----------- SCAN REPORT -----------
TimeStamp: Wed, 28 Jan 2026 03:26:05 -0500
(/usr/sbin/cxs --clamdsock /var/clamd --dbreport --defapache nobody --doptions Mv --exploitscan --nofallback --filemax 50000 --noforce --html --ignore /tmp/iddeczhh.nomail --options mMOLfSGchexdnwZDRru --noprobability --qoptions Mv --report /home/iddeczhh/scanreport-iddeczhh-2026-01-28T08:26:04.373111.txt --sizemax 1000000 --ssl --summary --sversionscan --timemax 30 --unofficial --user iddeczhh --virusscan --vmrssmax 2000000 --waitscan 0 --xtra /etc/cxs/cxs.xtra.manual)


Scanning /home/iddeczhh:

'/home/iddeczhh/.cagefs/opt/alt/php52/link/conf'
# Symlink to [/opt/alt/php52/etc/php.d]

'/home/iddeczhh/.cagefs/opt/alt/php53/link/conf'
# Symlink to [/opt/alt/php53/etc/php.d]

'/home/iddeczhh/.cagefs/opt/alt/php54/link/conf'
# Symlink to [/opt/alt/php54/etc/php.d]

'/home/iddeczhh/.cagefs/opt/alt/php55/link/conf'
# Symlink to [/opt/alt/php55/etc/php.d]

'/home/iddeczhh/.cagefs/opt/alt/php56/link/conf'
# Symlink to [/opt/alt/php56/etc/php.d]

'/home/iddeczhh/.cagefs/opt/alt/php70/link/conf'
# Symlink to [/opt/alt/php70/etc/php.d]

'/home/iddeczhh/.cagefs/opt/alt/php71/link/conf'
# Symlink to [/opt/alt/php71/etc/php.d]

'/home/iddeczhh/.cagefs/opt/alt/php72/link/conf'
# Symlink to [/opt/alt/php72/etc/php.d]

'/home/iddeczhh/.cagefs/opt/alt/php73/link/conf'
# Symlink to [/opt/alt/php73/etc/php.d]

'/home/iddeczhh/.cagefs/opt/alt/php74/link/conf'
# Symlink to [/opt/alt/php74/etc/php.d]

'/home/iddeczhh/.cagefs/opt/alt/php80/link/conf'
# Symlink to [/opt/alt/php80/etc/php.d]

'/home/iddeczhh/.cagefs/opt/alt/php81/link/conf'
# Symlink to [/etc/cl.php.d/alt-php81]

'/home/iddeczhh/.cagefs/opt/alt/php82/link/conf'
# Symlink to [/opt/alt/php82/etc/php.d]

'/home/iddeczhh/.cagefs/opt/alt/php83/link/conf'
# Symlink to [/opt/alt/php83/etc/php.d]

'/home/iddeczhh/.cagefs/opt/alt/php84/link/conf'
# Symlink to [/opt/alt/php84/etc/php.d]

'/home/iddeczhh/.cagefs/opt/alt/php85/link/conf'
# Symlink to [/opt/alt/php85/etc/php.d]

'/home/iddeczhh/.cagefs/tmp/.s.PGSQL.5432'
# Symlink to [/var/run/postgres/.s.PGSQL.5432]

'/home/iddeczhh/.cagefs/tmp/____WWNYHW'
# Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1425]]

'/home/iddeczhh/.cagefs/tmp/____f0RcOT'
# Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1425]]

'/home/iddeczhh/.cagefs/tmp/mysql.sock'
# Symlink to [/var/lib/mysql/mysql.sock]

'/home/iddeczhh/.cagefs/tmp/php6VDp2o'
# Known exploit = [Fingerprint Match (md5)] [PHP Exploit]

'/home/iddeczhh/.cagefs/tmp/php86qkpi'
# Known exploit = [Fingerprint Match (md5)] [PHP Exploit]

'/home/iddeczhh/.cagefs/tmp/phpWgpctK'
# Known exploit = [Fingerprint Match (md5)] [PHP Exploit]

'/home/iddeczhh/.cagefs/var/cache'
# World writeable directory

'/home/iddeczhh/.cagefs/var/cache/php-eaccelerator'
# World writeable directory

'/home/iddeczhh/.cagefs/var/php'
# World writeable directory

'/home/iddeczhh/.cagefs/var/php/apm'
# World writeable directory

'/home/iddeczhh/.cagefs/var/php/apm/db'
# World writeable directory

'/home/iddeczhh/.cagefs/var/run/screen'
# World writeable directory

'/home/iddeczhh/.nc_plugin/hidden'
# World writeable directory
# Clamd Error for [SCAN /home/iddeczhh/logs/.php.error.log]: /home/iddeczhh/logs/.php.error.log: Excluded
# Clamd Error for [SCAN /home/iddeczhh/logs/DAV-error.log]: /home/iddeczhh/logs/DAV-error.log: Excluded
# Clamd Error for [SCAN /home/iddeczhh/logs/iddecgroup.com-Jan-2026.gz]: /home/iddeczhh/logs/iddecgroup.com-Jan-2026.gz: Excluded
# Clamd Error for [SCAN /home/iddeczhh/logs/iddecgroup.com-ssl_log-Jan-2026.gz]: /home/iddeczhh/logs/iddecgroup.com-ssl_log-Jan-2026.gz: Excluded
# Clamd Error for [SCAN /home/iddeczhh/logs/roundcube/carddav.log]: /home/iddeczhh/logs/roundcube/carddav.log: Excluded
# Clamd Error for [SCAN /home/iddeczhh/logs/roundcube/carddav_http.log]: /home/iddeczhh/logs/roundcube/carddav_http.log: Excluded
# Clamd Error for [SCAN /home/iddeczhh/logs/roundcube/errors.log]: /home/iddeczhh/logs/roundcube/errors.log: Excluded
# Clamd Error for [SCAN /home/iddeczhh/logs/roundcube/sendmail.log]: /home/iddeczhh/logs/roundcube/sendmail.log: Excluded

'/home/iddeczhh/lscache/b/9/a/b9a8634d70dfa0b3'
# ClamAV detected virus = [YARA.r57shell_php_php.UNOFFICIAL]

'/home/iddeczhh/public_html/.tmb'
# World writeable directory

'/home/iddeczhh/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'
# Universal decode regex match = [universal decoder]

'/home/iddeczhh/public_html/wp-content/plugins/duplicate-post/content.php'
# Universal decode regex match = [universal decoder]
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1425]]

'/home/iddeczhh/public_html/wp-content/plugins/pagelayer-pro/main/content.php'
# Universal decode regex match = [universal decoder]
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1425]]

'/home/iddeczhh/public_html/wp-content/plugins/wp-file-manager/lib/codemirror/mode/clike/index.html'
# Suspicious file type [application/x-c]

'/home/iddeczhh/public_html/wp-content/themes/astra/admin/includes/class-astra-menu.php'
# Universal decode regex match = [universal decoder]
# Clamd Error for [SCAN /home/iddeczhh/tmp/awstats/awstats.iddecgroup.com.conf]: /home/iddeczhh/tmp/awstats/awstats.iddecgroup.com.conf: Excluded
# Clamd Error for [SCAN /home/iddeczhh/tmp/awstats/awstats012025.iddecgroup.com.txt]: /home/iddeczhh/tmp/awstats/awstats012025.iddecgroup.com.txt: Excluded
# Clamd Error for [SCAN /home/iddeczhh/tmp/awstats/awstats012026.iddecgroup.com.txt]: /home/iddeczhh/tmp/awstats/awstats012026.iddecgroup.com.txt: Excluded
# Clamd Error for [SCAN /home/iddeczhh/tmp/awstats/awstats022025.iddecgroup.com.txt]: /home/iddeczhh/tmp/awstats/awstats022025.iddecgroup.com.txt: Excluded
# Clamd Error for [SCAN /home/iddeczhh/tmp/awstats/awstats032025.iddecgroup.com.txt]: /home/iddeczhh/tmp/awstats/awstats032025.iddecgroup.com.txt: Excluded
# Clamd Error for [SCAN /home/iddeczhh/tmp/awstats/awstats042025.iddecgroup.com.txt]: /home/iddeczhh/tmp/awstats/awstats042025.iddecgroup.com.txt: Excluded
# Clamd Error for [SCAN /home/iddeczhh/tmp/awstats/awstats052025.iddecgroup.com.txt]: /home/iddeczhh/tmp/awstats/awstats052025.iddecgroup.com.txt: Excluded
# Clamd Error for [SCAN /home/iddeczhh/tmp/awstats/awstats062025.iddecgroup.com.txt]: /home/iddeczhh/tmp/awstats/awstats062025.iddecgroup.com.txt: Excluded
# Clamd Error for [SCAN /home/iddeczhh/tmp/awstats/awstats072025.iddecgroup.com.txt]: /home/iddeczhh/tmp/awstats/awstats072025.iddecgroup.com.txt: Excluded
# Clamd Error for [SCAN /home/iddeczhh/tmp/awstats/awstats082025.iddecgroup.com.txt]: /home/iddeczhh/tmp/awstats/awstats082025.iddecgroup.com.txt: Excluded
# Clamd Error for [SCAN /home/iddeczhh/tmp/awstats/awstats092025.iddecgroup.com.txt]: /home/iddeczhh/tmp/awstats/awstats092025.iddecgroup.com.txt: Excluded
# Clamd Error for [SCAN /home/iddeczhh/tmp/awstats/awstats102025.iddecgroup.com.txt]: /home/iddeczhh/tmp/awstats/awstats102025.iddecgroup.com.txt: Excluded
# Clamd Error for [SCAN /home/iddeczhh/tmp/awstats/awstats112024.iddecgroup.com.txt]: /home/iddeczhh/tmp/awstats/awstats112024.iddecgroup.com.txt: Excluded
# Clamd Error for [SCAN /home/iddeczhh/tmp/awstats/awstats112025.iddecgroup.com.txt]: /home/iddeczhh/tmp/awstats/awstats112025.iddecgroup.com.txt: Excluded
# Clamd Error for [SCAN /home/iddeczhh/tmp/awstats/awstats122024.iddecgroup.com.txt]: /home/iddeczhh/tmp/awstats/awstats122024.iddecgroup.com.txt: Excluded
# Clamd Error for [SCAN /home/iddeczhh/tmp/awstats/awstats122025.iddecgroup.com.txt]: /home/iddeczhh/tmp/awstats/awstats122025.iddecgroup.com.txt: Excluded
# Clamd Error for [SCAN /home/iddeczhh/tmp/awstats/ssl/awstats.iddecgroup.com.conf]: /home/iddeczhh/tmp/awstats/ssl/awstats.iddecgroup.com.conf: Excluded
# Clamd Error for [SCAN /home/iddeczhh/tmp/awstats/ssl/awstats012025.iddecgroup.com.txt]: /home/iddeczhh/tmp/awstats/ssl/awstats012025.iddecgroup.com.txt: Excluded
# Clamd Error for [SCAN /home/iddeczhh/tmp/awstats/ssl/awstats012026.iddecgroup.com.txt]: /home/iddeczhh/tmp/awstats/ssl/awstats012026.iddecgroup.com.txt: Excluded
# Clamd Error for [SCAN /home/iddeczhh/tmp/awstats/ssl/awstats022025.iddecgroup.com.txt]: /home/iddeczhh/tmp/awstats/ssl/awstats022025.iddecgroup.com.txt: Excluded
# Clamd Error for [SCAN /home/iddeczhh/tmp/awstats/ssl/awstats032025.iddecgroup.com.txt]: /home/iddeczhh/tmp/awstats/ssl/awstats032025.iddecgroup.com.txt: Excluded
# Clamd Error for [SCAN /home/iddeczhh/tmp/awstats/ssl/awstats042025.iddecgroup.com.txt]: /home/iddeczhh/tmp/awstats/ssl/awstats042025.iddecgroup.com.txt: Excluded
# Clamd Error for [SCAN /home/iddeczhh/tmp/awstats/ssl/awstats052025.iddecgroup.com.txt]: /home/iddeczhh/tmp/awstats/ssl/awstats052025.iddecgroup.com.txt: Excluded
# Clamd Error for [SCAN /home/iddeczhh/tmp/awstats/ssl/awstats062025.iddecgroup.com.txt]: /home/iddeczhh/tmp/awstats/ssl/awstats062025.iddecgroup.com.txt: Excluded
# Clamd Error for [SCAN /home/iddeczhh/tmp/awstats/ssl/awstats072025.iddecgroup.com.txt]: /home/iddeczhh/tmp/awstats/ssl/awstats072025.iddecgroup.com.txt: Excluded
# Clamd Error for [SCAN /home/iddeczhh/tmp/awstats/ssl/awstats082025.iddecgroup.com.txt]: /home/iddeczhh/tmp/awstats/ssl/awstats082025.iddecgroup.com.txt: Excluded
# Clamd Error for [SCAN /home/iddeczhh/tmp/awstats/ssl/awstats092025.iddecgroup.com.txt]: /home/iddeczhh/tmp/awstats/ssl/awstats092025.iddecgroup.com.txt: Excluded
# Clamd Error for [SCAN /home/iddeczhh/tmp/awstats/ssl/awstats102025.iddecgroup.com.txt]: /home/iddeczhh/tmp/awstats/ssl/awstats102025.iddecgroup.com.txt: Excluded
# Clamd Error for [SCAN /home/iddeczhh/tmp/awstats/ssl/awstats112024.iddecgroup.com.txt]: /home/iddeczhh/tmp/awstats/ssl/awstats112024.iddecgroup.com.txt: Excluded
# Clamd Error for [SCAN /home/iddeczhh/tmp/awstats/ssl/awstats112025.iddecgroup.com.txt]: /home/iddeczhh/tmp/awstats/ssl/awstats112025.iddecgroup.com.txt: Excluded
# Clamd Error for [SCAN /home/iddeczhh/tmp/awstats/ssl/awstats122024.iddecgroup.com.txt]: /home/iddeczhh/tmp/awstats/ssl/awstats122024.iddecgroup.com.txt: Excluded
# Clamd Error for [SCAN /home/iddeczhh/tmp/awstats/ssl/awstats122025.iddecgroup.com.txt]: /home/iddeczhh/tmp/awstats/ssl/awstats122025.iddecgroup.com.txt: Excluded

----------- SCAN SUMMARY -----------
Scanned directories: 7921
Scanned files: 90574
Ignored items: 127
Suspicious matches: 39
Viruses found: 1
Fingerprint matches: 7
Data scanned: 1356.31 MB
Scan peak memory: 402796 kB
Scan time/item: 0.034 sec
Scan time: 3330.421 sec