hk1: Wed Aug 9 21:23:59 EDT 2017: Logging to: /root/tmp/scanlog.1502328239 hk1: Wed Aug 9 21:23:59 EDT 2017: Logging to: /home/icmnestl/.security/scanlog.1502328239 hk1: Wed Aug 9 21:23:59 EDT 2017: Cleaning up. hk1: Wed Aug 9 21:24:00 EDT 2017: Preparing ClamAV. hk1: Wed Aug 9 21:24:33 EDT 2017: Preparation completed. hk1: Wed Aug 9 21:24:33 EDT 2017: Scan directory: /home/icmnestl hk1: Wed Aug 9 21:24:33 EDT 2017: Backup directory: /home/icmnestl/.security/scanbackup.1502328239 hk1: Wed Aug 9 21:24:33 EDT 2017: Scanning. /home/icmnestl/public_html/wp-admin/page76.php: SL-PHP-FILEHACKER-ho.UNOFFICIAL FOUND /home/icmnestl/public_html/wp-admin/user/profile.php: SL-PHP-EVAL_REQUEST-avhr.UNOFFICIAL FOUND /home/icmnestl/public_html/wp-admin/user/profile.php: moved to '/home/icmnestl/.security/scanbackup.1502328239/profile.php' /home/icmnestl/public_html/content/bmnjzwkb.php: SL-PHP-BACKDOOR-GENERIC-yz.UNOFFICIAL FOUND /home/icmnestl/public_html/content/bmnjzwkb.php: moved to '/home/icmnestl/.security/scanbackup.1502328239/bmnjzwkb.php' /home/icmnestl/public_html/wp-includes/js/swfupload/plugins/qhzncsnf.php: PHP.Mailer-9.UNOFFICIAL FOUND /home/icmnestl/public_html/wp-includes/js/swfupload/plugins/qhzncsnf.php: moved to '/home/icmnestl/.security/scanbackup.1502328239/qhzncsnf.php' /home/icmnestl/public_html/wp-includes/js/thickbox/favicon_aa2246.ico: SL-PHP-FILEHACKER-hk.UNOFFICIAL FOUND /home/icmnestl/public_html/wp-includes/js/thickbox/favicon_aa2246.ico: moved to '/home/icmnestl/.security/scanbackup.1502328239/favicon_aa2246.ico' /home/icmnestl/public_html/wp-includes/js/mediaelement/uvojjknu.php: PHP.Mailer-9.UNOFFICIAL FOUND /home/icmnestl/public_html/wp-includes/js/mediaelement/uvojjknu.php: moved to '/home/icmnestl/.security/scanbackup.1502328239/uvojjknu.php' /home/icmnestl/public_html/wp-includes/js/mediaelement/lltzxekx.php: PHP.Mailer-9.UNOFFICIAL FOUND /home/icmnestl/public_html/wp-includes/js/mediaelement/lltzxekx.php: moved to '/home/icmnestl/.security/scanbackup.1502328239/lltzxekx.php' /home/icmnestl/public_html/wp-includes/js/jcrop/gmerivqp.php: PHP.Mailer-9.UNOFFICIAL FOUND /home/icmnestl/public_html/wp-includes/js/jcrop/gmerivqp.php: moved to '/home/icmnestl/.security/scanbackup.1502328239/gmerivqp.php' /home/icmnestl/public_html/wp-includes/ID3/getid3.lib.php: SL-PHP-BACKDOOR-GENERIC-adr.UNOFFICIAL FOUND /home/icmnestl/public_html/wp-includes/ID3/getid3.lib.php: moved to '/home/icmnestl/.security/scanbackup.1502328239/getid3.lib.php' /home/icmnestl/public_html/wp-content/uploads/2015/mktovfpg.php: HG.Shell.14.UNOFFICIAL FOUND /home/icmnestl/public_html/wp-content/uploads/2015/mktovfpg.php: moved to '/home/icmnestl/.security/scanbackup.1502328239/mktovfpg.php' /home/icmnestl/public_html/wp-content/themes/enfold/lang/wzbmmsmb.php: PHP.Mailer-9.UNOFFICIAL FOUND /home/icmnestl/public_html/wp-content/themes/enfold/lang/wzbmmsmb.php: moved to '/home/icmnestl/.security/scanbackup.1502328239/wzbmmsmb.php' /home/icmnestl/public_html/wp-content/themes/enfold/config-layerslider/LayerSlider/views/index.php: SL-PHP-EVAL_REQUEST-avhr.UNOFFICIAL FOUND /home/icmnestl/public_html/wp-content/themes/enfold/config-layerslider/LayerSlider/views/index.php: moved to '/home/icmnestl/.security/scanbackup.1502328239/index.php' /home/icmnestl/public_html/wp-content/themes/gray-gray/css/nqmoqtbf.php: PHP.Mailer-9.UNOFFICIAL FOUND /home/icmnestl/public_html/wp-content/themes/gray-gray/css/nqmoqtbf.php: moved to '/home/icmnestl/.security/scanbackup.1502328239/nqmoqtbf.php' /home/icmnestl/public_html/wp-content/themes/gray-whale/inc/extras.php: SL-PHP-EVAL_REQUEST-avhr.UNOFFICIAL FOUND /home/icmnestl/public_html/wp-content/themes/gray-whale/inc/extras.php: moved to '/home/icmnestl/.security/scanbackup.1502328239/extras.php' /home/icmnestl/public_html/wp-content/themes/black-whale/css/sbbkeysg.php: PHP.Mailer-9.UNOFFICIAL FOUND /home/icmnestl/public_html/wp-content/themes/black-whale/css/sbbkeysg.php: moved to '/home/icmnestl/.security/scanbackup.1502328239/sbbkeysg.php' /home/icmnestl/public_html/wp-content/themes/twentyfourteen/inc/vaobghqk.php: HG.Shell.14.UNOFFICIAL FOUND /home/icmnestl/public_html/wp-content/themes/twentyfourteen/inc/vaobghqk.php: moved to '/home/icmnestl/.security/scanbackup.1502328239/vaobghqk.php' /home/icmnestl/public_html/wp-content/themes/gray-whale-theme/templates/dcnmjthl.php: HG.Shell.14.UNOFFICIAL FOUND /home/icmnestl/public_html/wp-content/themes/gray-whale-theme/templates/dcnmjthl.php: moved to '/home/icmnestl/.security/scanbackup.1502328239/dcnmjthl.php' /home/icmnestl/public_html/wp-content/plugins/akismet/xsdhujpv.php: HG.Shell.14.UNOFFICIAL FOUND /home/icmnestl/public_html/wp-content/plugins/akismet/xsdhujpv.php: moved to '/home/icmnestl/.security/scanbackup.1502328239/xsdhujpv.php' /home/icmnestl/public_html/wp-content/plugins/akismet/akismet.php: SL-PHP-EVAL_REQUEST-avhr.UNOFFICIAL FOUND /home/icmnestl/public_html/wp-content/plugins/akismet/akismet.php: moved to '/home/icmnestl/.security/scanbackup.1502328239/akismet.php' /home/icmnestl/public_html/hostdata3.php: SL-PHP-EVAL_REQUEST-md5-wuq.UNOFFICIAL FOUND ----------- SCAN SUMMARY ----------- Known viruses: 1886881 Engine version: devel-clamav-0.99-beta1-632-g8a582c7 Scanned directories: 325 Scanned files: 2475 Infected files: 20 Data scanned: 114.89 MB Data read: 128.03 MB (ratio 0.90:1) Time: 32.816 sec (0 m 32 s) hk1: Wed Aug 9 21:25:06 EDT 2017: Scanning '/dev/shm'. ----------- SCAN SUMMARY ----------- Known viruses: 1886881 Engine version: devel-clamav-0.99-beta1-632-g8a582c7 Scanned directories: 0 Scanned files: 0 Infected files: 0 Data scanned: 0.00 MB Data read: 0.00 MB (ratio 0.00:1) Time: 4.395 sec (0 m 4 s) hk1: Wed Aug 9 21:25:11 EDT 2017: Scanning '/tmp'. ----------- SCAN SUMMARY ----------- Known viruses: 1886881 Engine version: devel-clamav-0.99-beta1-632-g8a582c7 Scanned directories: 0 Scanned files: 0 Infected files: 0 Data scanned: 0.00 MB Data read: 0.00 MB (ratio 0.00:1) Time: 4.387 sec (0 m 4 s) hk1: Wed Aug 9 21:25:15 EDT 2017: Scan Complete.