----------- SCAN REPORT ----------- TimeStamp: Sun, 5 Jul 2026 06:41:35 -0400 (/usr/sbin/cxs --background --clamdsock /var/clamd --dbreport --defapache nobody --doptions Mv --exploitscan --nofallback --filemax 50000 --noforce --html --ignore /etc/cxs/cxs.ignore.manual --options mMOLfSGchexdnwZDRru --noprobability --qoptions Mv --report /home/apkhrccx/scanreport-apkhrccx-Jul_05_2026_06h41m.txt --sizemax 1000000 --ssl --summary --sversionscan --timemax 30 --unofficial --user apkhrccx --virusscan --vmrssmax 2000000 --waitscan 0 --xtra /etc/cxs/cxs.xtra.manual) Scanning /home/apkhrccx: '/home/apkhrccx/.cpanel/live-engine-connector-ETftEuXI02.sock' # Socket '/home/apkhrccx/.nc_plugin/hidden' # World writeable directory '/home/apkhrccx/.tmb' # World writeable directory '/home/apkhrccx/.trash/index.php' # ClamAV detected virus = [{HEX}php.generic.malware.508.UNOFFICIAL] '/home/apkhrccx/58-q.com.pk/wp-content/themes/twentytwentyfive/styles/colors/index.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P1900]] '/home/apkhrccx/58-q.com.pk/wp-includes/Text/index.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P1900]] '/home/apkhrccx/58-q.com.pk/wp-includes/js/dist/script-modules/index.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P1900]] '/home/apkhrccx/666dgame.net/wp-content/plugins/fast-indexing-api/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php' # Universal decode regex match = [universal decoder] '/home/apkhrccx/666dgame.net/wp-content/plugins/fast-indexing-api/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php' # Universal decode regex match = [universal decoder] '/home/apkhrccx/666wgameapp.pk/wp-content/plugins/easypost/easypost.php' # Universal decode regex match = [universal decoder] '/home/apkhrccx/666wgameapp.pk/wp-content/plugins/hseo/hseo.php' # Universal decode regex match = [universal decoder] '/home/apkhrccx/666wgameapp.pk/wp-content/plugins/wp-default/wp-default.php' # Universal decode regex match = [universal decoder] '/home/apkhrccx/666wgameapp.pk/wp-content/themes/astra/admin/includes/class-astra-menu.php' # Universal decode regex match = [universal decoder] '/home/apkhrccx/8jjgame.com.pk/wp-content/themes/appyn-2/includes/google-api-php-client-master/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php' # Universal decode regex match = [universal decoder] '/home/apkhrccx/8jjgame.com.pk/wp-content/themes/appyn-2/includes/google-api-php-client-master/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php' # Universal decode regex match = [universal decoder] '/home/apkhrccx/apkbeep.com/wp-content__d748a0f/plugins/akismet/_inc/img/logo-nrronrnrrpqrsso.png' # Suspicious image file (hidden script file) # Universal decode regex match = [universal decoder] '/home/apkhrccx/apkbeep.com/wp-content__d748a0f/plugins/akismet/_inc/img/logo-qopnsrnrspnoors.png' # Suspicious image file (hidden script file) # Universal decode regex match = [universal decoder] '/home/apkhrccx/apkbeep.com/wp-content__d748a0f/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php' # Universal decode regex match = [universal decoder] '/home/apkhrccx/apkbeep.com/wp-content__d748a0f/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php' # Universal decode regex match = [universal decoder] '/home/apkhrccx/apkbeep.com/wp-content__d748a0f/themes/appyn/includes/google-api-php-client-master/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php' # Universal decode regex match = [universal decoder] '/home/apkhrccx/apkbeep.com/wp-content__d748a0f/themes/appyn/includes/google-api-php-client-master/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php' # Universal decode regex match = [universal decoder] '/home/apkhrccx/apkbeep.com/wp-includes__d748a0f/Text/Diff/Engine/nrronrnrrpqrsso.ttf' # Universal decode regex match = [universal decoder] '/home/apkhrccx/apkbeep.com/wp-includes__d748a0f/Text/Diff/Engine/qopnsrnrspnoors.ttf' # Universal decode regex match = [universal decoder] '/home/apkhrccx/apkbeep.com/wp-includes__d748a0f/blocks/cover/style-rel.css' # Universal decode regex match = [universal decoder] '/home/apkhrccx/apkbeep.com/wp-includes__d748a0f/certificates/wp-login.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]] '/home/apkhrccx/apkbeep.com/wp-includes__d748a0f/images/w-aeebaeaeecdeffb.gif' # Suspicious image file (hidden script file) # Universal decode regex match = [universal decoder] '/home/apkhrccx/apkbeep.com/wp-includes__d748a0f/images/w-dbcafeaefcabbef.gif' # Suspicious image file (hidden script file) # Universal decode regex match = [universal decoder] '/home/apkhrccx/apkbeep.com/wp-includes__d748a0f/images/wpspin-1x.gif' # Suspicious image file (hidden script file) '/home/apkhrccx/apkbeep.com/wp-includes__d748a0f/images/xit-3x.gif' # Suspicious image file (hidden script file) '/home/apkhrccx/apkbeep.com/wp-includes__d748a0f/images/media/aeebaeaeecdeffb.png' # Suspicious image file (hidden script file) # Universal decode regex match = [universal decoder] '/home/apkhrccx/apkbeep.com/wp-includes__d748a0f/images/media/dbcafeaefcabbef.png' # Suspicious image file (hidden script file) # Universal decode regex match = [universal decoder] '/home/apkhrccx/apkbetpkr.com.pk/wp-content/mu-plugins' # World writeable directory '/home/apkhrccx/apkbetpkr.com.pk/wp-content/plugins/easypost/easypost.php' # Universal decode regex match = [universal decoder] '/home/apkhrccx/apkbetpkr.com.pk/wp-content/plugins/hseo/hseo.php' # Universal decode regex match = [universal decoder] '/home/apkhrccx/apkbetpkr.com.pk/wp-content/plugins/wp-file-manager/lib/codemirror/mode/clike/index.html' # Suspicious file type [application/x-c] '/home/apkhrccx/apkbetpkr.com.pk/wp-content/themes/appyn-1/includes/google-api-php-client-master/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php' # Universal decode regex match = [universal decoder] '/home/apkhrccx/apkbetpkr.com.pk/wp-content/themes/appyn-1/includes/google-api-php-client-master/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php' # Universal decode regex match = [universal decoder] '/home/apkhrccx/apkbets.com.pk/wordpress/wordpress/wordpress/wordpress/wordpress/AYILwSylsmkeU.tif' # Suspicious image file (hidden script file) '/home/apkhrccx/apkbets.com.pk/wordpress/wordpress/wordpress/wordpress/wordpress/uSpWNqMFaXYA.png' # Suspicious image file (hidden script file) '/home/apkhrccx/apkbets.com.pk/wp-admin/css/colors/ocean/ocean/alIygRckZrNM.tif' # Suspicious image file (hidden script file) '/home/apkhrccx/apkbets.com.pk/wp-content/plugins/akismet/_inc/img/logo-nrpqrnrnppqq.png' # Suspicious image file (hidden script file) # Universal decode regex match = [universal decoder] '/home/apkhrccx/apkbets.com.pk/wp-content/themes/appyn-1/includes/google-api-php-client-master/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php' # Universal decode regex match = [universal decoder] '/home/apkhrccx/apkbets.com.pk/wp-content/themes/appyn-1/includes/google-api-php-client-master/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php' # Universal decode regex match = [universal decoder] '/home/apkhrccx/apkbets.com.pk/wp-content/uploads/wp-file-manager-pro/fm_backup/fm_backup/a.tiff' # Suspicious image file (hidden script file) '/home/apkhrccx/apkbets.com.pk/wp-includes/Text/Diff/Engine/nrpqrnrnppqq.ttf' # Universal decode regex match = [universal decoder] '/home/apkhrccx/apkbets.com.pk/wp-includes/blocks/cover/style-rel.css' # Universal decode regex match = [universal decoder] '/home/apkhrccx/apkbets.com.pk/wp-includes/images/w-aecdeaeaccdd.gif' # Suspicious image file (hidden script file) # Universal decode regex match = [universal decoder] '/home/apkhrccx/apkbets.com.pk/wp-includes/images/wpspin-1x.gif' # Suspicious image file (hidden script file) '/home/apkhrccx/apkbets.com.pk/wp-includes/images/xit-3x.gif' # Suspicious image file (hidden script file) '/home/apkhrccx/apkbets.com.pk/wp-includes/images/media/aecdeaeaccdd.png' # Suspicious image file (hidden script file) # Universal decode regex match = [universal decoder] '/home/apkhrccx/ck777.pk/wp-content/mu-plugins' # World writeable directory '/home/apkhrccx/ck777.pk/wp-content/plugins/easypost/easypost.php' # Universal decode regex match = [universal decoder] '/home/apkhrccx/ck777.pk/wp-content/plugins/fast-indexing-api/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php' # Universal decode regex match = [universal decoder] '/home/apkhrccx/ck777.pk/wp-content/plugins/fast-indexing-api/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php' # Universal decode regex match = [universal decoder] '/home/apkhrccx/ck777.pk/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php' # Universal decode regex match = [universal decoder] '/home/apkhrccx/ck777.pk/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php' # Universal decode regex match = [universal decoder] '/home/apkhrccx/ck777.pk/wp-content/plugins/hseo/hseo.php' # Universal decode regex match = [universal decoder] '/home/apkhrccx/ck777.pk/wp-content/plugins/wp-file-manager/lib/codemirror/mode/clike/index.html' # Suspicious file type [application/x-c] '/home/apkhrccx/gk999.com.pk/wp-content/plugins/fast-indexing-api/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php' # Universal decode regex match = [universal decoder] '/home/apkhrccx/gk999.com.pk/wp-content/plugins/fast-indexing-api/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php' # Universal decode regex match = [universal decoder] '/home/apkhrccx/gk999.com.pk/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php' # Universal decode regex match = [universal decoder] '/home/apkhrccx/gk999.com.pk/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php' # Universal decode regex match = [universal decoder] '/home/apkhrccx/hq177.pk/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php' # Universal decode regex match = [universal decoder] '/home/apkhrccx/hq177.pk/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php' # Universal decode regex match = [universal decoder] '/home/apkhrccx/hq177.pk/wp-content/plugins/hseo/hseo.php' # Universal decode regex match = [universal decoder] '/home/apkhrccx/hq177.pk/wp-content/themes/appyn-1/includes/google-api-php-client-master/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php' # Universal decode regex match = [universal decoder] '/home/apkhrccx/hq177.pk/wp-content/themes/appyn-1/includes/google-api-php-client-master/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php' # Universal decode regex match = [universal decoder] '/home/apkhrccx/j188gameapp.pk/wp-content/mu-plugins' # World writeable directory '/home/apkhrccx/j188gameapp.pk/wp-content/plugins/easypost/easypost.php' # Universal decode regex match = [universal decoder] '/home/apkhrccx/j188gameapp.pk/wp-content/plugins/fast-indexing-api/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php' # Universal decode regex match = [universal decoder] '/home/apkhrccx/j188gameapp.pk/wp-content/plugins/fast-indexing-api/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php' # Universal decode regex match = [universal decoder] '/home/apkhrccx/j188gameapp.pk/wp-content/plugins/hseo/hseo.php' # Universal decode regex match = [universal decoder] '/home/apkhrccx/j188gameapp.pk/wp-content/plugins/wp-file-manager/lib/codemirror/mode/clike/index.html' # Suspicious file type [application/x-c] '/home/apkhrccx/j188gameapp.pk/wp-content/themes/appyn-17/includes/google-api-php-client-master/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php' # Universal decode regex match = [universal decoder] '/home/apkhrccx/j188gameapp.pk/wp-content/themes/appyn-17/includes/google-api-php-client-master/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php' # Universal decode regex match = [universal decoder] '/home/apkhrccx/pkr-spin.pk/.tmb' # World writeable directory '/home/apkhrccx/pkr-spin.pk/wp-content/mu-plugins' # World writeable directory '/home/apkhrccx/pkr-spin.pk/wp-content/plugins/easypost/easypost.php' # Universal decode regex match = [universal decoder] '/home/apkhrccx/pkr-spin.pk/wp-content/plugins/filester/includes/File_manager/FileManager.php' # Universal decode regex match = [universal decoder] '/home/apkhrccx/pkr-spin.pk/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php' # Universal decode regex match = [universal decoder] '/home/apkhrccx/pkr-spin.pk/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php' # Universal decode regex match = [universal decoder] '/home/apkhrccx/pkr-spin.pk/wp-content/plugins/hseo/hseo.php' # Universal decode regex match = [universal decoder] '/home/apkhrccx/pkr-spin.pk/wp-content/plugins/wp-file-manager/lib/codemirror/mode/clike/index.html' # Suspicious file type [application/x-c] '/home/apkhrccx/public_html/wp-content/themes/appyn-15/includes/google-api-php-client-master/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php' # Universal decode regex match = [universal decoder] '/home/apkhrccx/public_html/wp-content/themes/appyn-15/includes/google-api-php-client-master/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php' # Universal decode regex match = [universal decoder] '/home/apkhrccx/public_html/wp-content/themes/appyn-2.0.16/includes/google-api-php-client-master/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php' # Universal decode regex match = [universal decoder] '/home/apkhrccx/public_html/wp-content/themes/appyn-2.0.16/includes/google-api-php-client-master/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php' # Universal decode regex match = [universal decoder] '/home/apkhrccx/rs888.com.pk/wp-content/themes/appyn/includes/google-api-php-client-master/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php' # Universal decode regex match = [universal decoder] '/home/apkhrccx/rs888.com.pk/wp-content/themes/appyn/includes/google-api-php-client-master/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php' # Universal decode regex match = [universal decoder] '/home/apkhrccx/six-177.pk/wp-content/mu-plugins' # World writeable directory '/home/apkhrccx/six-177.pk/wp-content/plugins/easypost/easypost.php' # Universal decode regex match = [universal decoder] '/home/apkhrccx/six-177.pk/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php' # Universal decode regex match = [universal decoder] '/home/apkhrccx/six-177.pk/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php' # Universal decode regex match = [universal decoder] '/home/apkhrccx/winrupees.org/wp-content/plugins/fast-indexing-api/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php' # Universal decode regex match = [universal decoder] '/home/apkhrccx/winrupees.org/wp-content/plugins/fast-indexing-api/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php' # Universal decode regex match = [universal decoder] ----------- SCAN SUMMARY ----------- Scanned directories: 39071 Scanned files: 262226 Ignored items: 1339 Suspicious matches: 108 Viruses found: 1 Fingerprint matches: 4 Data scanned: 6304.35 MB Scan peak memory: 368336 kB Scan time/item: 0.026 sec Scan time: 7912.057 sec