------------------------------------------------------------------------------- /home/users5/a/almfroid/www/r2.php: PHP.Shell FOUND ------------------------------------------------------------------------------- /home/users5/a/almfroid/www/telechgt/fictec/clients/admin.php: PHP.Trojan.Uploader FOUND /home/users5/a/almfroid/www/owncloud/owncloud/ocs/functions.php: PHP.Trojan.Uploader FOUND /home/users5/a/almfroid/www/owncloud/owncloud/core/avatar/global.php: PHP.Trojan.Uploader FOUND /home/users5/a/almfroid/www/owncloud/owncloud/core/avatar/dump.php: PHP.Trojan.Uploader FOUND /home/users5/a/almfroid/www/owncloud/owncloud/core/avatar/search.php: PHP.Trojan.Uploader FOUND /home/users5/a/almfroid/www/owncloud/owncloud/lib/l10n/lb.php: PHP.Trojan.Uploader FOUND /home/users5/a/almfroid/www/owncloud/owncloud/3rdparty/Sabre/CalDAV/header.php: PHP.Trojan.Uploader FOUND /home/users5/a/almfroid/www/owncloud/owncloud/3rdparty/PEAR/Dependency.php: PHP.Trojan.Uploader FOUND /home/users5/a/almfroid/www/owncloud/owncloud/l10n/si_LK/info.php: Php.Malware.Mailbot-1 FOUND /home/users5/a/almfroid/www/owncloud/owncloud/l10n/fr_CA/inc.php: PHP.Trojan.Uploader FOUND /home/users5/a/almfroid/www/owncloud/owncloud/settings/personal.php: PHP.Trojan.Uploader FOUND /home/users5/a/almfroid/www/owncloud/owncloud/settings/img/admin.php: PHP.Trojan.Uploader FOUND /home/users5/a/almfroid/www/owncloud/owncloud/apps/activity/templates/inc.php: Php.Malware.Mailbot-1 FOUND /home/users5/a/almfroid/www/phenix/FCKeditor/editor/plugins/global.php: PHP.Trojan.Uploader FOUND /home/users5/a/almfroid/www/phenix/skins/PxAccueil-RedMeuhmeuh/code.php: PHP.Trojan.Uploader FOUND /home/users5/a/almfroid/www/phenix/skins/PxStyle-Blue/test.php: PHP.Trojan.Uploader FOUND /home/users5/a/almfroid/www/phenix/skins/Pastel/gallery.php: PHP.Trojan.Uploader FOUND /home/users5/a/almfroid/www/phenix/skins/PxBIG-Vista.php: PHP.Trojan.Uploader FOUND /home/users5/a/almfroid/www/phenix/image/flags/include.php: PHP.Trojan.Uploader FOUND /home/users5/a/almfroid/www/phenix/roundcubemail/program/localization/th_TH/proxy.php: Php.Malware.Mailbot-1 FOUND /home/users5/a/almfroid/www/r2.php: PHP.Shell FOUND /home/users5/a/almfroid/www/wp-includes/ID3/module.audio-video.quicktime.php: PHP.Trojan.Uploader FOUND /home/users5/a/almfroid/www/wp-includes/ID3/module.audio-video.riff.php: PHP.Trojan.Uploader FOUND ------------------------------------------------------------------------------- /home/users5/a/almfroid/www/r2.php.suspected: Win.Trojan.Shell-11 FOUND /home/users5/a/almfroid/www/wp-includes/class-error.php: {HEX}php.mailer.Mzh.510.UNOFFICIAL FOUND /home/users5/a/almfroid/www/wp-includes/wp-xmpp.php: {HEX}php.cmdshell.unclassed.360.UNOFFICIAL FOUND /home/users5/a/almfroid/www/telechgt/fictec/clients/c120000001/PJ/I120000001/stcchatcc.php: {HEX}php.cmdshell.unclassed.360.UNOFFICIAL FOUND /home/users5/a/almfroid/www/telechgt/fictec/clients/admin.php.suspected: Php.Trojan.Uploader-2 FOUND /home/users5/a/almfroid/www/owncloud/owncloud/ocs/functions.php.suspected: Php.Trojan.Uploader-2 FOUND /home/users5/a/almfroid/www/owncloud/owncloud/settings/img/admin.php.suspected: Php.Trojan.Uploader-2 FOUND /home/users5/a/almfroid/www/owncloud/owncloud/3rdparty/Sabre/CalDAV/header.php.suspected: Php.Trojan.Uploader-2 FOUND /home/users5/a/almfroid/www/owncloud/owncloud/core/avatar/dump.php.suspected: Php.Trojan.Uploader-2 FOUND /home/users5/a/almfroid/www/owncloud/owncloud/core/avatar/global.php.suspected: Php.Trojan.Uploader-2 FOUND /home/users5/a/almfroid/www/owncloud/owncloud/core/avatar/search.php.suspected: Php.Trojan.Uploader-2 FOUND /home/users5/a/almfroid/www/owncloud/owncloud/l10n/fr_CA/inc.php.suspected: Php.Trojan.Uploader-2 FOUND /home/users5/a/almfroid/www/phenix/FCKeditor/editor/plugins/global.php.suspected: Php.Trojan.Uploader-2 FOUND /home/users5/a/almfroid/www/phenix/image/flags/include.php.suspected: Php.Trojan.Uploader-2 FOUND /home/users5/a/almfroid/www/phenix/skins/Pastel/gallery.php.suspected: Php.Trojan.Uploader-2 FOUND /home/users5/a/almfroid/www/phenix/skins/PxStyle-Blue/test.php.suspected: Php.Trojan.Uploader-2 FOUND /home/users5/a/almfroid/www/phenix/skins/PxAccueil-RedMeuhmeuh/code.php.suspected: Php.Trojan.Uploader-2 FOUND ------------------------------------------------------------------------------- /home/users5/a/almfroid/www/r2.php.suspected: Win.Trojan.Shell-11 FOUND /home/users5/a/almfroid/www/wp-includes/class-error.php: {HEX}php.mailer.Mzh.510.UNOFFICIAL FOUND /home/users5/a/almfroid/www/wp-includes/wp-xmpp.php: {HEX}php.cmdshell.unclassed.360.UNOFFICIAL FOUND /home/users5/a/almfroid/www/telechgt/fictec/clients/c120000001/PJ/I120000001/stcchatcc.php: {HEX}php.cmdshell.unclassed.360.UNOFFICIAL FOUND /home/users5/a/almfroid/www/telechgt/fictec/clients/admin.php.suspected: Php.Malware.Agent-1426969 FOUND /home/users5/a/almfroid/www/owncloud/owncloud/ocs/functions.php.suspected: Php.Trojan.Uploader-2 FOUND /home/users5/a/almfroid/www/owncloud/owncloud/settings/img/admin.php.suspected: Php.Malware.Agent-1426969 FOUND /home/users5/a/almfroid/www/owncloud/owncloud/3rdparty/Sabre/CalDAV/header.php.suspected: Php.Trojan.Uploader-2 FOUND /home/users5/a/almfroid/www/owncloud/owncloud/core/avatar/dump.php.suspected: Php.Trojan.Uploader-2 FOUND /home/users5/a/almfroid/www/owncloud/owncloud/core/avatar/global.php.suspected: Txt.Malware.Agent-1427593 FOUND /home/users5/a/almfroid/www/owncloud/owncloud/core/avatar/search.php.suspected: Php.Trojan.Uploader-2 FOUND /home/users5/a/almfroid/www/owncloud/owncloud/l10n/fr_CA/inc.php.suspected: Php.Trojan.Uploader-2 FOUND /home/users5/a/almfroid/www/phenix/FCKeditor/editor/plugins/global.php.suspected: Txt.Malware.Agent-1427593 FOUND /home/users5/a/almfroid/www/phenix/image/flags/include.php.suspected: Php.Trojan.Uploader-2 FOUND /home/users5/a/almfroid/www/phenix/skins/Pastel/gallery.php.suspected: Php.Trojan.Uploader-2 FOUND /home/users5/a/almfroid/www/phenix/skins/PxStyle-Blue/test.php.suspected: Txt.Malware.Agent-1427002 FOUND /home/users5/a/almfroid/www/phenix/skins/PxAccueil-RedMeuhmeuh/code.php.suspected: Php.Trojan.Uploader-2 FOUND ------------------------------------------------------------------------------- /home/users5/a/almfroid/www/wp-content/sol.php: {HEX}base64.inject.unclassed.7.UNOFFICIAL FOUND /home/users5/a/almfroid/www/wp-content/uploads/sol.php: {HEX}base64.inject.unclassed.7.UNOFFICIAL FOUND /home/users5/a/almfroid/www/telechgt/fictec/clients/c120000001/PJ/I120000001/stcchatcc.php: {HEX}php.cmdshell.unclassed.362.UNOFFICIAL FOUND /home/users5/a/almfroid/www/telechgt/fictec/clients/admin.php.suspected: Php.Malware.Agent-1426969 FOUND /home/users5/a/almfroid/www/wp-includes/wp-xmpp.php: {HEX}php.cmdshell.unclassed.362.UNOFFICIAL FOUND /home/users5/a/almfroid/www/wp-includes/class-error.php: {HEX}php.mailer.Mzh.512.UNOFFICIAL FOUND /home/users5/a/almfroid/www/r2.php.suspected: Win.Trojan.Shell-11 FOUND /home/users5/a/almfroid/www/phenix/skins/Petrole/stats.php: {HEX}php.base64.v23au.186.UNOFFICIAL FOUND /home/users5/a/almfroid/www/phenix/skins/PxStyle-Blue/test.php.suspected: Txt.Malware.Agent-1427002 FOUND /home/users5/a/almfroid/www/phenix/skins/PxStyle-Pastel/diff.php: {HEX}php.base64.v23au.186.UNOFFICIAL FOUND /home/users5/a/almfroid/www/phenix/skins/PxAccueil-RedMeuhmeuh/code.php.suspected: Php.Trojan.Uploader-2 FOUND /home/users5/a/almfroid/www/phenix/skins/Pastel/gallery.php.suspected: Php.Trojan.Uploader-2 FOUND /home/users5/a/almfroid/www/phenix/FCKeditor/editor/plugins/global.php.suspected: Txt.Malware.Agent-1427593 FOUND /home/users5/a/almfroid/www/phenix/image/flags/include.php.suspected: Php.Trojan.Uploader-2 FOUND /home/users5/a/almfroid/www/index.php: {HEX}base64.inject.unclassed.7.UNOFFICIAL FOUND /home/users5/a/almfroid/www/owncloud/owncloud/core/avatar/global.php.suspected: Txt.Malware.Agent-1427593 FOUND /home/users5/a/almfroid/www/owncloud/owncloud/core/avatar/dump.php.suspected: Php.Trojan.Uploader-2 FOUND /home/users5/a/almfroid/www/owncloud/owncloud/core/avatar/search.php.suspected: Php.Trojan.Uploader-2 FOUND /home/users5/a/almfroid/www/owncloud/owncloud/3rdparty/Sabre/CalDAV/header.php.suspected: Php.Trojan.Uploader-2 FOUND /home/users5/a/almfroid/www/owncloud/owncloud/l10n/fr_CA/inc.php.suspected: Php.Trojan.Uploader-2 FOUND /home/users5/a/almfroid/www/owncloud/owncloud/ocs/functions.php.suspected: Php.Trojan.Uploader-2 FOUND /home/users5/a/almfroid/www/owncloud/owncloud/settings/img/admin.php.suspected: Php.Malware.Agent-1426969 FOUND ------------------------------------------------------------------------------- /home/users5/a/almfroid/www/wp-content/sol.php: {HEX}base64.inject.unclassed.7.UNOFFICIAL FOUND /home/users5/a/almfroid/www/wp-content/uploads/sol.php: {HEX}base64.inject.unclassed.7.UNOFFICIAL FOUND /home/users5/a/almfroid/www/telechgt/fictec/clients/c120000001/PJ/I120000001/stcchatcc.php: {HEX}php.cmdshell.unclassed.362.UNOFFICIAL FOUND /home/users5/a/almfroid/www/telechgt/fictec/clients/admin.php.suspected: Php.Malware.Agent-1426969 FOUND /home/users5/a/almfroid/www/wp-includes/wp-xmpp.php: {HEX}php.cmdshell.unclassed.362.UNOFFICIAL FOUND /home/users5/a/almfroid/www/wp-includes/class-error.php: {HEX}php.mailer.Mzh.512.UNOFFICIAL FOUND /home/users5/a/almfroid/www/r2.php.suspected: Win.Trojan.Shell-11 FOUND /home/users5/a/almfroid/www/phenix/skins/Petrole/stats.php: {HEX}php.base64.v23au.186.UNOFFICIAL FOUND /home/users5/a/almfroid/www/phenix/skins/PxStyle-Blue/test.php.suspected: Txt.Malware.Agent-1427002 FOUND /home/users5/a/almfroid/www/phenix/skins/PxStyle-Pastel/diff.php: {HEX}php.base64.v23au.186.UNOFFICIAL FOUND /home/users5/a/almfroid/www/phenix/skins/PxAccueil-RedMeuhmeuh/code.php.suspected: Php.Trojan.Uploader-2 FOUND /home/users5/a/almfroid/www/phenix/skins/Pastel/gallery.php.suspected: Php.Trojan.Uploader-2 FOUND /home/users5/a/almfroid/www/phenix/FCKeditor/editor/plugins/global.php.suspected: Txt.Malware.Agent-1427593 FOUND /home/users5/a/almfroid/www/phenix/image/flags/include.php.suspected: Php.Trojan.Uploader-2 FOUND /home/users5/a/almfroid/www/index.php: {HEX}base64.inject.unclassed.7.UNOFFICIAL FOUND /home/users5/a/almfroid/www/owncloud/owncloud/core/avatar/global.php.suspected: Txt.Malware.Agent-1427593 FOUND /home/users5/a/almfroid/www/owncloud/owncloud/core/avatar/dump.php.suspected: Php.Trojan.Uploader-2 FOUND /home/users5/a/almfroid/www/owncloud/owncloud/core/avatar/search.php.suspected: Php.Trojan.Uploader-2 FOUND /home/users5/a/almfroid/www/owncloud/owncloud/3rdparty/Sabre/CalDAV/header.php.suspected: Php.Trojan.Uploader-2 FOUND /home/users5/a/almfroid/www/owncloud/owncloud/l10n/fr_CA/inc.php.suspected: Php.Trojan.Uploader-2 FOUND /home/users5/a/almfroid/www/owncloud/owncloud/ocs/functions.php.suspected: Php.Trojan.Uploader-2 FOUND /home/users5/a/almfroid/www/owncloud/owncloud/settings/img/admin.php.suspected: Php.Malware.Agent-1426969 FOUND