tgz Mar 13 2026 04:37:47 host2 maldet(80581): {sigup} unpacked and installed maldet-clean.tgz Mar 13 2026 04:37:47 host2 maldet(80581): {sigup} signature set update completed Mar 13 2026 04:37:47 host2 maldet(80581): {sigup} 17661 signatures (14824 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 13 2026 04:37:48 host2 maldet(80838): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 13 2026 04:37:48 host2 maldet(80838): {scan} signatures loaded: 17661 (14824 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 13 2026 04:37:48 host2 maldet(80838): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 13 2026 04:37:48 host2 maldet(80838): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 13 2026 04:37:48 host2 maldet(80838): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 13 2026 04:37:54 host2 maldet(80838): {scan} file list completed in 6s, found 337 files... Mar 13 2026 04:37:54 host2 maldet(80838): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 13 2026 04:37:54 host2 maldet(80838): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (337 files) in progress... Mar 13 2026 04:38:01 host2 maldet(80838): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 337, malware hits 0, cleaned hits 0, time 13s Mar 13 2026 04:38:01 host2 maldet(80838): {scan} scan report saved, to view run: maldet --report 260313-0437.80838 Mar 14 2026 04:04:05 host2 maldet(14755): {update} checking for available updates... Mar 14 2026 04:04:05 host2 maldet(14755): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 14 2026 04:04:05 host2 maldet(14755): {update} hashing install files and checking against server... Mar 14 2026 04:04:06 host2 maldet(14755): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 14 2026 04:04:06 host2 maldet(14755): {update} latest version already installed. Mar 14 2026 04:04:06 host2 maldet(14877): {sigup} performing signature update check... Mar 14 2026 04:04:06 host2 maldet(14877): {sigup} local signature set is version 202603132091366 Mar 14 2026 04:04:06 host2 maldet(14877): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 14 2026 04:04:06 host2 maldet(14877): {sigup} latest signature set already installed Mar 14 2026 04:04:06 host2 maldet(14973): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 14 2026 04:04:06 host2 maldet(14973): {scan} signatures loaded: 17661 (14824 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 14 2026 04:04:06 host2 maldet(14973): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 14 2026 04:04:06 host2 maldet(14973): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 14 2026 04:04:06 host2 maldet(14973): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 14 2026 04:04:13 host2 maldet(14973): {scan} file list completed in 7s, found 672 files... Mar 14 2026 04:04:13 host2 maldet(14973): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 14 2026 04:04:13 host2 maldet(14973): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (672 files) in progress... Mar 14 2026 04:04:23 host2 maldet(14973): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 672, malware hits 0, cleaned hits 0, time 17s Mar 14 2026 04:04:23 host2 maldet(14973): {scan} scan report saved, to view run: maldet --report 260314-0404.14973 Mar 15 2026 04:17:02 host2 maldet(44122): {update} checking for available updates... Mar 15 2026 04:17:03 host2 maldet(44122): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 15 2026 04:17:03 host2 maldet(44122): {update} hashing install files and checking against server... Mar 15 2026 04:17:03 host2 maldet(44122): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 15 2026 04:17:03 host2 maldet(44122): {update} latest version already installed. Mar 15 2026 04:17:03 host2 maldet(44431): {sigup} performing signature update check... Mar 15 2026 04:17:03 host2 maldet(44431): {sigup} local signature set is version 202603132091366 Mar 15 2026 04:17:03 host2 maldet(44431): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 15 2026 04:17:03 host2 maldet(44431): {sigup} latest signature set already installed Mar 15 2026 04:17:04 host2 maldet(44654): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 15 2026 04:17:04 host2 maldet(44654): {scan} signatures loaded: 17661 (14824 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 15 2026 04:17:04 host2 maldet(44654): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 15 2026 04:17:04 host2 maldet(44654): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 15 2026 04:17:04 host2 maldet(44654): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 15 2026 04:17:14 host2 maldet(44654): {scan} file list completed in 10s, found 234 files... Mar 15 2026 04:17:14 host2 maldet(44654): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 15 2026 04:17:14 host2 maldet(44654): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (234 files) in progress... Mar 15 2026 04:17:23 host2 maldet(44654): {hit} malware hit {HEX}php.cmdshell.cih.237 found for /home/biblical/public_html/karma_syndicate_xe8qv01z.php Mar 15 2026 04:17:23 host2 maldet(44654): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 234, malware hits 1, cleaned hits 0, time 19s Mar 15 2026 04:17:23 host2 maldet(44654): {scan} scan report saved, to view run: maldet --report 260315-0417.44654 Mar 15 2026 04:17:23 host2 maldet(44654): {scan} quarantine is disabled! set quarantine_hits=1 in conf.maldet or to quarantine results run: maldet -q 260315-0417.44654 Mar 16 2026 04:32:21 host2 maldet(69969): {update} checking for available updates... Mar 16 2026 04:32:21 host2 maldet(69969): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 16 2026 04:32:21 host2 maldet(69969): {update} hashing install files and checking against server... Mar 16 2026 04:32:22 host2 maldet(69969): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 16 2026 04:32:22 host2 maldet(69969): {update} latest version already installed. Mar 16 2026 04:32:22 host2 maldet(70084): {sigup} performing signature update check... Mar 16 2026 04:32:22 host2 maldet(70084): {sigup} local signature set is version 202603132091366 Mar 16 2026 04:32:22 host2 maldet(70084): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 16 2026 04:32:22 host2 maldet(70084): {sigup} new signature set 2026031579540 available Mar 16 2026 04:32:22 host2 maldet(70084): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 16 2026 04:32:22 host2 maldet(70084): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 16 2026 04:32:23 host2 maldet(70084): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 16 2026 04:32:23 host2 maldet(70084): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 16 2026 04:32:23 host2 maldet(70084): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 16 2026 04:32:23 host2 maldet(70084): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 16 2026 04:32:23 host2 maldet(70084): {sigup} verified md5sum of maldet-sigpack.tgz Mar 16 2026 04:32:23 host2 maldet(70084): {sigup} unpacked and installed maldet-sigpack.tgz Mar 16 2026 04:32:23 host2 maldet(70084): {sigup} verified md5sum of maldet-clean.tgz Mar 16 2026 04:32:23 host2 maldet(70084): {sigup} unpacked and installed maldet-clean.tgz Mar 16 2026 04:32:23 host2 maldet(70084): {sigup} signature set update completed Mar 16 2026 04:32:23 host2 maldet(70084): {sigup} 42289 signatures (39994 MD5 | 2290 HEX | 5 YARA | 0 USER) Mar 16 2026 04:32:23 host2 maldet(70369): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 16 2026 04:32:23 host2 maldet(70369): {scan} signatures loaded: 42289 (39994 MD5 | 2290 HEX | 5 YARA | 0 USER) Mar 16 2026 04:32:23 host2 maldet(70369): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 16 2026 04:32:23 host2 maldet(70369): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 16 2026 04:32:23 host2 maldet(70369): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Mar 16 2026 04:32:31 host2 maldet(70369): {scan} file list completed in 8s, found 248 files... Mar 16 2026 04:32:31 host2 maldet(70369): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 16 2026 04:32:31 host2 maldet(70369): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (248 files) in progress... Mar 16 2026 04:32:43 host2 maldet(70369): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 248, malware hits 0, cleaned hits 0, time 20s Mar 16 2026 04:32:43 host2 maldet(70369): {scan} scan report saved, to view run: maldet --report 260316-0432.70369 Mar 17 2026 01:32:34 host2 maldet(57734): {sigup} performing signature update check... Mar 17 2026 01:32:34 host2 maldet(57734): {sigup} local signature set is version 2026031579541 Mar 17 2026 01:32:34 host2 maldet(57734): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 17 2026 01:32:34 host2 maldet(57734): {sigup} new signature set 2026031678836 available Mar 17 2026 01:32:34 host2 maldet(57734): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 17 2026 01:32:35 host2 maldet(57734): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 17 2026 01:32:35 host2 maldet(57734): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 17 2026 01:32:35 host2 maldet(57734): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 17 2026 01:32:36 host2 maldet(57734): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 17 2026 01:32:36 host2 maldet(57734): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 17 2026 01:32:36 host2 maldet(57734): {sigup} verified md5sum of maldet-sigpack.tgz Mar 17 2026 01:32:36 host2 maldet(57734): {sigup} unpacked and installed maldet-sigpack.tgz Mar 17 2026 01:32:36 host2 maldet(57734): {sigup} verified md5sum of maldet-clean.tgz Mar 17 2026 01:32:36 host2 maldet(57734): {sigup} unpacked and installed maldet-clean.tgz Mar 17 2026 01:32:36 host2 maldet(57734): {sigup} signature set update completed Mar 17 2026 01:32:36 host2 maldet(57734): {sigup} 41572 signatures (39277 MD5 | 2290 HEX | 5 YARA | 0 USER) Mar 17 2026 04:12:05 host2 maldet(37960): {update} checking for available updates... Mar 17 2026 04:12:05 host2 maldet(37960): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 17 2026 04:12:05 host2 maldet(37960): {update} hashing install files and checking against server... Mar 17 2026 04:12:05 host2 maldet(37960): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 17 2026 04:12:05 host2 maldet(37960): {update} latest version already installed. Mar 17 2026 04:12:05 host2 maldet(38096): {sigup} performing signature update check... Mar 17 2026 04:12:05 host2 maldet(38096): {sigup} local signature set is version 2026031678836 Mar 17 2026 04:12:06 host2 maldet(38096): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 17 2026 04:12:06 host2 maldet(38096): {sigup} latest signature set already installed Mar 17 2026 04:12:06 host2 maldet(38253): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 17 2026 04:12:06 host2 maldet(38253): {scan} signatures loaded: 41572 (39277 MD5 | 2290 HEX | 5 YARA | 0 USER) Mar 17 2026 04:12:06 host2 maldet(38253): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 17 2026 04:12:06 host2 maldet(38253): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 17 2026 04:12:06 host2 maldet(38253): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Mar 17 2026 04:12:13 host2 maldet(38253): {scan} file list completed in 7s, found 248 files... Mar 17 2026 04:12:13 host2 maldet(38253): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 17 2026 04:12:13 host2 maldet(38253): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (248 files) in progress... Mar 17 2026 04:12:20 host2 maldet(38253): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 248, malware hits 0, cleaned hits 0, time 14s Mar 17 2026 04:12:20 host2 maldet(38253): {scan} scan report saved, to view run: maldet --report 260317-0412.38253 Mar 18 2026 04:21:26 host2 maldet(66415): {update} checking for available updates... Mar 18 2026 04:21:26 host2 maldet(66415): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 18 2026 04:21:26 host2 maldet(66415): {update} hashing install files and checking against server... Mar 18 2026 04:21:27 host2 maldet(66415): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 18 2026 04:21:27 host2 maldet(66415): {update} latest version already installed. Mar 18 2026 04:21:27 host2 maldet(66624): {sigup} performing signature update check... Mar 18 2026 04:21:27 host2 maldet(66624): {sigup} local signature set is version 2026031678836 Mar 18 2026 04:21:27 host2 maldet(66624): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 18 2026 04:21:27 host2 maldet(66624): {sigup} latest signature set already installed Mar 18 2026 04:21:27 host2 maldet(66775): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 18 2026 04:21:27 host2 maldet(66775): {scan} signatures loaded: 41572 (39277 MD5 | 2290 HEX | 5 YARA | 0 USER) Mar 18 2026 04:21:27 host2 maldet(66775): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 18 2026 04:21:27 host2 maldet(66775): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 18 2026 04:21:27 host2 maldet(66775): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Mar 18 2026 04:21:34 host2 maldet(66775): {scan} file list completed in 7s, found 292 files... Mar 18 2026 04:21:34 host2 maldet(66775): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 18 2026 04:21:34 host2 maldet(66775): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (292 files) in progress... Mar 18 2026 04:21:41 host2 maldet(66775): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 292, malware hits 0, cleaned hits 0, time 14s Mar 18 2026 04:21:41 host2 maldet(66775): {scan} scan report saved, to view run: maldet --report 260318-0421.66775 Mar 19 2026 04:40:49 host2 maldet(4929): {update} checking for available updates... Mar 19 2026 04:40:49 host2 maldet(4929): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 19 2026 04:40:49 host2 maldet(4929): {update} hashing install files and checking against server... Mar 19 2026 04:40:50 host2 maldet(4929): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 19 2026 04:40:50 host2 maldet(4929): {update} latest version already installed. Mar 19 2026 04:40:50 host2 maldet(5065): {sigup} performing signature update check... Mar 19 2026 04:40:50 host2 maldet(5065): {sigup} local signature set is version 2026031678836 Mar 19 2026 04:40:50 host2 maldet(5065): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 19 2026 04:40:50 host2 maldet(5065): {sigup} latest signature set already installed Mar 19 2026 04:40:50 host2 maldet(5156): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 19 2026 04:40:50 host2 maldet(5156): {scan} signatures loaded: 41572 (39277 MD5 | 2290 HEX | 5 YARA | 0 USER) Mar 19 2026 04:40:50 host2 maldet(5156): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 19 2026 04:40:50 host2 maldet(5156): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 19 2026 04:40:50 host2 maldet(5156): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Mar 19 2026 04:40:57 host2 maldet(5156): {scan} file list completed in 7s, found 190 files... Mar 19 2026 04:40:57 host2 maldet(5156): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 19 2026 04:40:57 host2 maldet(5156): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (190 files) in progress... Mar 19 2026 04:41:02 host2 maldet(5156): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 190, malware hits 0, cleaned hits 0, time 12s Mar 19 2026 04:41:02 host2 maldet(5156): {scan} scan report saved, to view run: maldet --report 260319-0440.5156 Mar 20 2026 03:47:43 host2 maldet(56824): {update} checking for available updates... Mar 20 2026 03:47:44 host2 maldet(56824): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 20 2026 03:47:44 host2 maldet(56824): {update} hashing install files and checking against server... Mar 20 2026 03:47:44 host2 maldet(56824): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 20 2026 03:47:44 host2 maldet(56824): {update} latest version already installed. Mar 20 2026 03:47:44 host2 maldet(56935): {sigup} performing signature update check... Mar 20 2026 03:47:44 host2 maldet(56935): {sigup} local signature set is version 2026031678836 Mar 20 2026 03:47:44 host2 maldet(56935): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 20 2026 03:47:44 host2 maldet(56935): {sigup} latest signature set already installed Mar 20 2026 03:47:44 host2 maldet(57024): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 20 2026 03:47:44 host2 maldet(57024): {scan} signatures loaded: 41572 (39277 MD5 | 2290 HEX | 5 YARA | 0 USER) Mar 20 2026 03:47:44 host2 maldet(57024): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 20 2026 03:47:44 host2 maldet(57024): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 20 2026 03:47:45 host2 maldet(57024): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Mar 20 2026 03:47:52 host2 maldet(57024): {scan} file list completed in 7s, found 899 files... Mar 20 2026 03:47:52 host2 maldet(57024): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 20 2026 03:47:52 host2 maldet(57024): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (899 files) in progress... Mar 20 2026 03:47:58 host2 maldet(57024): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 899, malware hits 0, cleaned hits 0, time 14s Mar 20 2026 03:47:58 host2 maldet(57024): {scan} scan report saved, to view run: maldet --report 260320-0347.57024 Mar 21 2026 04:31:58 host2 maldet(25728): {update} checking for available updates... Mar 21 2026 04:31:58 host2 maldet(25728): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 21 2026 04:31:58 host2 maldet(25728): {update} hashing install files and checking against server... Mar 21 2026 04:31:58 host2 maldet(25728): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 21 2026 04:31:58 host2 maldet(25728): {update} latest version already installed. Mar 21 2026 04:31:58 host2 maldet(25973): {sigup} performing signature update check... Mar 21 2026 04:31:58 host2 maldet(25973): {sigup} local signature set is version 2026031678836 Mar 21 2026 04:31:58 host2 maldet(25973): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 21 2026 04:31:58 host2 maldet(25973): {sigup} new signature set 2026032078840 available Mar 21 2026 04:31:58 host2 maldet(25973): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 21 2026 04:31:59 host2 maldet(25973): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 21 2026 04:31:59 host2 maldet(25973): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 21 2026 04:31:59 host2 maldet(25973): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 21 2026 04:31:59 host2 maldet(25973): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 21 2026 04:32:00 host2 maldet(25973): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 21 2026 04:32:00 host2 maldet(25973): {sigup} verified md5sum of maldet-sigpack.tgz Mar 21 2026 04:32:00 host2 maldet(25973): {sigup} unpacked and installed maldet-sigpack.tgz Mar 21 2026 04:32:00 host2 maldet(25973): {sigup} verified md5sum of maldet-clean.tgz Mar 21 2026 04:32:00 host2 maldet(25973): {sigup} unpacked and installed maldet-clean.tgz Mar 21 2026 04:32:00 host2 maldet(25973): {sigup} signature set update completed Mar 21 2026 04:32:00 host2 maldet(25973): {sigup} 41572 signatures (39277 MD5 | 2290 HEX | 5 YARA | 0 USER) Mar 21 2026 04:32:00 host2 maldet(26733): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 21 2026 04:32:00 host2 maldet(26733): {scan} signatures loaded: 41572 (39277 MD5 | 2290 HEX | 5 YARA | 0 USER) Mar 21 2026 04:32:00 host2 maldet(26733): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 21 2026 04:32:00 host2 maldet(26733): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 21 2026 04:32:00 host2 maldet(26733): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Mar 21 2026 04:32:10 host2 maldet(26733): {scan} file list completed in 10s, found 243 files... Mar 21 2026 04:32:10 host2 maldet(26733): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 21 2026 04:32:10 host2 maldet(26733): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (243 files) in progress... Mar 21 2026 04:32:22 host2 maldet(26733): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 243, malware hits 0, cleaned hits 0, time 22s Mar 21 2026 04:32:22 host2 maldet(26733): {scan} scan report saved, to view run: maldet --report 260321-0432.26733 Mar 22 2026 03:56:39 host2 maldet(87855): {update} checking for available updates... Mar 22 2026 03:56:40 host2 maldet(87855): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 22 2026 03:56:40 host2 maldet(87855): {update} hashing install files and checking against server... Mar 22 2026 03:56:40 host2 maldet(87855): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 22 2026 03:56:40 host2 maldet(87855): {update} latest version already installed. Mar 22 2026 03:56:40 host2 maldet(88159): {sigup} performing signature update check... Mar 22 2026 03:56:40 host2 maldet(88159): {sigup} local signature set is version 2026031678836 Mar 22 2026 03:56:40 host2 maldet(88159): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 22 2026 03:56:40 host2 maldet(88159): {sigup} latest signature set already installed Mar 22 2026 03:56:41 host2 maldet(88342): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 22 2026 03:56:41 host2 maldet(88342): {scan} signatures loaded: 41572 (39277 MD5 | 2290 HEX | 5 YARA | 0 USER) Mar 22 2026 03:56:41 host2 maldet(88342): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 22 2026 03:56:41 host2 maldet(88342): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 22 2026 03:56:41 host2 maldet(88342): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Mar 22 2026 03:56:49 host2 maldet(88342): {scan} file list completed in 8s, found 281 files... Mar 22 2026 03:56:49 host2 maldet(88342): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 22 2026 03:56:49 host2 maldet(88342): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (281 files) in progress... Mar 22 2026 03:56:56 host2 maldet(88342): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 281, malware hits 0, cleaned hits 0, time 15s Mar 22 2026 03:56:56 host2 maldet(88342): {scan} scan report saved, to view run: maldet --report 260322-0356.88342 Mar 23 2026 04:15:53 host2 maldet(71860): {update} checking for available updates... Mar 23 2026 04:15:53 host2 maldet(71860): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 23 2026 04:15:53 host2 maldet(71860): {update} hashing install files and checking against server... Mar 23 2026 04:15:53 host2 maldet(71860): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 23 2026 04:15:53 host2 maldet(71860): {update} latest version already installed. Mar 23 2026 04:15:53 host2 maldet(72069): {sigup} performing signature update check... Mar 23 2026 04:15:53 host2 maldet(72069): {sigup} local signature set is version 2026031678836 Mar 23 2026 04:15:54 host2 maldet(72069): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 23 2026 04:15:54 host2 maldet(72069): {sigup} latest signature set already installed Mar 23 2026 04:15:54 host2 maldet(72212): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 23 2026 04:15:54 host2 maldet(72212): {scan} signatures loaded: 41572 (39277 MD5 | 2290 HEX | 5 YARA | 0 USER) Mar 23 2026 04:15:54 host2 maldet(72212): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 23 2026 04:15:54 host2 maldet(72212): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 23 2026 04:15:54 host2 maldet(72212): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Mar 23 2026 04:16:02 host2 maldet(72212): {scan} file list completed in 8s, found 253 files... Mar 23 2026 04:16:02 host2 maldet(72212): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 23 2026 04:16:02 host2 maldet(72212): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (253 files) in progress... Mar 23 2026 04:16:07 host2 maldet(72212): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Mar 23 2026 04:16:07 host2 maldet(72212): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 253, malware hits 0, cleaned hits 0, time 13s Mar 23 2026 04:16:07 host2 maldet(72212): {scan} scan report saved, to view run: maldet --report 260323-0415.72212 Mar 24 2026 03:34:14 host2 maldet(33875): {update} checking for available updates... Mar 24 2026 03:34:14 host2 maldet(33875): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 24 2026 03:34:14 host2 maldet(33875): {update} hashing install files and checking against server... Mar 24 2026 03:34:14 host2 maldet(33875): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 24 2026 03:34:14 host2 maldet(33875): {update} latest version already installed. Mar 24 2026 03:34:15 host2 maldet(34067): {sigup} performing signature update check... Mar 24 2026 03:34:15 host2 maldet(34067): {sigup} local signature set is version 2026031678836 Mar 24 2026 03:34:15 host2 maldet(34067): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 24 2026 03:34:15 host2 maldet(34067): {sigup} latest signature set already installed Mar 24 2026 03:34:15 host2 maldet(34213): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 24 2026 03:34:15 host2 maldet(34213): {scan} signatures loaded: 41572 (39277 MD5 | 2290 HEX | 5 YARA | 0 USER) Mar 24 2026 03:34:15 host2 maldet(34213): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 24 2026 03:34:15 host2 maldet(34213): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 24 2026 03:34:15 host2 maldet(34213): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Mar 24 2026 03:34:23 host2 maldet(34213): {scan} file list completed in 8s, found 597 files... Mar 24 2026 03:34:23 host2 maldet(34213): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 24 2026 03:34:23 host2 maldet(34213): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (597 files) in progress... Mar 24 2026 03:34:29 host2 maldet(34213): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 597, malware hits 0, cleaned hits 0, time 14s Mar 24 2026 03:34:29 host2 maldet(34213): {scan} scan report saved, to view run: maldet --report 260324-0334.34213 Mar 25 2026 03:56:57 host2 maldet(91272): {update} checking for available updates... Mar 25 2026 03:56:57 host2 maldet(91272): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 25 2026 03:56:57 host2 maldet(91272): {update} hashing install files and checking against server... Mar 25 2026 03:56:57 host2 maldet(91272): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 25 2026 03:56:57 host2 maldet(91272): {update} latest version already installed. Mar 25 2026 03:56:57 host2 maldet(91393): {sigup} performing signature update check... Mar 25 2026 03:56:57 host2 maldet(91393): {sigup} local signature set is version 2026031678836 Mar 25 2026 03:56:58 host2 maldet(91393): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 25 2026 03:56:58 host2 maldet(91393): {sigup} new signature set 2026032483143 available Mar 25 2026 03:56:58 host2 maldet(91393): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 25 2026 03:56:58 host2 maldet(91393): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 25 2026 03:56:58 host2 maldet(91393): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 25 2026 03:56:58 host2 maldet(91393): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 25 2026 03:56:59 host2 maldet(91393): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 25 2026 03:56:59 host2 maldet(91393): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 25 2026 03:56:59 host2 maldet(91393): {sigup} verified md5sum of maldet-sigpack.tgz Mar 25 2026 03:56:59 host2 maldet(91393): {sigup} unpacked and installed maldet-sigpack.tgz Mar 25 2026 03:56:59 host2 maldet(91393): {sigup} verified md5sum of maldet-clean.tgz Mar 25 2026 03:56:59 host2 maldet(91393): {sigup} unpacked and installed maldet-clean.tgz Mar 25 2026 03:56:59 host2 maldet(91393): {sigup} signature set update completed Mar 25 2026 03:56:59 host2 maldet(91393): {sigup} 47430 signatures (41427 MD5 | 2297 HEX | 3706 YARA | 0 USER) Mar 25 2026 03:56:59 host2 maldet(91636): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 25 2026 03:57:00 host2 maldet(91636): {scan} signatures loaded: 47430 (41427 MD5 | 2297 HEX | 3706 YARA | 0 USER) Mar 25 2026 03:57:00 host2 maldet(91636): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 25 2026 03:57:00 host2 maldet(91636): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 25 2026 03:57:00 host2 maldet(91636): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Mar 25 2026 03:57:06 host2 maldet(91636): {scan} file list completed in 6s, found 157 files... Mar 25 2026 03:57:06 host2 maldet(91636): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 25 2026 03:57:06 host2 maldet(91636): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (157 files) in progress... Mar 25 2026 03:57:10 host2 maldet(91636): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Mar 25 2026 03:57:10 host2 maldet(91636): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 157, malware hits 0, cleaned hits 0, time 11s Mar 25 2026 03:57:10 host2 maldet(91636): {scan} scan report saved, to view run: maldet --report 260325-0356.91636 Mar 26 2026 03:48:29 host2 maldet(78672): {update} checking for available updates... Mar 26 2026 03:48:30 host2 maldet(78672): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 26 2026 03:48:30 host2 maldet(78672): {update} hashing install files and checking against server... Mar 26 2026 03:48:30 host2 maldet(78672): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 26 2026 03:48:30 host2 maldet(78672): {update} latest version already installed. Mar 26 2026 03:48:30 host2 maldet(78791): {sigup} performing signature update check... Mar 26 2026 03:48:30 host2 maldet(78791): {sigup} local signature set is version 2026032483143 Mar 26 2026 03:48:30 host2 maldet(78791): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 26 2026 03:48:30 host2 maldet(78791): {sigup} latest signature set already installed Mar 26 2026 03:48:30 host2 maldet(78887): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 26 2026 03:48:30 host2 maldet(78887): {scan} signatures loaded: 47430 (41427 MD5 | 2297 HEX | 3706 YARA | 0 USER) Mar 26 2026 03:48:30 host2 maldet(78887): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 26 2026 03:48:30 host2 maldet(78887): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 26 2026 03:48:30 host2 maldet(78887): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Mar 26 2026 03:48:37 host2 maldet(78887): {scan} file list completed in 7s, found 305 files... Mar 26 2026 03:48:37 host2 maldet(78887): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 26 2026 03:48:37 host2 maldet(78887): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (305 files) in progress... Mar 26 2026 03:48:55 host2 maldet(78887): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Mar 26 2026 03:48:55 host2 maldet(78887): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 305, malware hits 0, cleaned hits 0, time 25s Mar 26 2026 03:48:55 host2 maldet(78887): {scan} scan report saved, to view run: maldet --report 260326-0348.78887 Mar 27 2026 03:53:11 host2 maldet(19859): {update} checking for available updates... Mar 27 2026 03:53:11 host2 maldet(19859): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 27 2026 03:53:11 host2 maldet(19859): {update} hashing install files and checking against server... Mar 27 2026 03:53:11 host2 maldet(19859): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 27 2026 03:53:11 host2 maldet(19859): {update} latest version already installed. Mar 27 2026 03:53:11 host2 maldet(19970): {sigup} performing signature update check... Mar 27 2026 03:53:11 host2 maldet(19970): {sigup} local signature set is version 2026032483143 Mar 27 2026 03:53:12 host2 maldet(19970): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 27 2026 03:53:12 host2 maldet(19970): {sigup} latest signature set already installed Mar 27 2026 03:53:12 host2 maldet(20062): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 27 2026 03:53:12 host2 maldet(20062): {scan} signatures loaded: 47430 (41427 MD5 | 2297 HEX | 3706 YARA | 0 USER) Mar 27 2026 03:53:12 host2 maldet(20062): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 27 2026 03:53:12 host2 maldet(20062): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 27 2026 03:53:12 host2 maldet(20062): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Mar 27 2026 03:53:20 host2 maldet(20062): {scan} file list completed in 8s, found 772 files... Mar 27 2026 03:53:20 host2 maldet(20062): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 27 2026 03:53:20 host2 maldet(20062): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (772 files) in progress... Mar 27 2026 03:53:35 host2 maldet(20062): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 772, malware hits 0, cleaned hits 0, time 23s Mar 27 2026 03:53:35 host2 maldet(20062): {scan} scan report saved, to view run: maldet --report 260327-0353.20062 Mar 28 2026 04:07:42 host2 maldet(89603): {update} checking for available updates... Mar 28 2026 04:07:42 host2 maldet(89603): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 28 2026 04:07:42 host2 maldet(89603): {update} hashing install files and checking against server... Mar 28 2026 04:07:43 host2 maldet(89603): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 28 2026 04:07:43 host2 maldet(89603): {update} latest version already installed. Mar 28 2026 04:07:43 host2 maldet(89723): {sigup} performing signature update check... Mar 28 2026 04:07:43 host2 maldet(89723): {sigup} local signature set is version 2026032483143 Mar 28 2026 04:07:43 host2 maldet(89723): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 28 2026 04:07:43 host2 maldet(89723): {sigup} latest signature set already installed Mar 28 2026 04:07:43 host2 maldet(89814): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 28 2026 04:07:43 host2 maldet(89814): {scan} signatures loaded: 47430 (41427 MD5 | 2297 HEX | 3706 YARA | 0 USER) Mar 28 2026 04:07:43 host2 maldet(89814): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 28 2026 04:07:43 host2 maldet(89814): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 28 2026 04:07:43 host2 maldet(89814): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Mar 28 2026 04:07:51 host2 maldet(89814): {scan} file list completed in 8s, found 339 files... Mar 28 2026 04:07:51 host2 maldet(89814): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 28 2026 04:07:51 host2 maldet(89814): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (339 files) in progress... Mar 28 2026 04:08:02 host2 maldet(89814): {hit} malware hit {CAV}Win.Trojan.Hide-1 found for /home/relissuefindr/public_html/wp-content/inputs.php Mar 28 2026 04:08:02 host2 maldet(89814): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 339, malware hits 1, cleaned hits 0, time 19s Mar 28 2026 04:08:02 host2 maldet(89814): {scan} scan report saved, to view run: maldet --report 260328-0407.89814 Mar 28 2026 04:08:02 host2 maldet(89814): {scan} quarantine is disabled! set quarantine_hits=1 in conf.maldet or to quarantine results run: maldet -q 260328-0407.89814 Mar 29 2026 04:09:41 host2 maldet(33202): {update} checking for available updates... Mar 29 2026 04:09:41 host2 maldet(33202): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 29 2026 04:09:41 host2 maldet(33202): {update} hashing install files and checking against server... Mar 29 2026 04:09:41 host2 maldet(33202): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 29 2026 04:09:41 host2 maldet(33202): {update} latest version already installed. Mar 29 2026 04:09:41 host2 maldet(33313): {sigup} performing signature update check... Mar 29 2026 04:09:41 host2 maldet(33313): {sigup} local signature set is version 2026032483143 Mar 29 2026 04:09:42 host2 maldet(33313): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 29 2026 04:09:42 host2 maldet(33313): {sigup} latest signature set already installed Mar 29 2026 04:09:42 host2 maldet(33410): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 29 2026 04:09:42 host2 maldet(33410): {scan} signatures loaded: 47430 (41427 MD5 | 2297 HEX | 3706 YARA | 0 USER) Mar 29 2026 04:09:42 host2 maldet(33410): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 29 2026 04:09:42 host2 maldet(33410): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 29 2026 04:09:42 host2 maldet(33410): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Mar 29 2026 04:09:50 host2 maldet(33410): {scan} file list completed in 8s, found 370 files... Mar 29 2026 04:09:50 host2 maldet(33410): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 29 2026 04:09:50 host2 maldet(33410): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (370 files) in progress... Mar 29 2026 04:10:01 host2 maldet(33410): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 370, malware hits 0, cleaned hits 0, time 19s Mar 29 2026 04:10:01 host2 maldet(33410): {scan} scan report saved, to view run: maldet --report 260329-0409.33410 Mar 30 2026 03:45:12 host2 maldet(99354): {update} checking for available updates... Mar 30 2026 03:45:12 host2 maldet(99354): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 30 2026 03:45:12 host2 maldet(99354): {update} hashing install files and checking against server... Mar 30 2026 03:45:12 host2 maldet(99354): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 30 2026 03:45:12 host2 maldet(99354): {update} latest version already installed. Mar 30 2026 03:45:12 host2 maldet(99476): {sigup} performing signature update check... Mar 30 2026 03:45:12 host2 maldet(99476): {sigup} local signature set is version 2026032483143 Mar 30 2026 03:45:13 host2 maldet(99476): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 30 2026 03:45:13 host2 maldet(99476): {sigup} latest signature set already installed Mar 30 2026 03:45:13 host2 maldet(99568): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 30 2026 03:45:13 host2 maldet(99568): {scan} signatures loaded: 47430 (41427 MD5 | 2297 HEX | 3706 YARA | 0 USER) Mar 30 2026 03:45:13 host2 maldet(99568): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 30 2026 03:45:13 host2 maldet(99568): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 30 2026 03:45:13 host2 maldet(99568): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Mar 30 2026 03:45:20 host2 maldet(99568): {scan} file list completed in 7s, found 388 files... Mar 30 2026 03:45:20 host2 maldet(99568): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 30 2026 03:45:20 host2 maldet(99568): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (388 files) in progress... Mar 30 2026 03:45:31 host2 maldet(99568): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 388, malware hits 0, cleaned hits 0, time 18s Mar 30 2026 03:45:31 host2 maldet(99568): {scan} scan report saved, to view run: maldet --report 260330-0345.99568 Mar 31 2026 03:50:02 host2 maldet(14791): {update} checking for available updates... Mar 31 2026 03:50:02 host2 maldet(14791): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 31 2026 03:50:02 host2 maldet(14791): {update} hashing install files and checking against server... Mar 31 2026 03:50:02 host2 maldet(14791): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 31 2026 03:50:02 host2 maldet(14791): {update} latest version already installed. Mar 31 2026 03:50:02 host2 maldet(14905): {sigup} performing signature update check... Mar 31 2026 03:50:02 host2 maldet(14905): {sigup} local signature set is version 2026032483143 Mar 31 2026 03:50:03 host2 maldet(14905): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 31 2026 03:50:03 host2 maldet(14905): {sigup} latest signature set already installed Mar 31 2026 03:50:03 host2 maldet(15003): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 31 2026 03:50:03 host2 maldet(15003): {scan} signatures loaded: 47430 (41427 MD5 | 2297 HEX | 3706 YARA | 0 USER) Mar 31 2026 03:50:03 host2 maldet(15003): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 31 2026 03:50:03 host2 maldet(15003): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 31 2026 03:50:03 host2 maldet(15003): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Mar 31 2026 03:50:11 host2 maldet(15003): {scan} file list completed in 8s, found 509 files... Mar 31 2026 03:50:11 host2 maldet(15003): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 31 2026 03:50:11 host2 maldet(15003): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (509 files) in progress... Mar 31 2026 03:50:31 host2 maldet(15003): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Mar 31 2026 03:50:31 host2 maldet(15003): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 509, malware hits 0, cleaned hits 0, time 28s Mar 31 2026 03:50:31 host2 maldet(15003): {scan} scan report saved, to view run: maldet --report 260331-0350.15003