----------- SCAN REPORT -----------
TimeStamp: Fri, 3 Apr 2026 06:03:00 -0400
(/usr/sbin/cxs --background --clamdsock /var/clamd --dbreport --defapache nobody --doptions Mv --exploitscan --nofallback --filemax 50000 --noforce --html --ignore /etc/cxs/cxs.ignore.manual --options mMOLfSGchexdnwZDRru --noprobability --qoptions Mv --report /home/builxejc/scanreport-builxejc-Apr_03_2026_06h03m.txt --sizemax 1000000 --ssl --summary --sversionscan --timemax 30 --unofficial --user builxejc --virusscan --vmrssmax 2000000 --waitscan 0 --xtra /etc/cxs/cxs.xtra.manual)
Scanning /home/builxejc:
'/home/builxejc/.caldav/accounts@ngabuhotel.com/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.caldav/accounts@ngabuhotel.com/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.caldav/arthurkaramagi@bonnextrading.com/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.caldav/arthurkaramagi@bonnextrading.com/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.caldav/bar@ngabuhotel.com/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.caldav/bar@ngabuhotel.com/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.caldav/birungirobinah@ngabuhotel.com/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.caldav/birungirobinah@ngabuhotel.com/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.caldav/bonnymunihizi@bonnextrading.com/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.caldav/bonnymunihizi@bonnextrading.com/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.caldav/builxejc/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.caldav/builxejc/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.caldav/cafedelit@ngabuhotel.com/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.caldav/cafedelit@ngabuhotel.com/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.caldav/frontoffice@ngabuhotel.com/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.caldav/frontoffice@ngabuhotel.com/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.caldav/generalmanager@ngabuhotel.com/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.caldav/generalmanager@ngabuhotel.com/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.caldav/hildakobugabe@bonnextrading.com/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.caldav/hildakobugabe@bonnextrading.com/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.caldav/josephbwango@bonnextrading.com/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.caldav/josephbwango@bonnextrading.com/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.caldav/kangumemilly@ngabuhotel.com/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.caldav/kangumemilly@ngabuhotel.com/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.caldav/karungiharriet@ngabuhotel.com/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.caldav/karungiharriet@ngabuhotel.com/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.caldav/moristembo@bonnextrading.com/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.caldav/moristembo@bonnextrading.com/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.caldav/muligirwamariam@ngabuhotel.com/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.caldav/muligirwamariam@ngabuhotel.com/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.caldav/munihizibonny@ngabuhotel.com/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.caldav/munihizibonny@ngabuhotel.com/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.caldav/nuwagabamollen@ngabuhotel.com/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.caldav/nuwagabamollen@ngabuhotel.com/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.caldav/tumusiimehenry@ngabuhotel.com/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.caldav/tumusiimehenry@ngabuhotel.com/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.caldav/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.caldav/wp-back/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.caldav/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.caldav/wycliffalinaitwe@ngabuhotel.com/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.caldav/wycliffalinaitwe@ngabuhotel.com/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.cl.selector/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.cl.selector/wp-back/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.cl.selector/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.cpanel/caches/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.cpanel/caches/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.cpanel/datastore/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.cpanel/datastore/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.cpanel/ea-php-cli/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.cpanel/ea-php-cli/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.cpanel/icals/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.cpanel/icals/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.cpanel/nvdata/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.cpanel/nvdata/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.cpanel/vcards/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.cpanel/vcards/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.cpanel/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.cpanel/wp-back/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.cpanel/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.htpasswds/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.htpasswds/wp-back/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.htpasswds/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.koality/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.koality/wp-back/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.koality/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.nc_plugin/hidden'
# World writeable directory
'/home/builxejc/.softaculous/backups/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.softaculous/backups/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.softaculous/logs/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.softaculous/logs/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.softaculous/sess/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.softaculous/sess/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.softaculous/status/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.softaculous/status/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.softaculous/tmp/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.softaculous/tmp/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.softaculous/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.softaculous/wp-back/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.softaculous/wp_manager/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.softaculous/wp_manager/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.softaculous/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.spamassassin/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.spamassassin/wp-back/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.spamassassin/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.subaccounts/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.subaccounts/wp-back/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.subaccounts/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.well-known/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.well-known/wp-back/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/.well-known/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/bonnextrading.com/wp-content/plugins/cookie-notice/includes/settings.php'
# Universal decode regex match = [universal decoder]
'/home/builxejc/bonnextrading.com/wp-content/plugins/event-tickets/common/vendor/vendor-prefixed/trustedlogin/client/src/Admin.php'
# Universal decode regex match = [universal decoder]
'/home/builxejc/bonnextrading.com/wp-content/plugins/megamenu/classes/pages/page.php'
# Universal decode regex match = [universal decoder]
'/home/builxejc/bonnextrading.com/wp-content/plugins/the-events-calendar/common/vendor/vendor-prefixed/trustedlogin/client/src/Admin.php'
# Universal decode regex match = [universal decoder]
'/home/builxejc/bonnextrading.com/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'
# Universal decode regex match = [universal decoder]
'/home/builxejc/bonnextrading.com/wp-content/plugins/woocommerce/src/Internal/Admin/Settings/PaymentsController.php'
# Universal decode regex match = [universal decoder]
'/home/builxejc/bonnextrading.com/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'
# Suspicious file type [application/x-c]
'/home/builxejc/bonnextrading.com/wp-content/plugins/wp-retina-2x/common/admin.php'
# Universal decode regex match = [universal decoder]
'/home/builxejc/bonnextrading.comkjhy/wp-admin/css'
# World writeable directory
'/home/builxejc/bonnextrading.comkjhy/wp-admin/images'
# World writeable directory
'/home/builxejc/bonnextrading.comkjhy/wp-admin/includes'
# World writeable directory
'/home/builxejc/bonnextrading.comkjhy/wp-admin/js'
# World writeable directory
'/home/builxejc/bonnextrading.comkjhy/wp-admin/maint'
# World writeable directory
'/home/builxejc/bonnextrading.comkjhy/wp-admin/network'
# World writeable directory
'/home/builxejc/bonnextrading.comkjhy/wp-admin/user'
# World writeable directory
'/home/builxejc/bonnextrading.comkjhy/wp-admin/wpback'
# World writeable directory
'/home/builxejc/bonnextrading.comkjhy/wp-content/ai1wm-backups'
# World writeable directory
'/home/builxejc/bonnextrading.comkjhy/wp-content/litespeed'
# World writeable directory
'/home/builxejc/bonnextrading.comkjhy/wp-content/plugins'
# World writeable directory
'/home/builxejc/bonnextrading.comkjhy/wp-content/themes'
# World writeable directory
'/home/builxejc/bonnextrading.comkjhy/wp-content/upgrade'
# World writeable directory
'/home/builxejc/bonnextrading.comkjhy/wp-content/uploads/2026'
# World writeable directory
'/home/builxejc/bonnextrading.comkjhy/wp-content/uploads/2026/01'
# World writeable directory
'/home/builxejc/bonnextrading.comkjhy/wp-content/wpback'
# World writeable directory
'/home/builxejc/bonnextrading.comkjhy/wp-content/wpvivid_staging'
# World writeable directory
'/home/builxejc/bonnextrading.comkjhy/wp-content/wpvivid_uploads'
# World writeable directory
'/home/builxejc/bonnextrading.comkjhy/wp-content/wpvividbackups'
# World writeable directory
'/home/builxejc/bonnextrading.comkjhy/wp-includes/ID3'
# World writeable directory
'/home/builxejc/bonnextrading.comkjhy/wp-includes/IXR'
# World writeable directory
'/home/builxejc/bonnextrading.comkjhy/wp-includes/PHPMailer'
# World writeable directory
'/home/builxejc/bonnextrading.comkjhy/wp-includes/Requests'
# World writeable directory
'/home/builxejc/bonnextrading.comkjhy/wp-includes/SimplePie'
# World writeable directory
'/home/builxejc/bonnextrading.comkjhy/wp-includes/Text'
# World writeable directory
'/home/builxejc/bonnextrading.comkjhy/wp-includes/abilities-api'
# World writeable directory
'/home/builxejc/bonnextrading.comkjhy/wp-includes/assets'
# World writeable directory
'/home/builxejc/bonnextrading.comkjhy/wp-includes/block-bindings'
# World writeable directory
'/home/builxejc/bonnextrading.comkjhy/wp-includes/block-patterns'
# World writeable directory
'/home/builxejc/bonnextrading.comkjhy/wp-includes/block-supports'
# World writeable directory
'/home/builxejc/bonnextrading.comkjhy/wp-includes/blocks'
# World writeable directory
'/home/builxejc/bonnextrading.comkjhy/wp-includes/certificates'
# World writeable directory
'/home/builxejc/bonnextrading.comkjhy/wp-includes/css'
# World writeable directory
'/home/builxejc/bonnextrading.comkjhy/wp-includes/customize'
# World writeable directory
'/home/builxejc/bonnextrading.comkjhy/wp-includes/fonts'
# World writeable directory
'/home/builxejc/bonnextrading.comkjhy/wp-includes/html-api'
# World writeable directory
'/home/builxejc/bonnextrading.comkjhy/wp-includes/images'
# World writeable directory
'/home/builxejc/bonnextrading.comkjhy/wp-includes/interactivity-api'
# World writeable directory
'/home/builxejc/bonnextrading.comkjhy/wp-includes/js'
# World writeable directory
'/home/builxejc/bonnextrading.comkjhy/wp-includes/l10n'
# World writeable directory
'/home/builxejc/bonnextrading.comkjhy/wp-includes/php-compat'
# World writeable directory
'/home/builxejc/bonnextrading.comkjhy/wp-includes/pomo'
# World writeable directory
'/home/builxejc/bonnextrading.comkjhy/wp-includes/rest-api'
# World writeable directory
'/home/builxejc/bonnextrading.comkjhy/wp-includes/sitemaps'
# World writeable directory
'/home/builxejc/bonnextrading.comkjhy/wp-includes/sodium_compat'
# World writeable directory
'/home/builxejc/bonnextrading.comkjhy/wp-includes/style-engine'
# World writeable directory
'/home/builxejc/bonnextrading.comkjhy/wp-includes/theme-compat'
# World writeable directory
'/home/builxejc/bonnextrading.comkjhy/wp-includes/widgets'
# World writeable directory
'/home/builxejc/bonnextrading.comkjhy/wp-includes/wpback'
# World writeable directory
'/home/builxejc/etc/bonnextrading.com/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/etc/bonnextrading.com/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/etc/ngabuhotel.com/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/etc/ngabuhotel.com/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/etc/postfix/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/etc/postfix/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/etc/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/etc/wp-back/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/etc/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/logs/roundcube/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/logs/roundcube/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/logs/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/logs/wp-back/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/logs/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/lscache/0/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/lscache/0/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/lscache/1/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/lscache/1/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/lscache/2/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/lscache/2/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/lscache/3/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/lscache/3/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/lscache/4/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/lscache/4/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/lscache/5/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/lscache/5/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/lscache/6/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/lscache/6/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/lscache/7/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/lscache/7/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/lscache/8/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/lscache/8/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/lscache/9/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/lscache/9/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/lscache/a/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/lscache/a/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/lscache/b/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/lscache/b/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/lscache/c/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/lscache/c/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/lscache/d/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/lscache/d/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/lscache/e/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/lscache/e/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/lscache/f/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/lscache/f/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/lscache/priv/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/lscache/priv/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/lscache/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/lscache/wp-back/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/lscache/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/mail/.Drafts/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/mail/.Drafts/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/mail/.Junk/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/mail/.Junk/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/mail/.Sent/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/mail/.Sent/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/mail/.Trash/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/mail/.Trash/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/mail/bonnextrading.com/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/mail/cur/1775196662.M740016P1960115.server366.web-hosting.com:2,/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/mail/cur/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/mail/cur/wpback:2,/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/mail/extra-wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/mail/extra-wp-back/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/mail/ngabuhotel.com/accounts/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/mail/ngabuhotel.com/accounts/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/mail/ngabuhotel.com/bar/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/mail/ngabuhotel.com/bar/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/mail/ngabuhotel.com/birungirobinah/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/mail/ngabuhotel.com/birungirobinah/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/mail/ngabuhotel.com/cafedelit/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/mail/ngabuhotel.com/cafedelit/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/mail/ngabuhotel.com/frontoffice/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/mail/ngabuhotel.com/frontoffice/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/mail/ngabuhotel.com/generalmanager/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/mail/ngabuhotel.com/generalmanager/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/mail/ngabuhotel.com/kangumemilly/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/mail/ngabuhotel.com/kangumemilly/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/mail/ngabuhotel.com/karungiharriet/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/mail/ngabuhotel.com/karungiharriet/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/mail/ngabuhotel.com/muligirwamariam/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/mail/ngabuhotel.com/muligirwamariam/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/mail/ngabuhotel.com/munihizibonny/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/mail/ngabuhotel.com/munihizibonny/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/mail/ngabuhotel.com/nuwagabamollen/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/mail/ngabuhotel.com/nuwagabamollen/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/mail/ngabuhotel.com/tumusiimehenry/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/mail/ngabuhotel.com/tumusiimehenry/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/mail/ngabuhotel.com/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/mail/ngabuhotel.com/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/mail/ngabuhotel.com/wycliffalinaitwe/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/mail/ngabuhotel.com/wycliffalinaitwe/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/mail/tmp/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/mail/tmp/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/mail/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/mail/wp-back/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/mail/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/public_ftp/incoming/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/public_ftp/incoming/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/public_ftp/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/public_ftp/wp-back/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/public_ftp/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/public_html/theodore-random/theodore-random/theodore-random/theodore-random/kHaUwQPGjTNBzyf.tiff'
# Suspicious image file (hidden script file)
'/home/builxejc/softaculous_backups/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/softaculous_backups/wp-back/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/softaculous_backups/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/ssl/certs/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/ssl/certs/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/ssl/csrs/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/ssl/csrs/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/ssl/keys/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/ssl/keys/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/ssl/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/ssl/wp-back/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/ssl/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/tmp/analog/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/tmp/analog/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/tmp/awstats/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/tmp/awstats/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/tmp/locks/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/tmp/locks/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/tmp/pma_template_compiles_builxejc/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/tmp/pma_template_compiles_builxejc/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/tmp/webalizer/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/tmp/webalizer/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/tmp/webalizerftp/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/tmp/webalizerftp/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/tmp/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/tmp/wp-back/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/tmp/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/wp-back/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/wp-back/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
'/home/builxejc/wpback/index.php'
# (decoded file [depth: 0]) ClamAV detected virus = [YARA.PHP_backdoor_index_and_CURL.UNOFFICIAL]
----------- SCAN SUMMARY -----------
Scanned directories: 14727
Scanned files: 94089
Ignored items: 502
Suspicious matches: 281
Viruses found: 222
Fingerprint matches: 0
Data scanned: 5156.30 MB
Scan peak memory: 384132 kB
Scan time/item: 0.038 sec
Scan time: 4102.785 sec
