server01: Tue Sep 17 16:38:14 -03 2019: Logging to: /root/tmp/scanlog.1568749094 server01: Tue Sep 17 16:38:14 -03 2019: Cleaning up. server01: Tue Sep 17 16:38:14 -03 2019: Preparing ClamAV. server01: Tue Sep 17 16:38:19 -03 2019: Preparation completed. server01: Tue Sep 17 16:38:19 -03 2019: Counting inodes server01: Tue Sep 17 16:38:19 -03 2019: Quotas disabled server01: Tue Sep 17 16:38:19 -03 2019: Performing slow inode count. Please wait server01: Tue Sep 17 16:39:10 -03 2019: Directory is over inode limit, aborting server01: Tue Sep 17 16:39:10 -03 2019: Scan directory: /home server01: Tue Sep 17 16:39:10 -03 2019: Backup directory: /root/tmp/.security/home/scanbackup.1568749094 server01: Tue Sep 17 16:39:10 -03 2019: Scanning. /home/riopaxco/public_html/assistencia/components/com_content/helpers/helpers.php: SL-PHP-UPLOADER-1-am.UNOFFICIAL FOUND /home/riopaxco/public_html/assistencia/administrator/dbconfig.php: SL-PHP-EVAL_REQUEST-dw.UNOFFICIAL FOUND /home/riopaxco/public_html/assistencia/engcuqnf/index.php: SL-HTML-SEOSPAM-ckj.UNOFFICIAL FOUND /home/riopaxco/public_html/assistencia/images/apis.php: SL-PHP-UPLOADER-1-mt.UNOFFICIAL FOUND /home/riopaxco/public_html/assistencia/images/krd.html: SL-PHP-HACKEDBY-pcr.UNOFFICIAL FOUND /home/riopaxco/public_html/assistencia/sym/.htaccess: EIG.Hacktool.HTAccess.DirIndex-1.UNOFFICIAL FOUND /home/riopaxco/public_html/assistencia/sym/root/proc/self/root/proc/self/root/proc/self/root/proc/self/root/proc/self/root/proc/self/root/proc/self/root/proc/self/root/dev/shm/.a431fbb35d5d5b8aab3f0ad9c30a4303: SL-PHP-FILEHACKER-hm.UNOFFICIAL FOUND /home/riopaxco/public_html/assistencia/sym/root/proc/self/root/proc/self/root/proc/self/root/proc/self/root/proc/self/root/proc/self/root/proc/self/root/proc/self/root/dev/shm/.ffc9753a9ff1c0e0dd96cf140329b647: SL-PHP-FILEHACKER-hm.UNOFFICIAL FOUND /home/riopaxco/public_html/assistencia/sym/root/proc/self/root/proc/self/root/proc/self/root/proc/self/root/proc/self/root/proc/self/root/proc/self/root/proc/self/root/dev/shm/.6ed8bb4784fddb6c778a17da7dc709fd: SL-PHP-FILEHACKER-hm.UNOFFICIAL FOUND /home/riopaxco/public_html/assistencia/sym/root/proc/self/root/proc/self/root/proc/self/root/proc/self/root/proc/self/root/proc/self/root/proc/self/root/proc/self/root/dev/shm/.a4feb3c3fa2b5b2c54d6554c85da658a: SL-PHP-FILEHACKER-hm.UNOFFICIAL FOUND /home/riopaxco/public_html/assistencia/sym/root/proc/self/root/proc/self/root/proc/self/root/proc/self/root/proc/self/root/proc/self/root/proc/self/root/dev/shm/.a431fbb35d5d5b8aab3f0ad9c30a4303: SL-PHP-FILEHACKER-hm.UNOFFICIAL FOUND /home/riopaxco/public_html/assistencia/sym/root/proc/self/root/proc/self/root/proc/self/root/proc/self/root/proc/self/root/proc/self/root/proc/self/root/dev/shm/.ffc9753a9ff1c0e0dd96cf140329b647: SL-PHP-FILEHACKER-hm.UNOFFICIAL FOUND /home/riopaxco/public_html/assistencia/sym/root/proc/self/root/proc/self/root/proc/self/root/proc/self/root/proc/self/root/proc/self/root/proc/self/root/dev/shm/.6ed8bb4784fddb6c778a17da7dc709fd: SL-PHP-FILEHACKER-hm.UNOFFICIAL FOUND /home/riopaxco/public_html/assistencia/sym/root/proc/self/root/proc/self/root/proc/self/root/proc/self/root/proc/self/root/proc/self/root/proc/self/root/dev/shm/.a4feb3c3fa2b5b2c54d6554c85da658a: SL-PHP-FILEHACKER-hm.UNOFFICIAL FOUND /home/riopaxco/public_html/assistencia/sym/root/proc/self/root/proc/self/root/proc/self/root/proc/self/root/proc/self/root/proc/self/root/dev/shm/.a431fbb35d5d5b8aab3f0ad9c30a4303: SL-PHP-FILEHACKER-hm.UNOFFICIAL FOUND /home/riopaxco/public_html/assistencia/sym/root/proc/self/root/proc/self/root/proc/self/root/proc/self/root/proc/self/root/proc/self/root/dev/shm/.ffc9753a9ff1c0e0dd96cf140329b647: SL-PHP-FILEHACKER-hm.UNOFFICIAL FOUND /home/riopaxco/public_html/assistencia/sym/root/proc/self/root/proc/self/root/proc/self/root/proc/self/root/proc/self/root/proc/self/root/dev/shm/.6ed8bb4784fddb6c778a17da7dc709fd: SL-PHP-FILEHACKER-hm.UNOFFICIAL FOUND /home/riopaxco/public_html/assistencia/sym/root/proc/self/root/proc/self/root/proc/self/root/proc/self/root/proc/self/root/proc/self/root/dev/shm/.a4feb3c3fa2b5b2c54d6554c85da658a: SL-PHP-FILEHACKER-hm.UNOFFICIAL FOUND /home/riopaxco/public_html/assistencia/sym/root/proc/self/root/proc/self/root/proc/self/root/proc/self/root/proc/self/root/dev/shm/.a431fbb35d5d5b8aab3f0ad9c30a4303: SL-PHP-FILEHACKER-hm.UNOFFICIAL FOUND /home/riopaxco/public_html/assistencia/sym/root/proc/self/root/proc/self/root/proc/self/root/proc/self/root/proc/self/root/dev/shm/.ffc9753a9ff1c0e0dd96cf140329b647: SL-PHP-FILEHACKER-hm.UNOFFICIAL FOUND /home/riopaxco/public_html/assistencia/sym/root/proc/self/root/proc/self/root/proc/self/root/proc/self/root/proc/self/root/dev/shm/.6ed8bb4784fddb6c778a17da7dc709fd: SL-PHP-FILEHACKER-hm.UNOFFICIAL FOUND /home/riopaxco/public_html/assistencia/sym/root/proc/self/root/proc/self/root/proc/self/root/proc/self/root/proc/self/root/dev/shm/.a4feb3c3fa2b5b2c54d6554c85da658a: SL-PHP-FILEHACKER-hm.UNOFFICIAL FOUND /home/riopaxco/public_html/assistencia/sym/root/proc/self/root/proc/self/root/proc/self/root/proc/self/root/dev/shm/.a431fbb35d5d5b8aab3f0ad9c30a4303: SL-PHP-FILEHACKER-hm.UNOFFICIAL FOUND /home/riopaxco/public_html/assistencia/sym/root/proc/self/root/proc/self/root/proc/self/root/proc/self/root/dev/shm/.ffc9753a9ff1c0e0dd96cf140329b647: SL-PHP-FILEHACKER-hm.UNOFFICIAL FOUND /home/riopaxco/public_html/assistencia/sym/root/proc/self/root/proc/self/root/proc/self/root/proc/self/root/dev/shm/.6ed8bb4784fddb6c778a17da7dc709fd: SL-PHP-FILEHACKER-hm.UNOFFICIAL FOUND /home/riopaxco/public_html/assistencia/sym/root/proc/self/root/proc/self/root/proc/self/root/proc/self/root/dev/shm/.a4feb3c3fa2b5b2c54d6554c85da658a: SL-PHP-FILEHACKER-hm.UNOFFICIAL FOUND /home/riopaxco/public_html/assistencia/sym/root/proc/self/root/proc/self/root/proc/self/root/dev/shm/.a431fbb35d5d5b8aab3f0ad9c30a4303: SL-PHP-FILEHACKER-hm.UNOFFICIAL FOUND /home/riopaxco/public_html/assistencia/sym/root/proc/self/root/proc/self/root/proc/self/root/dev/shm/.ffc9753a9ff1c0e0dd96cf140329b647: SL-PHP-FILEHACKER-hm.UNOFFICIAL FOUND /home/riopaxco/public_html/assistencia/sym/root/proc/self/root/proc/self/root/proc/self/root/dev/shm/.6ed8bb4784fddb6c778a17da7dc709fd: SL-PHP-FILEHACKER-hm.UNOFFICIAL FOUND /home/riopaxco/public_html/assistencia/sym/root/proc/self/root/proc/self/root/proc/self/root/dev/shm/.a4feb3c3fa2b5b2c54d6554c85da658a: SL-PHP-FILEHACKER-hm.UNOFFICIAL FOUND /home/riopaxco/public_html/assistencia/sym/root/proc/self/root/proc/self/root/dev/shm/.a431fbb35d5d5b8aab3f0ad9c30a4303: SL-PHP-FILEHACKER-hm.UNOFFICIAL FOUND /home/riopaxco/public_html/assistencia/sym/root/proc/self/root/proc/self/root/dev/shm/.ffc9753a9ff1c0e0dd96cf140329b647: SL-PHP-FILEHACKER-hm.UNOFFICIAL FOUND /home/riopaxco/public_html/assistencia/sym/root/proc/self/root/proc/self/root/dev/shm/.6ed8bb4784fddb6c778a17da7dc709fd: SL-PHP-FILEHACKER-hm.UNOFFICIAL FOUND /home/riopaxco/public_html/assistencia/sym/root/proc/self/root/proc/self/root/dev/shm/.a4feb3c3fa2b5b2c54d6554c85da658a: SL-PHP-FILEHACKER-hm.UNOFFICIAL FOUND /home/riopaxco/public_html/assistencia/sym/root/proc/self/root/dev/shm/.a431fbb35d5d5b8aab3f0ad9c30a4303: SL-PHP-FILEHACKER-hm.UNOFFICIAL FOUND /home/riopaxco/public_html/assistencia/sym/root/proc/self/root/dev/shm/.ffc9753a9ff1c0e0dd96cf140329b647: SL-PHP-FILEHACKER-hm.UNOFFICIAL FOUND /home/riopaxco/public_html/assistencia/sym/root/proc/self/root/dev/shm/.6ed8bb4784fddb6c778a17da7dc709fd: SL-PHP-FILEHACKER-hm.UNOFFICIAL FOUND /home/riopaxco/public_html/assistencia/sym/root/proc/self/root/dev/shm/.a4feb3c3fa2b5b2c54d6554c85da658a: SL-PHP-FILEHACKER-hm.UNOFFICIAL FOUND /home/riopaxco/public_html/assistencia/sym/root/dev/shm/.a431fbb35d5d5b8aab3f0ad9c30a4303: SL-PHP-FILEHACKER-hm.UNOFFICIAL FOUND /home/riopaxco/public_html/assistencia/sym/root/dev/shm/.ffc9753a9ff1c0e0dd96cf140329b647: SL-PHP-FILEHACKER-hm.UNOFFICIAL FOUND /home/riopaxco/public_html/assistencia/sym/root/dev/shm/.6ed8bb4784fddb6c778a17da7dc709fd: SL-PHP-FILEHACKER-hm.UNOFFICIAL FOUND /home/riopaxco/public_html/assistencia/sym/root/dev/shm/.a4feb3c3fa2b5b2c54d6554c85da658a: SL-PHP-FILEHACKER-hm.UNOFFICIAL FOUND /home/riopaxco/public_html/assistencia/detxkkso/index.php: SL-HTML-SEOSPAM-ckj.UNOFFICIAL FOUND /home/riopaxco/public_html/assistencia/layouts/libraries/cms/html/bootstrap/list.php: SL-PHP-EVAL_REQUEST-auij.UNOFFICIAL FOUND /home/riopaxco/public_html/assistencia/layouts/libraries/cms/html/bootstrap/system.php: SL-PHP-EVAL_REQUEST-auij.UNOFFICIAL FOUND /home/riopaxco/public_html/templates/riopax/layouts/blocks/cookielaw.php: SL-JS-JSINCLUDE-ask.UNOFFICIAL FOUND /home/riopaxco/public_html/libraries/cms/application/requireinit.php: SL-PHP-EVAL_REQUEST-awkz.UNOFFICIAL FOUND /home/riopaxco/public_html/libraries/cms/schema/static.php: SL-PHP-INJECTOR-1-md5-afcf.UNOFFICIAL FOUND /home/riopaxco/public_html/libraries/cms/schema/initversion.php: SL-PHP-INJECTOR-1-md5-aexg.UNOFFICIAL FOUND /home/riopaxco/public_html/libraries/joomla/exporter.php: SL-PHP-EVAL_REQUEST-acqm.UNOFFICIAL FOUND /home/riopaxco/public_html/components/com_contact/gfpigql.php: SL-PHP-EVAL_REQUEST-auen.UNOFFICIAL FOUND /home/riopaxco/public_html/administrator/components/com_messages/controllers/cache_a8249d6653.php: SL-PHP-EVAL_REQUEST-ev.UNOFFICIAL FOUND ----------- SCAN SUMMARY ----------- Known viruses: 2079304 Engine version: devel-clamav-0.99-beta1-632-g8a582c7 Scanned directories: 35755 Scanned files: 129742 Infected files: 52 Data scanned: 1918.02 MB Data read: 7109.33 MB (ratio 0.27:1) Time: 1301.387 sec (21 m 41 s) server01: Tue Sep 17 17:00:51 -03 2019: Scanning '/dev/shm'. ----------- SCAN SUMMARY ----------- Known viruses: 2079304 Engine version: devel-clamav-0.99-beta1-632-g8a582c7 Scanned directories: 0 Scanned files: 0 Infected files: 0 Data scanned: 0.00 MB Data read: 0.00 MB (ratio 0.00:1) Time: 5.854 sec (0 m 5 s) server01: Tue Sep 17 17:00:57 -03 2019: Scanning '/tmp'. ----------- SCAN SUMMARY ----------- Known viruses: 2079304 Engine version: devel-clamav-0.99-beta1-632-g8a582c7 Scanned directories: 0 Scanned files: 0 Infected files: 0 Data scanned: 0.00 MB Data read: 0.00 MB (ratio 0.00:1) Time: 3.873 sec (0 m 3 s) server01: Tue Sep 17 17:01:01 -03 2019: Scan Complete.