May 12 2025 22:24:36 vps122157 maldet(1389701): {sigup} performing signature update check... May 12 2025 22:24:36 vps122157 maldet(1389701): {sigup} local signature set is version 20250225482944 May 12 2025 22:24:36 vps122157 maldet(1389701): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 12 2025 22:24:36 vps122157 maldet(1389701): {sigup} new signature set 202505102039127 available May 12 2025 22:24:36 vps122157 maldet(1389701): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 12 2025 22:24:37 vps122157 maldet(1389701): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 12 2025 22:24:38 vps122157 maldet(1389701): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 12 2025 22:24:38 vps122157 maldet(1389701): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 12 2025 22:24:38 vps122157 maldet(1389701): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 12 2025 22:24:38 vps122157 maldet(1389701): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 12 2025 22:24:38 vps122157 maldet(1389701): {sigup} verified md5sum of maldet-sigpack.tgz May 12 2025 22:24:39 vps122157 maldet(1389701): {sigup} unpacked and installed maldet-sigpack.tgz May 12 2025 22:24:39 vps122157 maldet(1389701): {sigup} verified md5sum of maldet-clean.tgz May 12 2025 22:24:39 vps122157 maldet(1389701): {sigup} unpacked and installed maldet-clean.tgz May 12 2025 22:24:39 vps122157 maldet(1389701): {sigup} signature set update completed May 12 2025 22:24:39 vps122157 maldet(1389701): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 12 2025 22:24:39 vps122157 maldet(1389915): {sigup} performing signature update check... May 12 2025 22:24:39 vps122157 maldet(1389915): {sigup} local signature set is version 202505102039127 May 12 2025 22:24:40 vps122157 maldet(1389915): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 12 2025 22:24:40 vps122157 maldet(1389915): {sigup} latest signature set already installed May 12 2025 22:24:57 vps122157 maldet(1390066): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 12 2025 22:24:57 vps122157 maldet(1390066): {scan} building file list for /home/, this might take awhile... May 12 2025 22:24:57 vps122157 maldet(1390066): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 12 2025 22:24:57 vps122157 maldet(1390066): {scan} executed /usr/bin/nice -n 19 /usr/bin/find /home/ /tmp /var/tmp /dev/shm /var/fcgi_ipc -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 12 2025 22:25:50 vps122157 maldet(1390066): {scan} file list completed in 53s, found 356022 files... May 12 2025 22:25:50 vps122157 maldet(1390066): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... May 12 2025 22:25:50 vps122157 maldet(1390066): {scan} scan of /home/ (356022 files) in progress... May 13 2025 00:23:02 vps122157 maldet(1442677): {update} checking for available updates... May 13 2025 00:23:57 vps122157 maldet(1442677): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 13 2025 00:23:57 vps122157 maldet(1442677): {update} hashing install files and checking against server... May 13 2025 00:23:57 vps122157 maldet(1442677): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 13 2025 00:23:57 vps122157 maldet(1442677): {update} latest version already installed. May 13 2025 00:23:57 vps122157 maldet(1442894): {sigup} performing signature update check... May 13 2025 00:23:57 vps122157 maldet(1442894): {sigup} local signature set is version 202505102039127 May 13 2025 00:24:36 vps122157 maldet(1442894): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 13 2025 00:24:36 vps122157 maldet(1442894): {sigup} new signature set error code: 522 available May 13 2025 00:24:36 vps122157 maldet(1442894): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 13 2025 00:25:16 vps122157 maldet(1442894): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 13 2025 00:27:10 vps122157 maldet(1442894): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 13 2025 00:27:10 vps122157 maldet(1442894): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 13 2025 00:29:08 vps122157 maldet(1442894): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 13 2025 00:30:57 vps122157 maldet(1446954): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 13 2025 00:30:57 vps122157 maldet(1446954): {scan} building file list for /home/sspsof5, this might take awhile... May 13 2025 00:30:57 vps122157 maldet(1446954): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 13 2025 00:30:57 vps122157 maldet(1446954): {scan} executed /usr/bin/nice -n 19 /usr/bin/find /home/sspsof5 /tmp /var/tmp /dev/shm /var/fcgi_ipc -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 13 2025 00:31:07 vps122157 maldet(1442894): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 13 2025 00:31:07 vps122157 maldet(1442894): {sigup} unable to verify md5sum of maldet-sigpack.tgz, please try again or contact proj@rfxn.com May 13 2025 00:31:08 vps122157 maldet(1442894): {sigup} verified md5sum of maldet-clean.tgz May 13 2025 00:31:08 vps122157 maldet(1442894): {sigup} unpacked and installed maldet-clean.tgz May 13 2025 00:31:08 vps122157 maldet(1447155): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 13 2025 00:31:08 vps122157 maldet(1447155): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 13 2025 00:31:08 vps122157 maldet(1447155): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 13 2025 00:31:08 vps122157 maldet(1447155): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 13 2025 00:31:08 vps122157 maldet(1447155): {scan} executed /bin/nice -n 19 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm /var/fcgi_ipc -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 13 2025 00:31:08 vps122157 maldet(1447155): {scan} file list completed in 0s, found 6 files... May 13 2025 00:31:08 vps122157 maldet(1447155): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 13 2025 00:31:08 vps122157 maldet(1447155): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (6 files) in progress... May 13 2025 00:32:28 vps122157 maldet(1447155): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 6, malware hits 0, cleaned hits 0, time 79s May 13 2025 00:32:28 vps122157 maldet(1447155): {scan} scan report saved, to view run: maldet --report 250513-0031.1447155 May 13 2025 00:32:38 vps122157 maldet(1446954): {scan} file list completed in 101s, found 356010 files... May 13 2025 00:32:38 vps122157 maldet(1446954): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... May 13 2025 00:32:38 vps122157 maldet(1446954): {scan} scan of /home/sspsof5 (356010 files) in progress... May 13 2025 00:33:34 vps122157 maldet(1390066): {hit} malware hit {CAV}Unix.Trojan.Generic-9908886-0 found for /home/sspsof5/chauhantaxiservice.in/assets/images/mime May 13 2025 00:33:34 vps122157 maldet(1390066): {scan} scan completed on /home/: files 356022, malware hits 1, cleaned hits 0, time 7717s May 13 2025 00:33:34 vps122157 maldet(1390066): {scan} scan report saved, to view run: maldet --report 250512-2224.1390066 May 13 2025 00:33:34 vps122157 maldet(1390066): {scan} quarantine is disabled! set quarantine_hits=1 in conf.maldet or to quarantine results run: maldet -q 250512-2224.1390066 May 13 2025 03:38:25 vps122157 maldet(1446954): {hit} malware hit {CAV}Unix.Trojan.Generic-9908886-0 found for /home/sspsof5/chauhantaxiservice.in/assets/images/mime May 13 2025 03:38:26 vps122157 maldet(1446954): {scan} scan completed on /home/sspsof5: files 356010, malware hits 1, cleaned hits 0, time 11248s May 13 2025 03:38:26 vps122157 maldet(1446954): {scan} scan report saved, to view run: maldet --report 250513-0030.1446954 May 13 2025 03:38:26 vps122157 maldet(1446954): {scan} quarantine is disabled! set quarantine_hits=1 in conf.maldet or to quarantine results run: maldet -q 250513-0030.1446954 May 14 2025 00:18:02 vps122157 maldet(1696026): {update} checking for available updates... May 14 2025 00:18:06 vps122157 maldet(1696026): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 14 2025 00:18:06 vps122157 maldet(1696026): {update} hashing install files and checking against server... May 14 2025 00:18:10 vps122157 maldet(1696026): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 14 2025 00:18:10 vps122157 maldet(1696026): {update} latest version already installed. May 14 2025 00:18:11 vps122157 maldet(1696151): {sigup} performing signature update check... May 14 2025 00:18:11 vps122157 maldet(1696151): {sigup} local signature set is version 202505102039127 May 14 2025 00:18:15 vps122157 maldet(1696151): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 14 2025 00:18:15 vps122157 maldet(1696151): {sigup} new signature set 202505133012176 available May 14 2025 00:18:15 vps122157 maldet(1696151): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 14 2025 00:18:19 vps122157 maldet(1696151): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 14 2025 00:18:23 vps122157 maldet(1696151): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 14 2025 00:18:23 vps122157 maldet(1696151): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 14 2025 00:18:28 vps122157 maldet(1696151): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 14 2025 00:18:32 vps122157 maldet(1696151): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 14 2025 00:18:32 vps122157 maldet(1696151): {sigup} verified md5sum of maldet-sigpack.tgz May 14 2025 00:18:33 vps122157 maldet(1696151): {sigup} unpacked and installed maldet-sigpack.tgz May 14 2025 00:18:33 vps122157 maldet(1696151): {sigup} verified md5sum of maldet-clean.tgz May 14 2025 00:18:33 vps122157 maldet(1696151): {sigup} unpacked and installed maldet-clean.tgz May 14 2025 00:18:33 vps122157 maldet(1696151): {sigup} signature set update completed May 14 2025 00:18:33 vps122157 maldet(1696151): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 14 2025 00:18:33 vps122157 maldet(1696382): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 14 2025 00:18:33 vps122157 maldet(1696382): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 14 2025 00:18:33 vps122157 maldet(1696382): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 14 2025 00:18:33 vps122157 maldet(1696382): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 14 2025 00:18:33 vps122157 maldet(1696382): {scan} executed /bin/nice -n 19 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm /var/fcgi_ipc -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 14 2025 00:18:34 vps122157 maldet(1696382): {scan} file list completed in 0s, found 27 files... May 14 2025 00:18:34 vps122157 maldet(1696382): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 14 2025 00:18:34 vps122157 maldet(1696382): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (27 files) in progress... May 14 2025 00:19:38 vps122157 maldet(1696382): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 27, malware hits 0, cleaned hits 0, time 65s May 14 2025 00:19:38 vps122157 maldet(1696382): {scan} scan report saved, to view run: maldet --report 250514-0018.1696382 May 15 2025 00:18:31 vps122157 maldet(1908287): {update} checking for available updates... May 15 2025 00:18:35 vps122157 maldet(1908287): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 15 2025 00:18:35 vps122157 maldet(1908287): {update} hashing install files and checking against server... May 15 2025 00:18:39 vps122157 maldet(1908287): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 15 2025 00:18:39 vps122157 maldet(1908287): {update} latest version already installed. May 15 2025 00:18:39 vps122157 maldet(1908414): {sigup} performing signature update check... May 15 2025 00:18:39 vps122157 maldet(1908414): {sigup} local signature set is version 202505133012176 May 15 2025 00:18:46 vps122157 maldet(1908414): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 15 2025 00:18:46 vps122157 maldet(1908414): {sigup} latest signature set already installed May 15 2025 00:18:46 vps122157 maldet(1908533): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 15 2025 00:18:46 vps122157 maldet(1908533): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 15 2025 00:18:46 vps122157 maldet(1908533): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 15 2025 00:18:46 vps122157 maldet(1908533): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 15 2025 00:18:46 vps122157 maldet(1908533): {scan} executed /bin/nice -n 19 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm /var/fcgi_ipc -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 15 2025 00:18:46 vps122157 maldet(1908533): {scan} file list completed in 0s, found 4 files... May 15 2025 00:18:46 vps122157 maldet(1908533): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 15 2025 00:18:46 vps122157 maldet(1908533): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (4 files) in progress... May 15 2025 00:19:47 vps122157 maldet(1908533): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 4, malware hits 0, cleaned hits 0, time 61s May 15 2025 00:19:47 vps122157 maldet(1908533): {scan} scan report saved, to view run: maldet --report 250515-0018.1908533 May 16 2025 00:15:07 vps122157 maldet(2202445): {update} checking for available updates... May 16 2025 00:15:22 vps122157 maldet(2202445): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 16 2025 00:15:22 vps122157 maldet(2202445): {update} hashing install files and checking against server... May 16 2025 00:15:46 vps122157 maldet(2202445): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 16 2025 00:15:46 vps122157 maldet(2202445): {update} latest version already installed. May 16 2025 00:15:47 vps122157 maldet(2202607): {sigup} performing signature update check... May 16 2025 00:15:47 vps122157 maldet(2202607): {sigup} local signature set is version 202505133012176 May 16 2025 00:15:47 vps122157 maldet(2202607): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 16 2025 00:15:47 vps122157 maldet(2202607): {sigup} new signature set 202505163985107 available May 16 2025 00:15:47 vps122157 maldet(2202607): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 16 2025 00:16:15 vps122157 maldet(2202607): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 16 2025 00:16:38 vps122157 maldet(2202607): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 16 2025 00:16:38 vps122157 maldet(2202607): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 16 2025 00:17:03 vps122157 maldet(2202607): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 16 2025 00:17:04 vps122157 maldet(2202607): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 16 2025 00:17:04 vps122157 maldet(2202607): {sigup} verified md5sum of maldet-sigpack.tgz May 16 2025 00:17:04 vps122157 maldet(2202607): {sigup} unpacked and installed maldet-sigpack.tgz May 16 2025 00:17:04 vps122157 maldet(2202607): {sigup} verified md5sum of maldet-clean.tgz May 16 2025 00:17:04 vps122157 maldet(2202607): {sigup} unpacked and installed maldet-clean.tgz May 16 2025 00:17:04 vps122157 maldet(2202607): {sigup} signature set update completed May 16 2025 00:17:04 vps122157 maldet(2202607): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 16 2025 00:17:04 vps122157 maldet(2202890): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 16 2025 00:17:05 vps122157 maldet(2202890): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 16 2025 00:17:05 vps122157 maldet(2202890): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 16 2025 00:17:05 vps122157 maldet(2202890): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 16 2025 00:17:05 vps122157 maldet(2202890): {scan} executed /bin/nice -n 19 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm /var/fcgi_ipc -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 16 2025 00:17:05 vps122157 maldet(2202890): {scan} file list completed in 0s, found 5 files... May 16 2025 00:17:05 vps122157 maldet(2202890): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 16 2025 00:17:05 vps122157 maldet(2202890): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (5 files) in progress... May 16 2025 00:17:51 vps122157 maldet(2202890): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 5, malware hits 0, cleaned hits 0, time 47s May 16 2025 00:17:51 vps122157 maldet(2202890): {scan} scan report saved, to view run: maldet --report 250516-0017.2202890 May 17 2025 00:14:27 vps122157 maldet(2385285): {update} checking for available updates... May 17 2025 00:14:28 vps122157 maldet(2385285): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 17 2025 00:14:28 vps122157 maldet(2385285): {update} hashing install files and checking against server... May 17 2025 00:14:29 vps122157 maldet(2385285): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 17 2025 00:14:29 vps122157 maldet(2385285): {update} latest version already installed. May 17 2025 00:14:29 vps122157 maldet(2385404): {sigup} performing signature update check... May 17 2025 00:14:29 vps122157 maldet(2385404): {sigup} local signature set is version 202505163985107 May 17 2025 00:14:29 vps122157 maldet(2385404): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 17 2025 00:14:29 vps122157 maldet(2385404): {sigup} latest signature set already installed May 17 2025 00:14:30 vps122157 maldet(2385502): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 17 2025 00:14:30 vps122157 maldet(2385502): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 17 2025 00:14:30 vps122157 maldet(2385502): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 17 2025 00:14:30 vps122157 maldet(2385502): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 17 2025 00:14:30 vps122157 maldet(2385502): {scan} executed /bin/nice -n 19 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm /var/fcgi_ipc -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 17 2025 00:14:30 vps122157 maldet(2385502): {scan} file list completed in 0s, found 7 files... May 17 2025 00:14:30 vps122157 maldet(2385502): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 17 2025 00:14:30 vps122157 maldet(2385502): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (7 files) in progress... May 17 2025 00:15:28 vps122157 maldet(2385502): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 7, malware hits 0, cleaned hits 0, time 58s May 17 2025 00:15:28 vps122157 maldet(2385502): {scan} scan report saved, to view run: maldet --report 250517-0014.2385502 May 18 2025 00:40:55 vps122157 maldet(2557615): {update} checking for available updates... May 18 2025 00:41:18 vps122157 maldet(2557615): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 18 2025 00:41:18 vps122157 maldet(2557615): {update} hashing install files and checking against server... May 18 2025 00:41:50 vps122157 maldet(2557615): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 18 2025 00:41:50 vps122157 maldet(2557615): {update} latest version already installed. May 18 2025 00:41:50 vps122157 maldet(2557767): {sigup} performing signature update check... May 18 2025 00:41:50 vps122157 maldet(2557767): {sigup} local signature set is version 202505163985107 May 18 2025 00:42:14 vps122157 maldet(2557767): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 18 2025 00:42:14 vps122157 maldet(2557767): {sigup} latest signature set already installed May 18 2025 00:42:14 vps122157 maldet(2557885): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 18 2025 00:42:14 vps122157 maldet(2557885): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 18 2025 00:42:15 vps122157 maldet(2557885): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 18 2025 00:42:15 vps122157 maldet(2557885): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 18 2025 00:42:15 vps122157 maldet(2557885): {scan} executed /bin/nice -n 19 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm /var/fcgi_ipc -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 18 2025 00:42:15 vps122157 maldet(2557885): {scan} file list completed in 0s, found 5 files... May 18 2025 00:42:15 vps122157 maldet(2557885): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 18 2025 00:42:15 vps122157 maldet(2557885): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (5 files) in progress... May 18 2025 00:43:35 vps122157 maldet(2557885): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 5, malware hits 0, cleaned hits 0, time 81s May 18 2025 00:43:35 vps122157 maldet(2557885): {scan} scan report saved, to view run: maldet --report 250518-0042.2557885 May 19 2025 00:15:16 vps122157 maldet(2686126): {update} checking for available updates... May 19 2025 00:15:29 vps122157 maldet(2686126): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 19 2025 00:15:29 vps122157 maldet(2686126): {update} hashing install files and checking against server... May 19 2025 00:15:48 vps122157 maldet(2686126): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 19 2025 00:15:48 vps122157 maldet(2686126): {update} latest version already installed. May 19 2025 00:15:48 vps122157 maldet(2686268): {sigup} performing signature update check... May 19 2025 00:15:48 vps122157 maldet(2686268): {sigup} local signature set is version 202505163985107 May 19 2025 00:16:11 vps122157 maldet(2686268): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 19 2025 00:16:12 vps122157 maldet(2686268): {sigup} new signature set 20250519762470 available May 19 2025 00:16:12 vps122157 maldet(2686268): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 19 2025 00:16:12 vps122157 maldet(2686268): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 19 2025 00:16:47 vps122157 maldet(2686268): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 19 2025 00:16:47 vps122157 maldet(2686268): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 19 2025 00:17:16 vps122157 maldet(2686268): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 19 2025 00:20:16 vps122157 maldet(2686268): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 19 2025 00:20:16 vps122157 maldet(2686268): {sigup} verified md5sum of maldet-sigpack.tgz May 19 2025 00:20:16 vps122157 maldet(2686268): {sigup} unpacked and installed maldet-sigpack.tgz May 19 2025 00:20:16 vps122157 maldet(2686268): {sigup} unable to verify md5sum of maldet-clean.tgz, please try again or contact proj@rfxn.com May 19 2025 00:20:16 vps122157 maldet(2686268): {sigup} signature set update completed May 19 2025 00:20:16 vps122157 maldet(2686268): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 19 2025 00:20:17 vps122157 maldet(2687781): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 19 2025 00:20:17 vps122157 maldet(2687781): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 19 2025 00:20:17 vps122157 maldet(2687781): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 19 2025 00:20:17 vps122157 maldet(2687781): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 19 2025 00:20:17 vps122157 maldet(2687781): {scan} executed /bin/nice -n 19 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm /var/fcgi_ipc -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 19 2025 00:20:17 vps122157 maldet(2687781): {scan} file list completed in 0s, found 5 files... May 19 2025 00:20:17 vps122157 maldet(2687781): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 19 2025 00:20:17 vps122157 maldet(2687781): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (5 files) in progress... May 19 2025 00:21:04 vps122157 maldet(2687781): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 5, malware hits 0, cleaned hits 0, time 47s May 19 2025 00:21:04 vps122157 maldet(2687781): {scan} scan report saved, to view run: maldet --report 250519-0020.2687781 May 20 2025 00:29:39 vps122157 maldet(2885859): {update} checking for available updates... May 20 2025 00:30:16 vps122157 maldet(2885859): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 20 2025 00:30:16 vps122157 maldet(2885859): {update} hashing install files and checking against server... May 20 2025 00:30:39 vps122157 maldet(2885859): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 20 2025 00:30:39 vps122157 maldet(2885859): {update} latest version already installed. May 20 2025 00:30:39 vps122157 maldet(2886115): {sigup} performing signature update check... May 20 2025 00:30:39 vps122157 maldet(2886115): {sigup} local signature set is version 20250519762470 May 20 2025 00:31:25 vps122157 maldet(2886115): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 20 2025 00:31:25 vps122157 maldet(2886115): {sigup} new signature set error code: 525 available May 20 2025 00:31:25 vps122157 maldet(2886115): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 20 2025 00:31:49 vps122157 maldet(2886115): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 20 2025 00:32:23 vps122157 maldet(2886115): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 20 2025 00:32:23 vps122157 maldet(2886115): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 20 2025 00:33:05 vps122157 maldet(2886115): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 20 2025 00:33:06 vps122157 maldet(2886115): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 20 2025 00:33:06 vps122157 maldet(2886115): {sigup} verified md5sum of maldet-sigpack.tgz May 20 2025 00:33:06 vps122157 maldet(2886115): {sigup} unpacked and installed maldet-sigpack.tgz May 20 2025 00:33:06 vps122157 maldet(2886115): {sigup} verified md5sum of maldet-clean.tgz May 20 2025 00:33:06 vps122157 maldet(2886115): {sigup} unpacked and installed maldet-clean.tgz May 20 2025 00:33:06 vps122157 maldet(2886115): {sigup} signature set update completed May 20 2025 00:33:06 vps122157 maldet(2886115): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 20 2025 00:33:06 vps122157 maldet(2886486): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 20 2025 00:33:07 vps122157 maldet(2886486): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 20 2025 00:33:07 vps122157 maldet(2886486): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 20 2025 00:33:07 vps122157 maldet(2886486): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 20 2025 00:33:07 vps122157 maldet(2886486): {scan} executed /bin/nice -n 19 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm /var/fcgi_ipc -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 20 2025 00:33:07 vps122157 maldet(2886486): {scan} file list completed in 0s, found 8 files... May 20 2025 00:33:07 vps122157 maldet(2886486): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 20 2025 00:33:07 vps122157 maldet(2886486): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (8 files) in progress... May 20 2025 00:34:10 vps122157 maldet(2886486): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 8, malware hits 0, cleaned hits 0, time 64s May 20 2025 00:34:10 vps122157 maldet(2886486): {scan} scan report saved, to view run: maldet --report 250520-0033.2886486 May 21 2025 00:16:30 vps122157 maldet(3036151): {update} checking for available updates... May 21 2025 00:16:37 vps122157 maldet(3036151): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 21 2025 00:16:37 vps122157 maldet(3036151): {update} hashing install files and checking against server... May 21 2025 00:16:43 vps122157 maldet(3036151): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 21 2025 00:16:43 vps122157 maldet(3036151): {update} latest version already installed. May 21 2025 00:16:43 vps122157 maldet(3036289): {sigup} performing signature update check... May 21 2025 00:16:43 vps122157 maldet(3036289): {sigup} local signature set is version 20250519762470 May 21 2025 00:16:48 vps122157 maldet(3036289): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 21 2025 00:16:48 vps122157 maldet(3036289): {sigup} latest signature set already installed May 21 2025 00:16:48 vps122157 maldet(3036388): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 21 2025 00:16:49 vps122157 maldet(3036388): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 21 2025 00:16:49 vps122157 maldet(3036388): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 21 2025 00:16:49 vps122157 maldet(3036388): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 21 2025 00:16:49 vps122157 maldet(3036388): {scan} executed /bin/nice -n 19 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm /var/fcgi_ipc -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 21 2025 00:16:49 vps122157 maldet(3036388): {scan} file list completed in 0s, found 1 files... May 21 2025 00:16:49 vps122157 maldet(3036388): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 21 2025 00:16:49 vps122157 maldet(3036388): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1 files) in progress... May 21 2025 00:17:54 vps122157 maldet(3036388): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1, malware hits 0, cleaned hits 0, time 66s May 21 2025 00:17:54 vps122157 maldet(3036388): {scan} scan report saved, to view run: maldet --report 250521-0016.3036388 May 22 2025 00:14:14 vps122157 maldet(3188065): {update} checking for available updates... May 22 2025 00:14:23 vps122157 maldet(3188065): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 22 2025 00:14:23 vps122157 maldet(3188065): {update} hashing install files and checking against server... May 22 2025 00:14:34 vps122157 maldet(3188065): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 22 2025 00:14:34 vps122157 maldet(3188065): {update} latest version already installed. May 22 2025 00:14:34 vps122157 maldet(3188209): {sigup} performing signature update check... May 22 2025 00:14:34 vps122157 maldet(3188209): {sigup} local signature set is version 20250519762470 May 22 2025 00:14:45 vps122157 maldet(3188209): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 22 2025 00:14:45 vps122157 maldet(3188209): {sigup} new signature set 202505221736773 available May 22 2025 00:14:45 vps122157 maldet(3188209): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 22 2025 00:14:56 vps122157 maldet(3188209): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 22 2025 00:15:10 vps122157 maldet(3188209): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 22 2025 00:15:10 vps122157 maldet(3188209): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 22 2025 00:15:27 vps122157 maldet(3188209): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 22 2025 00:15:50 vps122157 maldet(3188209): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 22 2025 00:15:50 vps122157 maldet(3188209): {sigup} verified md5sum of maldet-sigpack.tgz May 22 2025 00:15:51 vps122157 maldet(3188209): {sigup} unpacked and installed maldet-sigpack.tgz May 22 2025 00:15:51 vps122157 maldet(3188209): {sigup} verified md5sum of maldet-clean.tgz May 22 2025 00:15:51 vps122157 maldet(3188209): {sigup} unpacked and installed maldet-clean.tgz May 22 2025 00:15:51 vps122157 maldet(3188209): {sigup} signature set update completed May 22 2025 00:15:51 vps122157 maldet(3188209): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 22 2025 00:15:51 vps122157 maldet(3188542): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 22 2025 00:15:52 vps122157 maldet(3188542): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 22 2025 00:15:52 vps122157 maldet(3188542): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 22 2025 00:15:52 vps122157 maldet(3188542): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 22 2025 00:15:52 vps122157 maldet(3188542): {scan} executed /bin/nice -n 19 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm /var/fcgi_ipc -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 22 2025 00:15:52 vps122157 maldet(3188542): {scan} file list completed in 0s, found 3 files... May 22 2025 00:15:52 vps122157 maldet(3188542): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 22 2025 00:15:52 vps122157 maldet(3188542): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (3 files) in progress... May 22 2025 00:16:44 vps122157 maldet(3188542): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 3, malware hits 0, cleaned hits 0, time 53s May 22 2025 00:16:44 vps122157 maldet(3188542): {scan} scan report saved, to view run: maldet --report 250522-0015.3188542 May 23 2025 00:16:10 vps122157 maldet(3329230): {update} checking for available updates... May 23 2025 00:16:14 vps122157 maldet(3329230): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 23 2025 00:16:14 vps122157 maldet(3329230): {update} hashing install files and checking against server... May 23 2025 00:16:19 vps122157 maldet(3329230): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 23 2025 00:16:19 vps122157 maldet(3329230): {update} latest version already installed. May 23 2025 00:16:19 vps122157 maldet(3329351): {sigup} performing signature update check... May 23 2025 00:16:19 vps122157 maldet(3329351): {sigup} local signature set is version 202505221736773 May 23 2025 00:16:23 vps122157 maldet(3329351): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 23 2025 00:16:23 vps122157 maldet(3329351): {sigup} latest signature set already installed May 23 2025 00:16:23 vps122157 maldet(3329455): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 23 2025 00:16:23 vps122157 maldet(3329455): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 23 2025 00:16:23 vps122157 maldet(3329455): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 23 2025 00:16:23 vps122157 maldet(3329455): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 23 2025 00:16:23 vps122157 maldet(3329455): {scan} executed /bin/nice -n 19 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm /var/fcgi_ipc -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 23 2025 00:16:23 vps122157 maldet(3329455): {scan} file list completed in 0s, found 2 files... May 23 2025 00:16:23 vps122157 maldet(3329455): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 23 2025 00:16:23 vps122157 maldet(3329455): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2 files) in progress... May 23 2025 00:16:59 vps122157 maldet(3329455): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2, malware hits 0, cleaned hits 0, time 36s May 23 2025 00:16:59 vps122157 maldet(3329455): {scan} scan report saved, to view run: maldet --report 250523-0016.3329455 May 24 2025 00:15:22 vps122157 maldet(3486016): {update} checking for available updates... May 24 2025 00:15:26 vps122157 maldet(3486016): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 24 2025 00:15:26 vps122157 maldet(3486016): {update} hashing install files and checking against server... May 24 2025 00:15:30 vps122157 maldet(3486016): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 24 2025 00:15:31 vps122157 maldet(3486016): {update} latest version already installed. May 24 2025 00:15:31 vps122157 maldet(3486137): {sigup} performing signature update check... May 24 2025 00:15:31 vps122157 maldet(3486137): {sigup} local signature set is version 202505221736773 May 24 2025 00:15:33 vps122157 maldet(3486137): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 24 2025 00:15:33 vps122157 maldet(3486137): {sigup} latest signature set already installed May 24 2025 00:15:33 vps122157 maldet(3486235): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 24 2025 00:15:33 vps122157 maldet(3486235): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 24 2025 00:15:33 vps122157 maldet(3486235): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 24 2025 00:15:33 vps122157 maldet(3486235): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 24 2025 00:15:33 vps122157 maldet(3486235): {scan} executed /bin/nice -n 19 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm /var/fcgi_ipc -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 24 2025 00:15:33 vps122157 maldet(3486235): {scan} file list completed in 0s, found 6 files... May 24 2025 00:15:33 vps122157 maldet(3486235): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 24 2025 00:15:33 vps122157 maldet(3486235): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (6 files) in progress... May 24 2025 00:16:10 vps122157 maldet(3486235): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 6, malware hits 0, cleaned hits 0, time 37s May 24 2025 00:16:10 vps122157 maldet(3486235): {scan} scan report saved, to view run: maldet --report 250524-0015.3486235 May 25 2025 00:40:04 vps122157 maldet(3665604): {update} checking for available updates... May 25 2025 00:40:43 vps122157 maldet(3665604): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 25 2025 00:40:44 vps122157 maldet(3665604): {update} hashing install files and checking against server... May 25 2025 00:41:30 vps122157 maldet(3665604): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 25 2025 00:41:30 vps122157 maldet(3665604): {update} version check shows latest but hash check failed, forcing update... May 25 2025 00:41:30 vps122157 maldet(3665604): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz May 25 2025 00:42:15 vps122157 maldet(3665604): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz.md5 May 25 2025 00:42:15 vps122157 maldet(3665604): {update} unable to verify md5sum of maldetect-current.tar.gz, update failed! May 25 2025 00:42:16 vps122157 maldet(3665869): {sigup} performing signature update check... May 25 2025 00:42:16 vps122157 maldet(3665869): {sigup} local signature set is version 202505221736773 May 25 2025 00:43:01 vps122157 maldet(3665869): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 25 2025 00:43:01 vps122157 maldet(3665869): {sigup} new signature set error code: 525 available May 25 2025 00:43:01 vps122157 maldet(3665869): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 25 2025 00:44:06 vps122157 maldet(3665869): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 25 2025 00:44:06 vps122157 maldet(3665869): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 25 2025 00:44:06 vps122157 maldet(3665869): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 25 2025 00:45:16 vps122157 maldet(3665869): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 25 2025 00:46:16 vps122157 maldet(3665869): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 25 2025 00:46:16 vps122157 maldet(3665869): {sigup} unable to verify md5sum of maldet-sigpack.tgz, please try again or contact proj@rfxn.com May 25 2025 00:46:16 vps122157 maldet(3665869): {sigup} unable to verify md5sum of maldet-clean.tgz, please try again or contact proj@rfxn.com May 25 2025 00:46:16 vps122157 maldet(3666296): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 25 2025 00:46:16 vps122157 maldet(3666296): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 25 2025 00:46:16 vps122157 maldet(3666296): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 25 2025 00:46:16 vps122157 maldet(3666296): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 25 2025 00:46:16 vps122157 maldet(3666296): {scan} executed /bin/nice -n 19 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm /var/fcgi_ipc -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 25 2025 00:46:16 vps122157 maldet(3666296): {scan} file list completed in 0s, found 2 files... May 25 2025 00:46:16 vps122157 maldet(3666296): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 25 2025 00:46:16 vps122157 maldet(3666296): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2 files) in progress... May 25 2025 00:46:53 vps122157 maldet(3666296): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2, malware hits 0, cleaned hits 0, time 37s May 25 2025 00:46:53 vps122157 maldet(3666296): {scan} scan report saved, to view run: maldet --report 250525-0046.3666296 May 26 2025 00:18:59 vps122157 maldet(3810372): {update} checking for available updates... May 26 2025 00:19:19 vps122157 maldet(3810372): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 26 2025 00:19:19 vps122157 maldet(3810372): {update} hashing install files and checking against server... May 26 2025 00:19:40 vps122157 maldet(3810372): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 26 2025 00:19:40 vps122157 maldet(3810372): {update} latest version already installed. May 26 2025 00:19:40 vps122157 maldet(3810540): {sigup} performing signature update check... May 26 2025 00:19:40 vps122157 maldet(3810540): {sigup} local signature set is version 202505221736773 May 26 2025 00:20:02 vps122157 maldet(3810540): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 26 2025 00:20:02 vps122157 maldet(3810540): {sigup} new signature set 202505252708832 available May 26 2025 00:20:02 vps122157 maldet(3810540): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 26 2025 00:20:30 vps122157 maldet(3810540): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 26 2025 00:20:51 vps122157 maldet(3810540): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 26 2025 00:20:51 vps122157 maldet(3810540): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 26 2025 00:21:14 vps122157 maldet(3810540): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 26 2025 00:21:56 vps122157 maldet(3810540): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 26 2025 00:21:56 vps122157 maldet(3810540): {sigup} verified md5sum of maldet-sigpack.tgz May 26 2025 00:21:57 vps122157 maldet(3810540): {sigup} unpacked and installed maldet-sigpack.tgz May 26 2025 00:21:57 vps122157 maldet(3810540): {sigup} verified md5sum of maldet-clean.tgz May 26 2025 00:21:57 vps122157 maldet(3810540): {sigup} unpacked and installed maldet-clean.tgz May 26 2025 00:21:57 vps122157 maldet(3810540): {sigup} signature set update completed May 26 2025 00:21:57 vps122157 maldet(3810540): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 26 2025 00:21:57 vps122157 maldet(3810963): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 26 2025 00:21:58 vps122157 maldet(3810963): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 26 2025 00:21:58 vps122157 maldet(3810963): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 26 2025 00:21:58 vps122157 maldet(3810963): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 26 2025 00:21:58 vps122157 maldet(3810963): {scan} executed /bin/nice -n 19 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm /var/fcgi_ipc -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 26 2025 00:21:59 vps122157 maldet(3810963): {scan} file list completed in 1s, found 2 files... May 26 2025 00:21:59 vps122157 maldet(3810963): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 26 2025 00:21:59 vps122157 maldet(3810963): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2 files) in progress... May 26 2025 00:23:27 vps122157 maldet(3810963): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2, malware hits 0, cleaned hits 0, time 90s May 26 2025 00:23:27 vps122157 maldet(3810963): {scan} scan report saved, to view run: maldet --report 250526-0021.3810963 May 27 2025 00:14:04 vps122157 maldet(4001279): {update} checking for available updates... May 27 2025 00:14:04 vps122157 maldet(4001279): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 27 2025 00:14:04 vps122157 maldet(4001279): {update} hashing install files and checking against server... May 27 2025 00:14:04 vps122157 maldet(4001279): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 27 2025 00:14:04 vps122157 maldet(4001279): {update} latest version already installed. May 27 2025 00:14:04 vps122157 maldet(4001398): {sigup} performing signature update check... May 27 2025 00:14:04 vps122157 maldet(4001398): {sigup} local signature set is version 202505252708832 May 27 2025 00:14:05 vps122157 maldet(4001398): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 27 2025 00:14:05 vps122157 maldet(4001398): {sigup} latest signature set already installed May 27 2025 00:14:05 vps122157 maldet(4001502): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 27 2025 00:14:05 vps122157 maldet(4001502): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 27 2025 00:14:05 vps122157 maldet(4001502): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 27 2025 00:14:05 vps122157 maldet(4001502): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 27 2025 00:14:05 vps122157 maldet(4001502): {scan} executed /bin/nice -n 19 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm /var/fcgi_ipc -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 27 2025 00:14:05 vps122157 maldet(4001502): {scan} file list completed in 0s, found 37 files... May 27 2025 00:14:05 vps122157 maldet(4001502): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 27 2025 00:14:05 vps122157 maldet(4001502): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (37 files) in progress... May 27 2025 00:14:51 vps122157 maldet(4001502): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 37, malware hits 0, cleaned hits 0, time 46s May 27 2025 00:14:51 vps122157 maldet(4001502): {scan} scan report saved, to view run: maldet --report 250527-0014.4001502 May 27 2025 09:16:49 vps122157 maldet(445): {mon} could not find inotifywait command, install yum package inotify-tools or download from https://github.com/rvoicilas/inotify-tools/wiki/ May 28 2025 00:15:24 vps122157 maldet(98732): {update} checking for available updates... May 28 2025 00:15:51 vps122157 maldet(98732): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 28 2025 00:15:51 vps122157 maldet(98732): {update} hashing install files and checking against server... May 28 2025 00:16:48 vps122157 maldet(98732): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 28 2025 00:16:48 vps122157 maldet(98732): {update} latest version already installed. May 28 2025 00:16:48 vps122157 maldet(98901): {sigup} performing signature update check... May 28 2025 00:16:48 vps122157 maldet(98901): {sigup} local signature set is version 202505252708832 May 28 2025 00:17:57 vps122157 maldet(98901): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 28 2025 00:17:57 vps122157 maldet(98901): {sigup} new signature set error code: 525 available May 28 2025 00:17:57 vps122157 maldet(98901): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 28 2025 00:18:37 vps122157 maldet(98901): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 28 2025 00:19:06 vps122157 maldet(98901): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 28 2025 00:19:06 vps122157 maldet(98901): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 28 2025 00:19:56 vps122157 maldet(98901): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 28 2025 00:20:50 vps122157 maldet(98901): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 28 2025 00:20:50 vps122157 maldet(98901): {sigup} unable to verify md5sum of maldet-sigpack.tgz, please try again or contact proj@rfxn.com May 28 2025 00:20:50 vps122157 maldet(98901): {sigup} unable to verify md5sum of maldet-clean.tgz, please try again or contact proj@rfxn.com May 28 2025 00:20:50 vps122157 maldet(101633): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 28 2025 00:20:50 vps122157 maldet(101633): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 28 2025 00:20:50 vps122157 maldet(101633): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 28 2025 00:20:50 vps122157 maldet(101633): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 28 2025 00:20:50 vps122157 maldet(101633): {scan} executed /bin/nice -n 19 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm /var/fcgi_ipc -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 28 2025 00:20:50 vps122157 maldet(101633): {scan} file list completed in 0s, found 10 files... May 28 2025 00:20:50 vps122157 maldet(101633): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 28 2025 00:20:50 vps122157 maldet(101633): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (10 files) in progress... May 28 2025 00:21:17 vps122157 maldet(101633): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 10, malware hits 0, cleaned hits 0, time 26s May 28 2025 00:21:17 vps122157 maldet(101633): {scan} scan report saved, to view run: maldet --report 250528-0020.101633 May 29 2025 00:15:57 vps122157 maldet(291637): {update} checking for available updates... May 29 2025 00:15:57 vps122157 maldet(291637): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 29 2025 00:15:57 vps122157 maldet(291637): {update} hashing install files and checking against server... May 29 2025 00:16:03 vps122157 maldet(291637): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 29 2025 00:16:03 vps122157 maldet(291637): {update} latest version already installed. May 29 2025 00:16:03 vps122157 maldet(291766): {sigup} performing signature update check... May 29 2025 00:16:03 vps122157 maldet(291766): {sigup} local signature set is version 202505252708832 May 29 2025 00:16:09 vps122157 maldet(291766): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 29 2025 00:16:09 vps122157 maldet(291766): {sigup} new signature set 202505283679777 available May 29 2025 00:16:09 vps122157 maldet(291766): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 29 2025 00:16:16 vps122157 maldet(291766): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 29 2025 00:16:24 vps122157 maldet(291766): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 29 2025 00:16:24 vps122157 maldet(291766): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 29 2025 00:16:24 vps122157 maldet(291766): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 29 2025 00:16:33 vps122157 maldet(291766): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 29 2025 00:16:33 vps122157 maldet(291766): {sigup} verified md5sum of maldet-sigpack.tgz May 29 2025 00:16:33 vps122157 maldet(291766): {sigup} unpacked and installed maldet-sigpack.tgz May 29 2025 00:16:33 vps122157 maldet(291766): {sigup} verified md5sum of maldet-clean.tgz May 29 2025 00:16:33 vps122157 maldet(291766): {sigup} unpacked and installed maldet-clean.tgz May 29 2025 00:16:33 vps122157 maldet(291766): {sigup} signature set update completed May 29 2025 00:16:33 vps122157 maldet(291766): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 29 2025 00:16:35 vps122157 maldet(291991): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 29 2025 00:16:35 vps122157 maldet(291991): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 29 2025 00:16:35 vps122157 maldet(291991): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 29 2025 00:16:35 vps122157 maldet(291991): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 29 2025 00:16:35 vps122157 maldet(291991): {scan} executed /bin/nice -n 19 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm /var/fcgi_ipc -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 29 2025 00:16:35 vps122157 maldet(291991): {scan} file list completed in 0s, found 12 files... May 29 2025 00:16:35 vps122157 maldet(291991): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 29 2025 00:16:35 vps122157 maldet(291991): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (12 files) in progress... May 29 2025 00:17:02 vps122157 maldet(291991): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 12, malware hits 0, cleaned hits 0, time 27s May 29 2025 00:17:02 vps122157 maldet(291991): {scan} scan report saved, to view run: maldet --report 250529-0016.291991 May 30 2025 00:17:43 vps122157 maldet(507100): {update} checking for available updates... May 30 2025 00:17:47 vps122157 maldet(507100): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 30 2025 00:17:47 vps122157 maldet(507100): {update} hashing install files and checking against server... May 30 2025 00:17:51 vps122157 maldet(507100): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 30 2025 00:17:51 vps122157 maldet(507100): {update} latest version already installed. May 30 2025 00:17:51 vps122157 maldet(507814): {sigup} performing signature update check... May 30 2025 00:17:51 vps122157 maldet(507814): {sigup} local signature set is version 202505283679777 May 30 2025 00:17:55 vps122157 maldet(507814): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 30 2025 00:17:55 vps122157 maldet(507814): {sigup} latest signature set already installed May 30 2025 00:17:56 vps122157 maldet(507962): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 30 2025 00:17:56 vps122157 maldet(507962): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 30 2025 00:17:56 vps122157 maldet(507962): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 30 2025 00:17:56 vps122157 maldet(507962): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 30 2025 00:17:56 vps122157 maldet(507962): {scan} executed /bin/nice -n 19 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm /var/fcgi_ipc -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 30 2025 00:17:56 vps122157 maldet(507962): {scan} file list completed in 0s, found 6 files... May 30 2025 00:17:56 vps122157 maldet(507962): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 30 2025 00:17:56 vps122157 maldet(507962): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (6 files) in progress... May 30 2025 00:18:22 vps122157 maldet(507962): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 6, malware hits 0, cleaned hits 0, time 26s May 30 2025 00:18:22 vps122157 maldet(507962): {scan} scan report saved, to view run: maldet --report 250530-0017.507962 May 31 2025 00:19:56 vps122157 maldet(676872): {update} checking for available updates... May 31 2025 00:20:41 vps122157 maldet(676872): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 31 2025 00:20:41 vps122157 maldet(676872): {update} hashing install files and checking against server... May 31 2025 00:21:31 vps122157 maldet(676872): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 31 2025 00:21:31 vps122157 maldet(676872): {update} version check shows latest but hash check failed, forcing update... May 31 2025 00:21:31 vps122157 maldet(676872): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz May 31 2025 00:22:21 vps122157 maldet(676872): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz.md5 May 31 2025 00:22:21 vps122157 maldet(676872): {update} unable to verify md5sum of maldetect-current.tar.gz, update failed! May 31 2025 00:22:21 vps122157 maldet(677272): {sigup} performing signature update check... May 31 2025 00:22:21 vps122157 maldet(677272): {sigup} local signature set is version 202505283679777 May 31 2025 00:23:07 vps122157 maldet(677272): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 31 2025 00:23:07 vps122157 maldet(677272): {sigup} new signature set 20250531456902 available May 31 2025 00:23:07 vps122157 maldet(677272): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 31 2025 00:23:46 vps122157 maldet(677272): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 31 2025 00:24:32 vps122157 maldet(677272): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 31 2025 00:24:32 vps122157 maldet(677272): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 31 2025 00:25:12 vps122157 maldet(677272): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 31 2025 00:25:58 vps122157 maldet(677272): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 31 2025 00:25:58 vps122157 maldet(677272): {sigup} unable to verify md5sum of maldet-sigpack.tgz, please try again or contact proj@rfxn.com May 31 2025 00:25:58 vps122157 maldet(677272): {sigup} unable to verify md5sum of maldet-clean.tgz, please try again or contact proj@rfxn.com May 31 2025 00:25:58 vps122157 maldet(677767): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 31 2025 00:25:59 vps122157 maldet(677767): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 31 2025 00:25:59 vps122157 maldet(677767): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 31 2025 00:25:59 vps122157 maldet(677767): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 31 2025 00:25:59 vps122157 maldet(677767): {scan} executed /bin/nice -n 19 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm /var/fcgi_ipc -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 31 2025 00:25:59 vps122157 maldet(677767): {scan} file list completed in 0s, found 3 files... May 31 2025 00:25:59 vps122157 maldet(677767): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 31 2025 00:25:59 vps122157 maldet(677767): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (3 files) in progress... May 31 2025 00:26:27 vps122157 maldet(677767): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 3, malware hits 0, cleaned hits 0, time 29s May 31 2025 00:26:27 vps122157 maldet(677767): {scan} scan report saved, to view run: maldet --report 250531-0025.677767 Jun 01 2025 00:14:49 vps122157 maldet(866309): {update} checking for available updates... Jun 01 2025 00:14:59 vps122157 maldet(866309): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 01 2025 00:14:59 vps122157 maldet(866309): {update} hashing install files and checking against server... Jun 01 2025 00:15:11 vps122157 maldet(866309): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 01 2025 00:15:11 vps122157 maldet(866309): {update} latest version already installed. Jun 01 2025 00:15:11 vps122157 maldet(866502): {sigup} performing signature update check... Jun 01 2025 00:15:11 vps122157 maldet(866502): {sigup} local signature set is version 202505283679777 Jun 01 2025 00:15:26 vps122157 maldet(866502): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 01 2025 00:15:26 vps122157 maldet(866502): {sigup} new signature set 202506011196154 available Jun 01 2025 00:15:26 vps122157 maldet(866502): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 01 2025 00:15:50 vps122157 maldet(866502): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 01 2025 00:16:14 vps122157 maldet(866502): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 01 2025 00:16:14 vps122157 maldet(866502): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 01 2025 00:16:49 vps122157 maldet(866502): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 01 2025 00:17:39 vps122157 maldet(866502): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 01 2025 00:17:39 vps122157 maldet(866502): {sigup} verified md5sum of maldet-sigpack.tgz Jun 01 2025 00:17:39 vps122157 maldet(866502): {sigup} unpacked and installed maldet-sigpack.tgz Jun 01 2025 00:17:39 vps122157 maldet(866502): {sigup} verified md5sum of maldet-clean.tgz Jun 01 2025 00:17:39 vps122157 maldet(866502): {sigup} unpacked and installed maldet-clean.tgz Jun 01 2025 00:17:39 vps122157 maldet(866502): {sigup} signature set update completed Jun 01 2025 00:17:39 vps122157 maldet(866502): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 01 2025 00:17:39 vps122157 maldet(866850): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 01 2025 00:17:39 vps122157 maldet(866850): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 01 2025 00:17:39 vps122157 maldet(866850): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 01 2025 00:17:39 vps122157 maldet(866850): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 01 2025 00:17:39 vps122157 maldet(866850): {scan} executed /bin/nice -n 19 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm /var/fcgi_ipc -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 01 2025 00:17:39 vps122157 maldet(866850): {scan} file list completed in 0s, found 2 files... Jun 01 2025 00:17:39 vps122157 maldet(866850): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 01 2025 00:17:39 vps122157 maldet(866850): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2 files) in progress... Jun 01 2025 00:18:08 vps122157 maldet(866850): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2, malware hits 0, cleaned hits 0, time 29s Jun 01 2025 00:18:08 vps122157 maldet(866850): {scan} scan report saved, to view run: maldet --report 250601-0017.866850 Jun 02 2025 00:14:52 vps122157 maldet(1004924): {update} checking for available updates... Jun 02 2025 00:14:52 vps122157 maldet(1004924): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 02 2025 00:14:52 vps122157 maldet(1004924): {update} hashing install files and checking against server... Jun 02 2025 00:14:52 vps122157 maldet(1004924): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 02 2025 00:14:52 vps122157 maldet(1004924): {update} latest version already installed. Jun 02 2025 00:14:52 vps122157 maldet(1005043): {sigup} performing signature update check... Jun 02 2025 00:14:52 vps122157 maldet(1005043): {sigup} local signature set is version 202506011196154 Jun 02 2025 00:14:53 vps122157 maldet(1005043): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 02 2025 00:14:53 vps122157 maldet(1005043): {sigup} latest signature set already installed Jun 02 2025 00:14:53 vps122157 maldet(1005141): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 02 2025 00:14:53 vps122157 maldet(1005141): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 02 2025 00:14:53 vps122157 maldet(1005141): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 02 2025 00:14:53 vps122157 maldet(1005141): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 02 2025 00:14:53 vps122157 maldet(1005141): {scan} executed /bin/nice -n 19 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm /var/fcgi_ipc -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 02 2025 00:14:53 vps122157 maldet(1005141): {scan} file list completed in 0s, found 5 files... Jun 02 2025 00:14:53 vps122157 maldet(1005141): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 02 2025 00:14:53 vps122157 maldet(1005141): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (5 files) in progress... Jun 02 2025 00:15:25 vps122157 maldet(1005141): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 5, malware hits 0, cleaned hits 0, time 32s Jun 02 2025 00:15:25 vps122157 maldet(1005141): {scan} scan report saved, to view run: maldet --report 250602-0014.1005141 Jun 03 2025 00:15:56 vps122157 maldet(1195354): {update} checking for available updates... Jun 03 2025 00:15:56 vps122157 maldet(1195354): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 03 2025 00:15:56 vps122157 maldet(1195354): {update} hashing install files and checking against server... Jun 03 2025 00:15:56 vps122157 maldet(1195354): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 03 2025 00:15:57 vps122157 maldet(1195354): {update} latest version already installed. Jun 03 2025 00:15:57 vps122157 maldet(1195473): {sigup} performing signature update check... Jun 03 2025 00:15:57 vps122157 maldet(1195473): {sigup} local signature set is version 202506011196154 Jun 03 2025 00:15:57 vps122157 maldet(1195473): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 03 2025 00:15:57 vps122157 maldet(1195473): {sigup} latest signature set already installed Jun 03 2025 00:15:57 vps122157 maldet(1195572): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 03 2025 00:15:57 vps122157 maldet(1195572): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 03 2025 00:15:57 vps122157 maldet(1195572): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 03 2025 00:15:57 vps122157 maldet(1195572): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 03 2025 00:15:57 vps122157 maldet(1195572): {scan} executed /bin/nice -n 19 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm /var/fcgi_ipc -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 03 2025 00:15:57 vps122157 maldet(1195572): {scan} file list completed in 0s, found 6 files... Jun 03 2025 00:15:57 vps122157 maldet(1195572): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 03 2025 00:15:57 vps122157 maldet(1195572): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (6 files) in progress... Jun 03 2025 00:16:24 vps122157 maldet(1195572): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 6, malware hits 0, cleaned hits 0, time 27s Jun 03 2025 00:16:24 vps122157 maldet(1195572): {scan} scan report saved, to view run: maldet --report 250603-0015.1195572 Jun 04 2025 00:22:10 vps122157 maldet(1362003): {update} checking for available updates... Jun 04 2025 00:23:15 vps122157 maldet(1362003): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 04 2025 00:23:15 vps122157 maldet(1362003): {update} hashing install files and checking against server... Jun 04 2025 00:24:20 vps122157 maldet(1362003): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 04 2025 00:24:20 vps122157 maldet(1362003): {update} latest version already installed. Jun 04 2025 00:24:20 vps122157 maldet(1362227): {sigup} performing signature update check... Jun 04 2025 00:24:20 vps122157 maldet(1362227): {sigup} local signature set is version 202506011196154 Jun 04 2025 00:25:14 vps122157 maldet(1362227): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 04 2025 00:25:14 vps122157 maldet(1362227): {sigup} new signature set error code: 525 available Jun 04 2025 00:25:14 vps122157 maldet(1362227): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 04 2025 00:25:45 vps122157 maldet(1362227): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 04 2025 00:26:38 vps122157 maldet(1362227): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 04 2025 00:26:38 vps122157 maldet(1362227): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 04 2025 00:27:25 vps122157 maldet(1362227): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 04 2025 00:28:09 vps122157 maldet(1362227): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 04 2025 00:28:09 vps122157 maldet(1362227): {sigup} verified md5sum of maldet-sigpack.tgz Jun 04 2025 00:28:09 vps122157 maldet(1362227): {sigup} unpacked and installed maldet-sigpack.tgz Jun 04 2025 00:28:09 vps122157 maldet(1362227): {sigup} unable to verify md5sum of maldet-clean.tgz, please try again or contact proj@rfxn.com Jun 04 2025 00:28:09 vps122157 maldet(1362227): {sigup} signature set update completed Jun 04 2025 00:28:09 vps122157 maldet(1362227): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 04 2025 00:28:09 vps122157 maldet(1362687): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 04 2025 00:28:09 vps122157 maldet(1362687): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 04 2025 00:28:09 vps122157 maldet(1362687): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 04 2025 00:28:09 vps122157 maldet(1362687): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 04 2025 00:28:09 vps122157 maldet(1362687): {scan} executed /bin/nice -n 19 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm /var/fcgi_ipc -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 04 2025 00:28:09 vps122157 maldet(1362687): {scan} file list completed in 0s, found 3 files... Jun 04 2025 00:28:09 vps122157 maldet(1362687): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 04 2025 00:28:09 vps122157 maldet(1362687): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (3 files) in progress... Jun 04 2025 00:28:38 vps122157 maldet(1362687): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 3, malware hits 0, cleaned hits 0, time 29s Jun 04 2025 00:28:38 vps122157 maldet(1362687): {scan} scan report saved, to view run: maldet --report 250604-0028.1362687 Jun 05 2025 00:16:39 vps122157 maldet(1535420): {update} checking for available updates... Jun 05 2025 00:16:43 vps122157 maldet(1535420): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 05 2025 00:16:43 vps122157 maldet(1535420): {update} hashing install files and checking against server... Jun 05 2025 00:16:46 vps122157 maldet(1535420): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 05 2025 00:16:46 vps122157 maldet(1535420): {update} latest version already installed. Jun 05 2025 00:16:46 vps122157 maldet(1535541): {sigup} performing signature update check... Jun 05 2025 00:16:46 vps122157 maldet(1535541): {sigup} local signature set is version 202506042164456 Jun 05 2025 00:16:49 vps122157 maldet(1535541): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 05 2025 00:16:49 vps122157 maldet(1535541): {sigup} latest signature set already installed Jun 05 2025 00:16:49 vps122157 maldet(1535641): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 05 2025 00:16:50 vps122157 maldet(1535641): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 05 2025 00:16:50 vps122157 maldet(1535641): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 05 2025 00:16:50 vps122157 maldet(1535641): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 05 2025 00:16:50 vps122157 maldet(1535641): {scan} executed /bin/nice -n 19 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm /var/fcgi_ipc -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 05 2025 00:16:50 vps122157 maldet(1535641): {scan} file list completed in 0s, found 10 files... Jun 05 2025 00:16:50 vps122157 maldet(1535641): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 05 2025 00:16:50 vps122157 maldet(1535641): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (10 files) in progress... Jun 05 2025 00:17:18 vps122157 maldet(1535641): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 10, malware hits 0, cleaned hits 0, time 29s Jun 05 2025 00:17:18 vps122157 maldet(1535641): {scan} scan report saved, to view run: maldet --report 250605-0016.1535641 Jun 06 2025 00:16:01 vps122157 maldet(1714436): {update} checking for available updates... Jun 06 2025 00:16:02 vps122157 maldet(1714436): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 06 2025 00:16:02 vps122157 maldet(1714436): {update} hashing install files and checking against server... Jun 06 2025 00:16:02 vps122157 maldet(1714436): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 06 2025 00:16:02 vps122157 maldet(1714436): {update} latest version already installed. Jun 06 2025 00:16:02 vps122157 maldet(1714561): {sigup} performing signature update check... Jun 06 2025 00:16:02 vps122157 maldet(1714561): {sigup} local signature set is version 202506042164456 Jun 06 2025 00:16:02 vps122157 maldet(1714561): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 06 2025 00:16:02 vps122157 maldet(1714561): {sigup} latest signature set already installed Jun 06 2025 00:16:02 vps122157 maldet(1714660): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 06 2025 00:16:03 vps122157 maldet(1714660): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 06 2025 00:16:03 vps122157 maldet(1714660): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 06 2025 00:16:03 vps122157 maldet(1714660): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 06 2025 00:16:03 vps122157 maldet(1714660): {scan} executed /bin/nice -n 19 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm /var/fcgi_ipc -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 06 2025 00:16:03 vps122157 maldet(1714660): {scan} file list completed in 0s, found 1 files... Jun 06 2025 00:16:03 vps122157 maldet(1714660): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 06 2025 00:16:03 vps122157 maldet(1714660): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1 files) in progress... Jun 06 2025 00:16:29 vps122157 maldet(1714660): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1, malware hits 0, cleaned hits 0, time 27s Jun 06 2025 00:16:29 vps122157 maldet(1714660): {scan} scan report saved, to view run: maldet --report 250606-0016.1714660 Jun 07 2025 00:13:02 vps122157 maldet(1866930): {update} checking for available updates... Jun 07 2025 00:13:07 vps122157 maldet(1866930): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 07 2025 00:13:07 vps122157 maldet(1866930): {update} hashing install files and checking against server... Jun 07 2025 00:13:07 vps122157 maldet(1866930): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 07 2025 00:13:07 vps122157 maldet(1866930): {update} latest version already installed. Jun 07 2025 00:13:07 vps122157 maldet(1867051): {sigup} performing signature update check... Jun 07 2025 00:13:07 vps122157 maldet(1867051): {sigup} local signature set is version 202506042164456 Jun 07 2025 00:13:12 vps122157 maldet(1867051): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 07 2025 00:13:12 vps122157 maldet(1867051): {sigup} new signature set 20250607589111 available Jun 07 2025 00:13:12 vps122157 maldet(1867051): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 07 2025 00:13:18 vps122157 maldet(1867051): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 07 2025 00:13:26 vps122157 maldet(1867051): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 07 2025 00:13:26 vps122157 maldet(1867051): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 07 2025 00:13:33 vps122157 maldet(1867051): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 07 2025 00:13:41 vps122157 maldet(1867051): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 07 2025 00:13:41 vps122157 maldet(1867051): {sigup} verified md5sum of maldet-sigpack.tgz Jun 07 2025 00:13:42 vps122157 maldet(1867051): {sigup} unpacked and installed maldet-sigpack.tgz Jun 07 2025 00:13:42 vps122157 maldet(1867051): {sigup} verified md5sum of maldet-clean.tgz Jun 07 2025 00:13:42 vps122157 maldet(1867051): {sigup} unpacked and installed maldet-clean.tgz Jun 07 2025 00:13:42 vps122157 maldet(1867051): {sigup} signature set update completed Jun 07 2025 00:13:42 vps122157 maldet(1867051): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 07 2025 00:13:42 vps122157 maldet(1867300): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 07 2025 00:13:42 vps122157 maldet(1867300): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 07 2025 00:13:42 vps122157 maldet(1867300): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 07 2025 00:13:42 vps122157 maldet(1867300): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 07 2025 00:13:42 vps122157 maldet(1867300): {scan} executed /bin/nice -n 19 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm /var/fcgi_ipc -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 07 2025 00:13:42 vps122157 maldet(1867300): {scan} file list completed in 0s, found 4 files... Jun 07 2025 00:13:42 vps122157 maldet(1867300): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 07 2025 00:13:42 vps122157 maldet(1867300): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (4 files) in progress... Jun 07 2025 00:14:14 vps122157 maldet(1867300): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 4, malware hits 0, cleaned hits 0, time 32s Jun 07 2025 00:14:14 vps122157 maldet(1867300): {scan} scan report saved, to view run: maldet --report 250607-0013.1867300 Jun 08 2025 00:42:12 vps122157 maldet(2039800): {update} checking for available updates... Jun 08 2025 00:43:06 vps122157 maldet(2039800): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 08 2025 00:43:06 vps122157 maldet(2039800): {update} hashing install files and checking against server... Jun 08 2025 00:43:52 vps122157 maldet(2039800): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 08 2025 00:43:52 vps122157 maldet(2039800): {update} version check shows latest but hash check failed, forcing update... Jun 08 2025 00:43:52 vps122157 maldet(2039800): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz Jun 08 2025 00:44:31 vps122157 maldet(2039800): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz.md5 Jun 08 2025 00:44:31 vps122157 maldet(2039800): {update} unable to verify md5sum of maldetect-current.tar.gz, update failed! Jun 08 2025 00:44:31 vps122157 maldet(2040110): {sigup} performing signature update check... Jun 08 2025 00:44:31 vps122157 maldet(2040110): {sigup} local signature set is version 20250607589111 Jun 08 2025 00:45:15 vps122157 maldet(2040110): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 08 2025 00:45:15 vps122157 maldet(2040110): {sigup} new signature set error code: 525 available Jun 08 2025 00:45:15 vps122157 maldet(2040110): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 08 2025 00:46:19 vps122157 maldet(2040110): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 08 2025 00:46:50 vps122157 maldet(2040110): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 08 2025 00:46:50 vps122157 maldet(2040110): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 08 2025 00:47:57 vps122157 maldet(2040110): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 08 2025 00:48:34 vps122157 maldet(2040110): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 08 2025 00:48:34 vps122157 maldet(2040110): {sigup} unable to verify md5sum of maldet-sigpack.tgz, please try again or contact proj@rfxn.com Jun 08 2025 00:48:34 vps122157 maldet(2040110): {sigup} unable to verify md5sum of maldet-clean.tgz, please try again or contact proj@rfxn.com Jun 08 2025 00:48:34 vps122157 maldet(2040632): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 08 2025 00:48:34 vps122157 maldet(2040632): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 08 2025 00:48:34 vps122157 maldet(2040632): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 08 2025 00:48:34 vps122157 maldet(2040632): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 08 2025 00:48:35 vps122157 maldet(2040632): {scan} executed /bin/nice -n 19 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm /var/fcgi_ipc -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 08 2025 00:48:35 vps122157 maldet(2040632): {scan} file list completed in 0s, found 2 files... Jun 08 2025 00:48:35 vps122157 maldet(2040632): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 08 2025 00:48:35 vps122157 maldet(2040632): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2 files) in progress... Jun 08 2025 00:49:02 vps122157 maldet(2040632): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2, malware hits 0, cleaned hits 0, time 28s Jun 08 2025 00:49:02 vps122157 maldet(2040632): {scan} scan report saved, to view run: maldet --report 250608-0048.2040632 Jun 09 2025 00:12:05 vps122157 maldet(2221139): {update} checking for available updates... Jun 09 2025 00:12:06 vps122157 maldet(2221139): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 09 2025 00:12:06 vps122157 maldet(2221139): {update} hashing install files and checking against server... Jun 09 2025 00:12:06 vps122157 maldet(2221139): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 09 2025 00:12:06 vps122157 maldet(2221139): {update} latest version already installed. Jun 09 2025 00:12:06 vps122157 maldet(2221258): {sigup} performing signature update check... Jun 09 2025 00:12:06 vps122157 maldet(2221258): {sigup} local signature set is version 20250607589111 Jun 09 2025 00:12:06 vps122157 maldet(2221258): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 09 2025 00:12:06 vps122157 maldet(2221258): {sigup} latest signature set already installed Jun 09 2025 00:12:06 vps122157 maldet(2221356): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 09 2025 00:12:07 vps122157 maldet(2221356): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 09 2025 00:12:07 vps122157 maldet(2221356): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 09 2025 00:12:07 vps122157 maldet(2221356): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 09 2025 00:12:07 vps122157 maldet(2221356): {scan} executed /bin/nice -n 19 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm /var/fcgi_ipc -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 09 2025 00:12:07 vps122157 maldet(2221356): {scan} file list completed in 0s, found 1 files... Jun 09 2025 00:12:07 vps122157 maldet(2221356): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 09 2025 00:12:07 vps122157 maldet(2221356): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1 files) in progress... Jun 09 2025 00:12:31 vps122157 maldet(2221356): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1, malware hits 0, cleaned hits 0, time 25s Jun 09 2025 00:12:31 vps122157 maldet(2221356): {scan} scan report saved, to view run: maldet --report 250609-0012.2221356 Jun 10 2025 00:16:17 vps122157 maldet(2644076): {update} checking for available updates... Jun 10 2025 00:16:18 vps122157 maldet(2644076): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 10 2025 00:16:18 vps122157 maldet(2644076): {update} hashing install files and checking against server... Jun 10 2025 00:16:18 vps122157 maldet(2644076): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 10 2025 00:16:18 vps122157 maldet(2644076): {update} latest version already installed. Jun 10 2025 00:16:18 vps122157 maldet(2644195): {sigup} performing signature update check... Jun 10 2025 00:16:18 vps122157 maldet(2644195): {sigup} local signature set is version 20250607589111 Jun 10 2025 00:16:18 vps122157 maldet(2644195): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 10 2025 00:16:18 vps122157 maldet(2644195): {sigup} latest signature set already installed Jun 10 2025 00:16:18 vps122157 maldet(2644293): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 10 2025 00:16:19 vps122157 maldet(2644293): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 10 2025 00:16:19 vps122157 maldet(2644293): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 10 2025 00:16:19 vps122157 maldet(2644293): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 10 2025 00:16:19 vps122157 maldet(2644293): {scan} executed /bin/nice -n 19 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm /var/fcgi_ipc -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 10 2025 00:16:19 vps122157 maldet(2644293): {scan} file list completed in 0s, found 9 files... Jun 10 2025 00:16:19 vps122157 maldet(2644293): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 10 2025 00:16:19 vps122157 maldet(2644293): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (9 files) in progress... Jun 10 2025 00:16:44 vps122157 maldet(2644293): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 9, malware hits 0, cleaned hits 0, time 26s Jun 10 2025 00:16:44 vps122157 maldet(2644293): {scan} scan report saved, to view run: maldet --report 250610-0016.2644293 Jun 11 2025 00:19:31 vps122157 maldet(2888236): {update} checking for available updates... Jun 11 2025 00:19:50 vps122157 maldet(2888236): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 11 2025 00:19:50 vps122157 maldet(2888236): {update} hashing install files and checking against server... Jun 11 2025 00:20:12 vps122157 maldet(2888236): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 11 2025 00:20:12 vps122157 maldet(2888236): {update} latest version already installed. Jun 11 2025 00:20:12 vps122157 maldet(2888470): {sigup} performing signature update check... Jun 11 2025 00:20:12 vps122157 maldet(2888470): {sigup} local signature set is version 20250607589111 Jun 11 2025 00:20:55 vps122157 maldet(2888470): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 11 2025 00:20:55 vps122157 maldet(2888470): {sigup} new signature set 20250610484586 available Jun 11 2025 00:20:55 vps122157 maldet(2888470): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 11 2025 00:21:29 vps122157 maldet(2888470): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 11 2025 00:21:54 vps122157 maldet(2888470): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 11 2025 00:21:54 vps122157 maldet(2888470): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 11 2025 00:22:24 vps122157 maldet(2888470): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 11 2025 00:22:47 vps122157 maldet(2888470): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 11 2025 00:22:47 vps122157 maldet(2888470): {sigup} verified md5sum of maldet-sigpack.tgz Jun 11 2025 00:22:48 vps122157 maldet(2888470): {sigup} unpacked and installed maldet-sigpack.tgz Jun 11 2025 00:22:48 vps122157 maldet(2888470): {sigup} verified md5sum of maldet-clean.tgz Jun 11 2025 00:22:48 vps122157 maldet(2888470): {sigup} unpacked and installed maldet-clean.tgz Jun 11 2025 00:22:48 vps122157 maldet(2888470): {sigup} signature set update completed Jun 11 2025 00:22:48 vps122157 maldet(2888470): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 11 2025 00:22:48 vps122157 maldet(2888869): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 11 2025 00:22:48 vps122157 maldet(2888869): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 11 2025 00:22:48 vps122157 maldet(2888869): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 11 2025 00:22:48 vps122157 maldet(2888869): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 11 2025 00:22:48 vps122157 maldet(2888869): {scan} executed /bin/nice -n 19 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm /var/fcgi_ipc -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 11 2025 00:22:48 vps122157 maldet(2888869): {scan} file list completed in 0s, found 6 files... Jun 11 2025 00:22:48 vps122157 maldet(2888869): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 11 2025 00:22:48 vps122157 maldet(2888869): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (6 files) in progress... Jun 11 2025 00:23:17 vps122157 maldet(2888869): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 6, malware hits 0, cleaned hits 0, time 28s Jun 11 2025 00:23:17 vps122157 maldet(2888869): {scan} scan report saved, to view run: maldet --report 250611-0022.2888869 Jun 12 2025 00:29:51 vps122157 maldet(3090972): {update} checking for available updates... Jun 12 2025 00:30:36 vps122157 maldet(3090972): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 12 2025 00:30:36 vps122157 maldet(3090972): {update} hashing install files and checking against server... Jun 12 2025 00:31:22 vps122157 maldet(3090972): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 12 2025 00:31:22 vps122157 maldet(3090972): {update} version check shows latest but hash check failed, forcing update... Jun 12 2025 00:31:22 vps122157 maldet(3090972): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz Jun 12 2025 00:32:07 vps122157 maldet(3090972): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz.md5 Jun 12 2025 00:32:07 vps122157 maldet(3090972): {update} unable to verify md5sum of maldetect-current.tar.gz, update failed! Jun 12 2025 00:32:07 vps122157 maldet(3091366): {sigup} performing signature update check... Jun 12 2025 00:32:07 vps122157 maldet(3091366): {sigup} local signature set is version 20250610484586 Jun 12 2025 00:32:56 vps122157 maldet(3091366): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 12 2025 00:32:56 vps122157 maldet(3091366): {sigup} latest signature set already installed Jun 12 2025 00:32:56 vps122157 maldet(3091519): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 12 2025 00:32:56 vps122157 maldet(3091519): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 12 2025 00:32:56 vps122157 maldet(3091519): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 12 2025 00:32:56 vps122157 maldet(3091519): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 12 2025 00:32:56 vps122157 maldet(3091519): {scan} executed /bin/nice -n 19 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm /var/fcgi_ipc -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 12 2025 00:32:56 vps122157 maldet(3091519): {scan} file list completed in 0s, found 3 files... Jun 12 2025 00:32:56 vps122157 maldet(3091519): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 12 2025 00:32:56 vps122157 maldet(3091519): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (3 files) in progress... Jun 12 2025 00:33:23 vps122157 maldet(3091519): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 3, malware hits 0, cleaned hits 0, time 27s Jun 12 2025 00:33:23 vps122157 maldet(3091519): {scan} scan report saved, to view run: maldet --report 250612-0032.3091519 Jun 13 2025 00:18:06 vps122157 maldet(3320492): {update} checking for available updates... Jun 13 2025 00:18:54 vps122157 maldet(3320492): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 13 2025 00:18:54 vps122157 maldet(3320492): {update} hashing install files and checking against server... Jun 13 2025 00:19:30 vps122157 maldet(3320492): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 13 2025 00:19:30 vps122157 maldet(3320492): {update} latest version already installed. Jun 13 2025 00:19:30 vps122157 maldet(3320707): {sigup} performing signature update check... Jun 13 2025 00:19:30 vps122157 maldet(3320707): {sigup} local signature set is version 20250610484586 Jun 13 2025 00:20:05 vps122157 maldet(3320707): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 13 2025 00:20:05 vps122157 maldet(3320707): {sigup} new signature set 20250613705251 available Jun 13 2025 00:20:05 vps122157 maldet(3320707): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 13 2025 00:20:44 vps122157 maldet(3320707): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 13 2025 00:21:37 vps122157 maldet(3320707): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 13 2025 00:21:37 vps122157 maldet(3320707): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 13 2025 00:22:17 vps122157 maldet(3320707): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 13 2025 00:22:57 vps122157 maldet(3320707): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 13 2025 00:22:57 vps122157 maldet(3320707): {sigup} unable to verify md5sum of maldet-sigpack.tgz, please try again or contact proj@rfxn.com Jun 13 2025 00:22:57 vps122157 maldet(3320707): {sigup} unable to verify md5sum of maldet-clean.tgz, please try again or contact proj@rfxn.com Jun 13 2025 00:22:57 vps122157 maldet(3321214): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 13 2025 00:22:58 vps122157 maldet(3321214): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 13 2025 00:22:58 vps122157 maldet(3321214): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 13 2025 00:22:58 vps122157 maldet(3321214): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 13 2025 00:22:58 vps122157 maldet(3321214): {scan} executed /bin/nice -n 19 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm /var/fcgi_ipc -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 13 2025 00:22:58 vps122157 maldet(3321214): {scan} file list completed in 0s, found 5 files... Jun 13 2025 00:22:58 vps122157 maldet(3321214): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 13 2025 00:22:58 vps122157 maldet(3321214): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (5 files) in progress... Jun 13 2025 00:23:26 vps122157 maldet(3321214): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 5, malware hits 0, cleaned hits 0, time 29s Jun 13 2025 00:23:26 vps122157 maldet(3321214): {scan} scan report saved, to view run: maldet --report 250613-0022.3321214 Jun 14 2025 00:21:38 vps122157 maldet(3815975): {update} checking for available updates... Jun 14 2025 00:22:05 vps122157 maldet(3815975): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 14 2025 00:22:05 vps122157 maldet(3815975): {update} hashing install files and checking against server... Jun 14 2025 00:22:31 vps122157 maldet(3815975): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 14 2025 00:22:31 vps122157 maldet(3815975): {update} latest version already installed. Jun 14 2025 00:22:31 vps122157 maldet(3816158): {sigup} performing signature update check... Jun 14 2025 00:22:31 vps122157 maldet(3816158): {sigup} local signature set is version 20250610484586 Jun 14 2025 00:23:00 vps122157 maldet(3816158): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 14 2025 00:23:00 vps122157 maldet(3816158): {sigup} new signature set 20250613705251 available Jun 14 2025 00:23:00 vps122157 maldet(3816158): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 14 2025 00:23:26 vps122157 maldet(3816158): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 14 2025 00:23:59 vps122157 maldet(3816158): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 14 2025 00:23:59 vps122157 maldet(3816158): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 14 2025 00:25:03 vps122157 maldet(3816158): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 14 2025 00:25:37 vps122157 maldet(3816158): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 14 2025 00:25:37 vps122157 maldet(3816158): {sigup} verified md5sum of maldet-sigpack.tgz Jun 14 2025 00:25:37 vps122157 maldet(3816158): {sigup} unpacked and installed maldet-sigpack.tgz Jun 14 2025 00:25:37 vps122157 maldet(3816158): {sigup} unable to verify md5sum of maldet-clean.tgz, please try again or contact proj@rfxn.com Jun 14 2025 00:25:37 vps122157 maldet(3816158): {sigup} signature set update completed Jun 14 2025 00:25:37 vps122157 maldet(3816158): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 14 2025 00:25:37 vps122157 maldet(3816641): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 14 2025 00:25:37 vps122157 maldet(3816641): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 14 2025 00:25:37 vps122157 maldet(3816641): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 14 2025 00:25:37 vps122157 maldet(3816641): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 14 2025 00:25:37 vps122157 maldet(3816641): {scan} executed /bin/nice -n 19 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm /var/fcgi_ipc -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 14 2025 00:25:38 vps122157 maldet(3816641): {scan} file list completed in 1s, found 5 files... Jun 14 2025 00:25:38 vps122157 maldet(3816641): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 14 2025 00:25:38 vps122157 maldet(3816641): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (5 files) in progress... Jun 14 2025 00:26:06 vps122157 maldet(3816641): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 5, malware hits 0, cleaned hits 0, time 29s Jun 14 2025 00:26:06 vps122157 maldet(3816641): {scan} scan report saved, to view run: maldet --report 250614-0025.3816641 Jun 15 2025 00:41:33 vps122157 maldet(4014819): {update} checking for available updates... Jun 15 2025 00:42:12 vps122157 maldet(4014819): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 15 2025 00:42:12 vps122157 maldet(4014819): {update} hashing install files and checking against server... Jun 15 2025 00:42:42 vps122157 maldet(4014819): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 15 2025 00:42:42 vps122157 maldet(4014819): {update} latest version already installed. Jun 15 2025 00:42:42 vps122157 maldet(4014997): {sigup} performing signature update check... Jun 15 2025 00:42:42 vps122157 maldet(4014997): {sigup} local signature set is version 20250613705251 Jun 15 2025 00:43:49 vps122157 maldet(4014997): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 15 2025 00:43:49 vps122157 maldet(4014997): {sigup} new signature set error code: 525 available Jun 15 2025 00:43:49 vps122157 maldet(4014997): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 15 2025 00:44:33 vps122157 maldet(4014997): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 15 2025 00:45:12 vps122157 maldet(4014997): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 15 2025 00:45:12 vps122157 maldet(4014997): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 15 2025 00:46:00 vps122157 maldet(4014997): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 15 2025 00:46:39 vps122157 maldet(4014997): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 15 2025 00:46:39 vps122157 maldet(4014997): {sigup} unable to verify md5sum of maldet-sigpack.tgz, please try again or contact proj@rfxn.com Jun 15 2025 00:46:39 vps122157 maldet(4014997): {sigup} unable to verify md5sum of maldet-clean.tgz, please try again or contact proj@rfxn.com Jun 15 2025 00:46:39 vps122157 maldet(4015467): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 15 2025 00:46:40 vps122157 maldet(4015467): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 15 2025 00:46:40 vps122157 maldet(4015467): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 15 2025 00:46:40 vps122157 maldet(4015467): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 15 2025 00:46:40 vps122157 maldet(4015467): {scan} executed /bin/nice -n 19 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm /var/fcgi_ipc -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 15 2025 00:46:40 vps122157 maldet(4015467): {scan} file list completed in 0s, found 1 files... Jun 15 2025 00:46:40 vps122157 maldet(4015467): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 15 2025 00:46:40 vps122157 maldet(4015467): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1 files) in progress... Jun 15 2025 00:47:06 vps122157 maldet(4015467): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1, malware hits 0, cleaned hits 0, time 27s Jun 15 2025 00:47:06 vps122157 maldet(4015467): {scan} scan report saved, to view run: maldet --report 250615-0046.4015467 Jun 16 2025 00:13:33 vps122157 maldet(4193548): {update} checking for available updates... Jun 16 2025 00:13:43 vps122157 maldet(4193548): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 16 2025 00:13:43 vps122157 maldet(4193548): {update} hashing install files and checking against server... Jun 16 2025 00:13:55 vps122157 maldet(4193548): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 16 2025 00:13:55 vps122157 maldet(4193548): {update} latest version already installed. Jun 16 2025 00:13:55 vps122157 maldet(4193801): {sigup} performing signature update check... Jun 16 2025 00:13:55 vps122157 maldet(4193801): {sigup} local signature set is version 20250613705251 Jun 16 2025 00:13:55 vps122157 maldet(4193801): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 16 2025 00:13:55 vps122157 maldet(4193801): {sigup} new signature set 20250616812462 available Jun 16 2025 00:13:55 vps122157 maldet(4193801): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 16 2025 00:14:08 vps122157 maldet(4193801): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 16 2025 00:14:22 vps122157 maldet(4193801): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 16 2025 00:14:22 vps122157 maldet(4193801): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 16 2025 00:14:36 vps122157 maldet(4193801): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 16 2025 00:14:52 vps122157 maldet(4193801): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 16 2025 00:14:52 vps122157 maldet(4193801): {sigup} verified md5sum of maldet-sigpack.tgz Jun 16 2025 00:14:52 vps122157 maldet(4193801): {sigup} unpacked and installed maldet-sigpack.tgz Jun 16 2025 00:14:52 vps122157 maldet(4193801): {sigup} verified md5sum of maldet-clean.tgz Jun 16 2025 00:14:52 vps122157 maldet(4193801): {sigup} unpacked and installed maldet-clean.tgz Jun 16 2025 00:14:52 vps122157 maldet(4193801): {sigup} signature set update completed Jun 16 2025 00:14:52 vps122157 maldet(4193801): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 16 2025 00:14:52 vps122157 maldet(4194213): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 16 2025 00:14:52 vps122157 maldet(4194213): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 16 2025 00:14:52 vps122157 maldet(4194213): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 16 2025 00:14:52 vps122157 maldet(4194213): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 16 2025 00:14:52 vps122157 maldet(4194213): {scan} executed /bin/nice -n 19 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm /var/fcgi_ipc -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 16 2025 00:14:52 vps122157 maldet(4194213): {scan} file list completed in 0s, found 5 files... Jun 16 2025 00:14:52 vps122157 maldet(4194213): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 16 2025 00:14:52 vps122157 maldet(4194213): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (5 files) in progress... Jun 16 2025 00:15:27 vps122157 maldet(4194213): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 5, malware hits 0, cleaned hits 0, time 35s Jun 16 2025 00:15:27 vps122157 maldet(4194213): {scan} scan report saved, to view run: maldet --report 250616-0014.4194213 Jun 17 2025 00:28:36 vps122157 maldet(460629): {update} checking for available updates... Jun 17 2025 00:29:22 vps122157 maldet(460629): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 17 2025 00:29:22 vps122157 maldet(460629): {update} hashing install files and checking against server... Jun 17 2025 00:30:02 vps122157 maldet(460629): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 17 2025 00:30:02 vps122157 maldet(460629): {update} version check shows latest but hash check failed, forcing update... Jun 17 2025 00:30:02 vps122157 maldet(460629): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz Jun 17 2025 00:30:48 vps122157 maldet(460629): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz.md5 Jun 17 2025 00:30:48 vps122157 maldet(460629): {update} unable to verify md5sum of maldetect-current.tar.gz, update failed! Jun 17 2025 00:30:48 vps122157 maldet(461228): {sigup} performing signature update check... Jun 17 2025 00:30:48 vps122157 maldet(461228): {sigup} local signature set is version 20250616812462 Jun 17 2025 00:31:38 vps122157 maldet(461228): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 17 2025 00:31:38 vps122157 maldet(461228): {sigup} new signature set error code: 525 available Jun 17 2025 00:31:38 vps122157 maldet(461228): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 17 2025 00:32:28 vps122157 maldet(461228): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 17 2025 00:33:13 vps122157 maldet(461228): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 17 2025 00:33:13 vps122157 maldet(461228): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 17 2025 00:33:58 vps122157 maldet(461228): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 17 2025 00:34:46 vps122157 maldet(461228): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 17 2025 00:34:46 vps122157 maldet(461228): {sigup} unable to verify md5sum of maldet-sigpack.tgz, please try again or contact proj@rfxn.com Jun 17 2025 00:34:46 vps122157 maldet(461228): {sigup} unable to verify md5sum of maldet-clean.tgz, please try again or contact proj@rfxn.com Jun 17 2025 00:34:46 vps122157 maldet(463436): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 17 2025 00:34:46 vps122157 maldet(463436): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 17 2025 00:34:46 vps122157 maldet(463436): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 17 2025 00:34:46 vps122157 maldet(463436): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 17 2025 00:34:46 vps122157 maldet(463436): {scan} executed /bin/nice -n 19 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm /var/fcgi_ipc -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 17 2025 00:34:46 vps122157 maldet(463436): {scan} file list completed in 0s, found 3 files... Jun 17 2025 00:34:46 vps122157 maldet(463436): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 17 2025 00:34:46 vps122157 maldet(463436): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (3 files) in progress... Jun 17 2025 00:35:14 vps122157 maldet(463436): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 3, malware hits 0, cleaned hits 0, time 28s Jun 17 2025 00:35:14 vps122157 maldet(463436): {scan} scan report saved, to view run: maldet --report 250617-0034.463436 Jun 18 2025 00:18:38 vps122157 maldet(927925): {update} checking for available updates... Jun 18 2025 00:18:43 vps122157 maldet(927925): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 18 2025 00:18:43 vps122157 maldet(927925): {update} hashing install files and checking against server... Jun 18 2025 00:18:47 vps122157 maldet(927925): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 18 2025 00:18:47 vps122157 maldet(927925): {update} latest version already installed. Jun 18 2025 00:18:47 vps122157 maldet(928348): {sigup} performing signature update check... Jun 18 2025 00:18:47 vps122157 maldet(928348): {sigup} local signature set is version 20250616812462 Jun 18 2025 00:18:47 vps122157 maldet(928348): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 18 2025 00:18:47 vps122157 maldet(928348): {sigup} latest signature set already installed Jun 18 2025 00:18:47 vps122157 maldet(928452): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 18 2025 00:18:48 vps122157 maldet(928452): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 18 2025 00:18:48 vps122157 maldet(928452): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 18 2025 00:18:48 vps122157 maldet(928452): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 18 2025 00:18:48 vps122157 maldet(928452): {scan} executed /bin/nice -n 19 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm /var/fcgi_ipc -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 18 2025 00:18:48 vps122157 maldet(928452): {scan} file list completed in 0s, found 9 files... Jun 18 2025 00:18:48 vps122157 maldet(928452): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 18 2025 00:18:48 vps122157 maldet(928452): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (9 files) in progress... Jun 18 2025 00:19:16 vps122157 maldet(928452): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 9, malware hits 0, cleaned hits 0, time 29s Jun 18 2025 00:19:16 vps122157 maldet(928452): {scan} scan report saved, to view run: maldet --report 250618-0018.928452 Jun 19 2025 00:19:30 vps122157 maldet(1263398): {update} checking for available updates... Jun 19 2025 00:19:32 vps122157 maldet(1263398): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 19 2025 00:19:32 vps122157 maldet(1263398): {update} hashing install files and checking against server... Jun 19 2025 00:19:32 vps122157 maldet(1263398): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 19 2025 00:19:32 vps122157 maldet(1263398): {update} latest version already installed. Jun 19 2025 00:19:32 vps122157 maldet(1263520): {sigup} performing signature update check... Jun 19 2025 00:19:32 vps122157 maldet(1263520): {sigup} local signature set is version 20250616812462 Jun 19 2025 00:19:34 vps122157 maldet(1263520): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 19 2025 00:19:34 vps122157 maldet(1263520): {sigup} latest signature set already installed Jun 19 2025 00:19:34 vps122157 maldet(1263623): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 19 2025 00:19:35 vps122157 maldet(1263623): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 19 2025 00:19:35 vps122157 maldet(1263623): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 19 2025 00:19:35 vps122157 maldet(1263623): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 19 2025 00:19:35 vps122157 maldet(1263623): {scan} executed /bin/nice -n 19 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm /var/fcgi_ipc -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 19 2025 00:19:35 vps122157 maldet(1263623): {scan} file list completed in 0s, found 2 files... Jun 19 2025 00:19:35 vps122157 maldet(1263623): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 19 2025 00:19:35 vps122157 maldet(1263623): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2 files) in progress... Jun 19 2025 00:20:01 vps122157 maldet(1263623): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2, malware hits 0, cleaned hits 0, time 27s Jun 19 2025 00:20:01 vps122157 maldet(1263623): {scan} scan report saved, to view run: maldet --report 250619-0019.1263623 Jun 20 2025 00:19:21 vps122157 maldet(1630302): {update} checking for available updates... Jun 20 2025 00:19:42 vps122157 maldet(1630302): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 20 2025 00:19:42 vps122157 maldet(1630302): {update} hashing install files and checking against server... Jun 20 2025 00:20:30 vps122157 maldet(1630302): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 20 2025 00:20:30 vps122157 maldet(1630302): {update} version check shows latest but hash check failed, forcing update... Jun 20 2025 00:20:30 vps122157 maldet(1630302): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz Jun 20 2025 00:20:55 vps122157 maldet(1630302): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz.md5 Jun 20 2025 00:20:55 vps122157 maldet(1630302): {update} verified md5sum of maldetect-current.tar.gz