Scan location: /home/customer/public_html  /home/customer/public_html/wp-admin_2022-11-17/sharepoint.zip: uae_logo_strip.png-sharepoint-phishing.UNOFFICIAL FOUND /home/customer/public_html/wp-admin_2022-11-17/index.php: {HEX}php.generic.malware.446.UNOFFICIAL FOUND /home/customer/public_html/wp-admin/index.php: {HEX}php.generic.malware.446.UNOFFICIAL FOUND /home/customer/public_html/.well-known/index.php: {HEX}php.generic.malware.446.UNOFFICIAL FOUND /home/customer/public_html/wp-content/plugins/xgrqynznuq/wp-x.php: {HEX}php.malware.magento.598.UNOFFICIAL FOUND /home/customer/public_html/wp-content/plugins/lbqoayrjgh/wp-x.php: {HEX}php.malware.magento.598.UNOFFICIAL FOUND /home/customer/public_html/wp-content/index.php: {HEX}php.generic.malware.446.UNOFFICIAL FOUND /home/customer/public_html/BidOgqa/fox.php: YARA.WFYARAGEN_G4472_rules_1.UNOFFICIAL FOUND /home/customer/public_html/BidOgqa/unZIPpeRuls.php: YARA.WFYARAGEN_G4472_rules_1.UNOFFICIAL FOUND /home/customer/public_html/BidOgqa/1.zip: YARA.WFYARAGEN_G4472_rules_1.UNOFFICIAL FOUND /home/customer/public_html/index.php: {HEX}php.generic.malware.446.UNOFFICIAL FOUND  Scan location: /home/customer/direct.amzserv.customerfinders.com  /home/customer/direct.amzserv.customerfinders.com/e7tRCiU5dQJ.php: YARA.leafmailer.UNOFFICIAL FOUND /home/customer/direct.amzserv.customerfinders.com/Ap1EIQvbc9x.php: YARA.leafmailer.UNOFFICIAL FOUND /home/customer/direct.amzserv.customerfinders.com/g7k3ynljeIO.php: YARA.WFYARAGEN_G4472_rules_1.UNOFFICIAL FOUND /home/customer/direct.amzserv.customerfinders.com/A8OoFsVbmYg.php: YARA.WFYARAGEN_G4472_rules_1.UNOFFICIAL FOUND /home/customer/direct.amzserv.customerfinders.com/IZAgYd7JaqP.php: YARA.leafmailer.UNOFFICIAL FOUND /home/customer/direct.amzserv.customerfinders.com/rNJ1t7gY3oX.php: YARA.WFYARAGEN_G4472_rules_1.UNOFFICIAL FOUND /home/customer/direct.amzserv.customerfinders.com/IE4bXlHd8xT.php: YARA.leafmailer.UNOFFICIAL FOUND /home/customer/direct.amzserv.customerfinders.com/qTO6QtMad3h.php: YARA.WFYARAGEN_G4472_rules_1.UNOFFICIAL FOUND /home/customer/direct.amzserv.customerfinders.com/LCscBvV6hFE.php: YARA.leafmailer.UNOFFICIAL FOUND /home/customer/direct.amzserv.customerfinders.com/urobcfgb.php: YARA.WFYARAGEN_G4472_rules_1.UNOFFICIAL FOUND /home/customer/direct.amzserv.customerfinders.com/fnjTmVo7CUP.php: YARA.WFYARAGEN_G4472_rules_1.UNOFFICIAL FOUND /home/customer/direct.amzserv.customerfinders.com/yZR35dklNhB.php: YARA.WFYARAGEN_G4472_rules_1.UNOFFICIAL FOUND /home/customer/direct.amzserv.customerfinders.com/Jo4IcAdhOL9.php: YARA.WFYARAGEN_G4472_rules_1.UNOFFICIAL FOUND /home/customer/direct.amzserv.customerfinders.com/ejnyuwus.php: YARA.WFYARAGEN_G4472_rules_1.UNOFFICIAL FOUND /home/customer/direct.amzserv.customerfinders.com/YZicFx7etKL.php: YARA.WFYARAGEN_G4472_rules_1.UNOFFICIAL FOUND /home/customer/direct.amzserv.customerfinders.com/VUsI7obkJui.php: YARA.WFYARAGEN_G4472_rules_1.UNOFFICIAL FOUND /home/customer/direct.amzserv.customerfinders.com/WcnKI8vTquF.php: YARA.WFYARAGEN_G4472_rules_1.UNOFFICIAL FOUND /home/customer/direct.amzserv.customerfinders.com/D26rlGHw5LS.php: YARA.leafmailer.UNOFFICIAL FOUND /home/customer/direct.amzserv.customerfinders.com/3KUsVmIz85H.php: YARA.leafmailer.UNOFFICIAL FOUND /home/customer/direct.amzserv.customerfinders.com/4FpxA5C9HI3.php: YARA.WFYARAGEN_G4472_rules_1.UNOFFICIAL FOUND /home/customer/direct.amzserv.customerfinders.com/GF23XgBv8Dj.php: YARA.leafmailer.UNOFFICIAL FOUND /home/customer/direct.amzserv.customerfinders.com/eFT6WiO1SnG.php: YARA.leafmailer.UNOFFICIAL FOUND /home/customer/direct.amzserv.customerfinders.com/wmdC4F1nPhI.php: YARA.WFYARAGEN_G4472_rules_1.UNOFFICIAL FOUND /home/customer/direct.amzserv.customerfinders.com/WLHbgso3kcX.php: YARA.WFYARAGEN_G4472_rules_1.UNOFFICIAL FOUND /home/customer/direct.amzserv.customerfinders.com/pFjQy7APJDO.php: YARA.WFYARAGEN_G4472_rules_1.UNOFFICIAL FOUND /home/customer/direct.amzserv.customerfinders.com/xwz.php: YARA.php_in_image.UNOFFICIAL FOUND /home/customer/direct.amzserv.customerfinders.com/a86zrWKIf4O.php: YARA.WFYARAGEN_G4472_rules_1.UNOFFICIAL FOUND /home/customer/direct.amzserv.customerfinders.com/kZwfFxVN682.php: YARA.leafmailer.UNOFFICIAL FOUND /home/customer/direct.amzserv.customerfinders.com/YwEgUj1HNBL.php: YARA.WFYARAGEN_G4472_rules_1.UNOFFICIAL FOUND /home/customer/direct.amzserv.customerfinders.com/dgWjhfRDO73.php: YARA.WFYARAGEN_G4472_rules_1.UNOFFICIAL FOUND /home/customer/direct.amzserv.customerfinders.com/okvpfjsp.php: YARA.WFYARAGEN_G4472_rules_1.UNOFFICIAL FOUND /home/customer/direct.amzserv.customerfinders.com/Y7XNJblKkUO.php: YARA.leafmailer.UNOFFICIAL FOUND /home/customer/direct.amzserv.customerfinders.com/It3fnhsqNdT.php: YARA.leafmailer.UNOFFICIAL FOUND /home/customer/direct.amzserv.customerfinders.com/qvjrTFinCg4.php: YARA.leafmailer.UNOFFICIAL FOUND /home/customer/direct.amzserv.customerfinders.com/Zy6OxzPh4n9.php: YARA.leafmailer.UNOFFICIAL FOUND /home/customer/direct.amzserv.customerfinders.com/YzjcfZ2s1t5.php: YARA.leafmailer.UNOFFICIAL FOUND /home/customer/direct.amzserv.customerfinders.com/LGuPNlExOhm.php: YARA.WFYARAGEN_G4472_rules_1.UNOFFICIAL FOUND /home/customer/direct.amzserv.customerfinders.com/M6Czg3vtZHr.php: YARA.WFYARAGEN_G4472_rules_1.UNOFFICIAL FOUND /home/customer/direct.amzserv.customerfinders.com/YHI1q2nXdpz.php: YARA.leafmailer.UNOFFICIAL FOUND /home/customer/direct.amzserv.customerfinders.com/LaYVJtIk9yE.php: YARA.WFYARAGEN_G4472_rules_1.UNOFFICIAL FOUND /home/customer/direct.amzserv.customerfinders.com/w8l1V5yRIFm.php: YARA.WFYARAGEN_G4472_rules_1.UNOFFICIAL FOUND /home/customer/direct.amzserv.customerfinders.com/MndFQt95hvL.php: YARA.WFYARAGEN_G4472_rules_1.UNOFFICIAL FOUND /home/customer/direct.amzserv.customerfinders.com/wp-conflg-semple.php: YARA.WFYARAGEN_G4472_rules_1.UNOFFICIAL FOUND /home/customer/direct.amzserv.customerfinders.com/Joust9HUqZQ.php: YARA.WFYARAGEN_G4472_rules_1.UNOFFICIAL FOUND /home/customer/direct.amzserv.customerfinders.com/vmdspbdh.php: YARA.WFYARAGEN_G4472_rules_1.UNOFFICIAL FOUND /home/customer/direct.amzserv.customerfinders.com/g9bAejU5VYf.php: YARA.WFYARAGEN_G4472_rules_1.UNOFFICIAL FOUND /home/customer/direct.amzserv.customerfinders.com/brjtrdup.php: YARA.WFYARAGEN_G4472_rules_1.UNOFFICIAL FOUND /home/customer/direct.amzserv.customerfinders.com/TwmcJYQn43o.php: YARA.leafmailer.UNOFFICIAL FOUND /home/customer/direct.amzserv.customerfinders.com/WGmsXYNTdQM.php: YARA.WFYARAGEN_G4472_rules_1.UNOFFICIAL FOUND /home/customer/direct.amzserv.customerfinders.com/GBxgzH9bQXN.php: YARA.WFYARAGEN_G4472_rules_1.UNOFFICIAL FOUND /home/customer/direct.amzserv.customerfinders.com/RFo8Eb9WCsw.php: YARA.WFYARAGEN_G4472_rules_1.UNOFFICIAL FOUND /home/customer/direct.amzserv.customerfinders.com/CTVzaMZlQEx.php: YARA.WFYARAGEN_G4472_rules_1.UNOFFICIAL FOUND /home/customer/direct.amzserv.customerfinders.com/ey6mGv1uVFL.php: YARA.WFYARAGEN_G4472_rules_1.UNOFFICIAL FOUND /home/customer/direct.amzserv.customerfinders.com/y1sUEIatLY7.php: YARA.WFYARAGEN_G4472_rules_1.UNOFFICIAL FOUND /home/customer/direct.amzserv.customerfinders.com/pnwWUSrI4GD.php: YARA.leafmailer.UNOFFICIAL FOUND /home/customer/direct.amzserv.customerfinders.com/CJnywKQIs17.php: YARA.WFYARAGEN_G4472_rules_1.UNOFFICIAL FOUND /home/customer/direct.amzserv.customerfinders.com/index.php: {HEX}php.generic.malware.446.UNOFFICIAL FOUND /home/customer/direct.amzserv.customerfinders.com/J9AKFckoy1m.php: YARA.leafmailer.UNOFFICIAL FOUND /home/customer/direct.amzserv.customerfinders.com/DlnY1UKVbiE.php: YARA.WFYARAGEN_G4472_rules_1.UNOFFICIAL FOUND /home/customer/direct.amzserv.customerfinders.com/KiSVztCnq37.php: YARA.leafmailer.UNOFFICIAL FOUND /home/customer/direct.amzserv.customerfinders.com/403.php: {HEX}php.cmdshell.rgod.362.UNOFFICIAL FOUND /home/customer/direct.amzserv.customerfinders.com/sKRTmpVyEnw.php: YARA.leafmailer.UNOFFICIAL FOUND /home/customer/direct.amzserv.customerfinders.com/SK8lI7khr3H.php: YARA.leafmailer.UNOFFICIAL FOUND /home/customer/direct.amzserv.customerfinders.com/fKeZsjCJzvB.php: YARA.leafmailer.UNOFFICIAL FOUND /home/customer/direct.amzserv.customerfinders.com/61qDjF5iScl.php: YARA.WFYARAGEN_G4472_rules_1.UNOFFICIAL FOUND Change timestamps on malicious files flagged in the scan ================================================================================ 2023-05-27 09:19:33.582997076 -0400,/home/customer/public_html/wp-admin_2022-11-17/sharepoint.zip 2023-12-25 09:18:17.760392926 -0500,/home/customer/public_html/wp-admin_2022-11-17/index.php 2023-12-25 09:18:21.451479992 -0500,/home/customer/public_html/wp-admin/index.php 2023-12-25 09:18:23.515528677 -0500,/home/customer/public_html/.well-known/index.php 2023-12-11 09:07:13.160896878 -0500,/home/customer/public_html/wp-content/plugins/xgrqynznuq/wp-x.php 2023-12-11 09:06:47.168283770 -0500,/home/customer/public_html/wp-content/plugins/lbqoayrjgh/wp-x.php 2023-12-25 09:18:24.307547360 -0500,/home/customer/public_html/wp-content/index.php 2023-12-11 09:05:06.183901768 -0500,/home/customer/public_html/BidOgqa/fox.php 2023-12-11 09:05:08.114947319 -0500,/home/customer/public_html/BidOgqa/unZIPpeRuls.php 2023-12-08 03:45:25.076500036 -0500,/home/customer/public_html/BidOgqa/1.zip 2023-12-25 09:19:16.968789524 -0500,/home/customer/public_html/index.php 2023-05-25 21:10:14.693833431 -0400,/home/customer/direct.amzserv.customerfinders.com/e7tRCiU5dQJ.php 2023-05-25 21:10:12.747787528 -0400,/home/customer/direct.amzserv.customerfinders.com/Ap1EIQvbc9x.php 2023-05-25 21:10:14.883837913 -0400,/home/customer/direct.amzserv.customerfinders.com/g7k3ynljeIO.php 2023-05-25 21:10:12.707786584 -0400,/home/customer/direct.amzserv.customerfinders.com/A8OoFsVbmYg.php 2023-05-25 21:10:13.086795524 -0400,/home/customer/direct.amzserv.customerfinders.com/IZAgYd7JaqP.php 2023-05-25 21:10:15.464851619 -0400,/home/customer/direct.amzserv.customerfinders.com/rNJ1t7gY3oX.php 2023-05-25 21:10:13.046794582 -0400,/home/customer/direct.amzserv.customerfinders.com/IE4bXlHd8xT.php 2023-05-25 21:10:15.368849354 -0400,/home/customer/direct.amzserv.customerfinders.com/qTO6QtMad3h.php 2023-05-25 21:10:13.498805243 -0400,/home/customer/direct.amzserv.customerfinders.com/LCscBvV6hFE.php 2023-05-25 21:10:15.612855109 -0400,/home/customer/direct.amzserv.customerfinders.com/urobcfgb.php 2023-05-25 21:10:14.869837584 -0400,/home/customer/direct.amzserv.customerfinders.com/fnjTmVo7CUP.php 2023-05-25 21:10:16.030864969 -0400,/home/customer/direct.amzserv.customerfinders.com/yZR35dklNhB.php 2023-05-25 21:10:13.283800171 -0400,/home/customer/direct.amzserv.customerfinders.com/Jo4IcAdhOL9.php 2023-05-25 21:10:14.793835790 -0400,/home/customer/direct.amzserv.customerfinders.com/ejnyuwus.php 2023-05-25 21:10:14.153820694 -0400,/home/customer/direct.amzserv.customerfinders.com/YZicFx7etKL.php 2023-05-25 21:10:13.866813923 -0400,/home/customer/direct.amzserv.customerfinders.com/VUsI7obkJui.php 2023-05-25 21:10:14.009817298 -0400,/home/customer/direct.amzserv.customerfinders.com/WcnKI8vTquF.php 2023-05-25 21:10:12.826789393 -0400,/home/customer/direct.amzserv.customerfinders.com/D26rlGHw5LS.php 2023-05-25 21:10:12.601784085 -0400,/home/customer/direct.amzserv.customerfinders.com/3KUsVmIz85H.php 2023-05-25 21:10:12.667785641 -0400,/home/customer/direct.amzserv.customerfinders.com/4FpxA5C9HI3.php 2023-05-25 21:10:12.939792057 -0400,/home/customer/direct.amzserv.customerfinders.com/GF23XgBv8Dj.php 2023-05-25 21:10:14.792835766 -0400,/home/customer/direct.amzserv.customerfinders.com/eFT6WiO1SnG.php 2023-05-25 21:10:15.742858176 -0400,/home/customer/direct.amzserv.customerfinders.com/wmdC4F1nPhI.php 2023-05-25 21:10:13.991816872 -0400,/home/customer/direct.amzserv.customerfinders.com/WLHbgso3kcX.php 2023-05-25 21:10:15.188845108 -0400,/home/customer/direct.amzserv.customerfinders.com/pFjQy7APJDO.php 2023-05-25 21:10:16.016864639 -0400,/home/customer/direct.amzserv.customerfinders.com/xwz.php 2023-05-25 21:10:14.552830105 -0400,/home/customer/direct.amzserv.customerfinders.com/a86zrWKIf4O.php 2023-05-25 21:10:15.039841594 -0400,/home/customer/direct.amzserv.customerfinders.com/kZwfFxVN682.php 2023-05-25 21:10:14.207821968 -0400,/home/customer/direct.amzserv.customerfinders.com/YwEgUj1HNBL.php 2023-05-25 21:10:14.676833030 -0400,/home/customer/direct.amzserv.customerfinders.com/dgWjhfRDO73.php 2023-05-25 21:10:15.122843551 -0400,/home/customer/direct.amzserv.customerfinders.com/okvpfjsp.php 2023-05-25 21:10:14.122819961 -0400,/home/customer/direct.amzserv.customerfinders.com/Y7XNJblKkUO.php 2023-05-25 21:10:13.251799418 -0400,/home/customer/direct.amzserv.customerfinders.com/It3fnhsqNdT.php 2023-05-25 21:10:15.443851123 -0400,/home/customer/direct.amzserv.customerfinders.com/qvjrTFinCg4.php 2023-05-25 21:10:14.288823879 -0400,/home/customer/direct.amzserv.customerfinders.com/Zy6OxzPh4n9.php 2023-05-25 21:10:14.277823618 -0400,/home/customer/direct.amzserv.customerfinders.com/YzjcfZ2s1t5.php 2023-05-25 21:10:13.517805691 -0400,/home/customer/direct.amzserv.customerfinders.com/LGuPNlExOhm.php 2023-05-25 21:10:13.626808263 -0400,/home/customer/direct.amzserv.customerfinders.com/M6Czg3vtZHr.php 2023-05-25 21:10:14.136820292 -0400,/home/customer/direct.amzserv.customerfinders.com/YHI1q2nXdpz.php 2023-05-25 21:10:13.611807908 -0400,/home/customer/direct.amzserv.customerfinders.com/LaYVJtIk9yE.php 2023-05-25 21:10:15.680856713 -0400,/home/customer/direct.amzserv.customerfinders.com/w8l1V5yRIFm.php 2023-05-25 21:10:13.654808923 -0400,/home/customer/direct.amzserv.customerfinders.com/MndFQt95hvL.php 2023-05-25 21:10:15.770858837 -0400,/home/customer/direct.amzserv.customerfinders.com/wp-conflg-semple.php 2023-05-25 21:10:13.313800877 -0400,/home/customer/direct.amzserv.customerfinders.com/Joust9HUqZQ.php 2023-05-25 21:10:15.612855109 -0400,/home/customer/direct.amzserv.customerfinders.com/vmdspbdh.php 2023-05-25 21:10:14.940839257 -0400,/home/customer/direct.amzserv.customerfinders.com/g9bAejU5VYf.php 2023-05-25 21:10:14.552830106 -0400,/home/customer/direct.amzserv.customerfinders.com/brjtrdup.php 2023-05-25 21:10:13.838813263 -0400,/home/customer/direct.amzserv.customerfinders.com/TwmcJYQn43o.php 2023-05-25 21:10:13.938815621 -0400,/home/customer/direct.amzserv.customerfinders.com/WGmsXYNTdQM.php 2023-05-25 21:10:12.902791185 -0400,/home/customer/direct.amzserv.customerfinders.com/GBxgzH9bQXN.php 2023-05-25 21:10:13.764811518 -0400,/home/customer/direct.amzserv.customerfinders.com/RFo8Eb9WCsw.php 2023-05-25 21:10:12.817789179 -0400,/home/customer/direct.amzserv.customerfinders.com/CTVzaMZlQEx.php 2023-05-25 21:10:14.835836781 -0400,/home/customer/direct.amzserv.customerfinders.com/ey6mGv1uVFL.php 2023-05-25 21:10:16.016864640 -0400,/home/customer/direct.amzserv.customerfinders.com/y1sUEIatLY7.php 2023-05-25 21:10:15.213845698 -0400,/home/customer/direct.amzserv.customerfinders.com/pnwWUSrI4GD.php 2023-05-25 21:10:12.785788426 -0400,/home/customer/direct.amzserv.customerfinders.com/CJnywKQIs17.php 2023-12-25 09:19:16.917788320 -0500,/home/customer/direct.amzserv.customerfinders.com/index.php 2023-05-25 21:10:13.269799842 -0400,/home/customer/direct.amzserv.customerfinders.com/J9AKFckoy1m.php 2023-05-25 21:10:12.852790005 -0400,/home/customer/direct.amzserv.customerfinders.com/DlnY1UKVbiE.php 2023-05-25 21:10:13.318800999 -0400,/home/customer/direct.amzserv.customerfinders.com/KiSVztCnq37.php 2023-05-25 21:10:12.644785098 -0400,/home/customer/direct.amzserv.customerfinders.com/403.php 2023-05-25 21:10:15.485852113 -0400,/home/customer/direct.amzserv.customerfinders.com/sKRTmpVyEnw.php 2023-05-25 21:10:13.820812838 -0400,/home/customer/direct.amzserv.customerfinders.com/SK8lI7khr3H.php 2023-05-25 21:10:14.849837111 -0400,/home/customer/direct.amzserv.customerfinders.com/fKeZsjCJzvB.php 2023-05-25 21:10:12.683786020 -0400,/home/customer/direct.amzserv.customerfinders.com/61qDjF5iScl.php