----------- SCAN REPORT -----------
TimeStamp: Mon, 22 Jun 2026 10:28:17 -0400
(/usr/sbin/cxs --background --clamdsock /var/clamd --dbreport --defapache nobody --doptions Mv --exploitscan --nofallback --filemax 50000 --noforce --html --ignore /etc/cxs/cxs.ignore.manual --options mMOLfSGchexdnwZDRru --noprobability --qoptions Mv --report /home/idolaotomotif/scanreport-idolaotomotif-Jun_22_2026_10h28m.txt --sizemax 1000000 --ssl --summary --sversionscan --timemax 30 --unofficial --user idolaotomotif --virusscan --vmrssmax 2000000 --waitscan 0 --xtra /etc/cxs/cxs.xtra.manual)


Scanning /home/idolaotomotif:

'/home/idolaotomotif/.trash/wp-admin__65fd705/js/widgets/widgets/widgets/zIb.jpeg'
# Suspicious image file (hidden script file)

'/home/idolaotomotif/cache/admin.php'
# Universal decode regex match = [universal decoder]
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]]

'/home/idolaotomotif/etc/idolaotomotif.com/admin.php'
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]]

'/home/idolaotomotif/etc/membuatwebsite.biz/admin.php'
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]]

'/home/idolaotomotif/etc/totalcard.biz/admin.php'
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]]

'/home/idolaotomotif/idolatekno.com/wp-includes/js2eda8f/admin.php'
# Universal decode regex match = [universal decoder]
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]]

'/home/idolaotomotif/idolatekno.com/wp-includes/js2eda8f/96/admin.php'
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]]

'/home/idolaotomotif/kineva.net/175496/radio.php'
# Universal decode regex match = [universal decoder]
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]]

'/home/idolaotomotif/mail/admin.php'
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]]

'/home/idolaotomotif/mail/cur/admin.php'
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]]

'/home/idolaotomotif/mail/idolaotomotif.com/admin.php'
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]]

'/home/idolaotomotif/mail/membuatwebsite.biz/admin.php'
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]]

'/home/idolaotomotif/mail/new'
# Skipped - too many resources: 174539 ( > filemax=50000)

'/home/idolaotomotif/mail/tmp/admin.php'
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]]

'/home/idolaotomotif/mail/totalcard.biz/admin.php'
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]]

'/home/idolaotomotif/membuatwebsite.biz/wp-includes'
# World writeable directory

'/home/idolaotomotif/membuatwebsite.biz/wp-includes/js/dist/server-sied-renders.min.js'
# Universal decode regex match = [universal decoder]

'/home/idolaotomotif/public_ftp/incoming'
# World writeable directory

'/home/idolaotomotif/public_ftp/incoming/admin.php'
# Universal decode regex match = [universal decoder]
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]]

'/home/idolaotomotif/public_html/wp-admin/images/media-button-music-2x.gif'
# Suspicious image file (hidden script file)
# Universal decode regex match = [universal decoder]

'/home/idolaotomotif/public_html/wp-includes/images/smilies/icon_twisteds.png'
# Suspicious image file (hidden script file)
# Universal decode regex match = [universal decoder]

'/home/idolaotomotif/public_html/wp-includes/js/dist/server-sied-renders.min.js'
# Universal decode regex match = [universal decoder]

'/home/idolaotomotif/resepsehat.biz/wp-content/plugins/classic-editor/classic-editor.php'
# Script version check [OLD] [Classic Editor v1.6 < v1.6.7]

'/home/idolaotomotif/resepsehat.biz/wp-content/plugins/disable-comments/disable-comments.php'
# Script version check [OLD] [Disable Comments v2.1.0 < v2.4.7]

'/home/idolaotomotif/resepsehat.biz/wp-content/plugins/wordpress-seo/wp-seo.php'
# Script version check [OLD] [Yoast SEO v16.0.2 < v24.9]

'/home/idolaotomotif/resepsehat.biz/wp-content/uploads/js_composer'
# World writeable directory

'/home/idolaotomotif/softaculous_backups/admin.php'
# Universal decode regex match = [universal decoder]
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]]

'/home/idolaotomotif/softaculous_backups/175496/admin.php'
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]]

'/home/idolaotomotif/softaculous_backups/tmp/admin.php'
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]]

'/home/idolaotomotif/ssl/admin.php'
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]]

'/home/idolaotomotif/ssl/certs/admin.php'
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]]

'/home/idolaotomotif/ssl/csrs/admin.php'
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]]

'/home/idolaotomotif/ssl/keys/admin.php'
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]]

'/home/idolaotomotif/tmp/admin.php'
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]]

'/home/idolaotomotif/tmp/analog/admin.php'
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]]

'/home/idolaotomotif/tmp/cpbandwidth/admin.php'
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]]

'/home/idolaotomotif/tmp/pma_template_compiles_idolaotomotif/admin.php'
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]]

'/home/idolaotomotif/tmp/webalizer/admin.php'
# Universal decode regex match = [universal decoder]
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]]

'/home/idolaotomotif/tmp/webalizerftp/admin.php'
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]]

----------- SCAN SUMMARY -----------
Scanned directories: 2031
Scanned files: 14817
Ignored items: 115
Suspicious matches: 47
Viruses found: 0
Fingerprint matches: 27
Data scanned: 675.76 MB
Scan peak memory: 377208 kB
Scan time/item: 0.037 sec
Scan time: 622.751 sec