You are on page 1of 2

Loading modules, please wait..

****************
AUDIT : greatblo
****************
Downloading latest pattern set..
(147 patterns to search for)
Downloading latest versions set..
public_html/ permissions (0750) okay
Applications installed
----------------------
(* Most recent stable release)
WordPress CMS 3.2.1 GOOD => /home/greatblo/public_html/guiltpill.co
m/
WordPress CMS 3.2.1 GOOD => /home/greatblo/public_html/forexmarketi
ngs.com/
Malicious files
---------------
[Minimum required score: 5.0]
(Tue Jun 28 12:29:59 2011 : 0644) /home/greatblo/public_html/guiltpill.com/wp-co
ntent/themes/twentyten/lol.php [40.0] {Hidden,}
(Sun Jun 26 08:09:39 2011 : 0644) /home/greatblo/public_html/guiltpill.com/wp-co
ntent/plugins/suspend/suspend.php [12.0] {Hidden,}
(Wed May 25 08:36:56 2011 : 0644) /home/greatblo/public_html/forexmarketings.com
/wp-content/themes/stock_news/header.php [19.9] {Hidden,}
(Sun Sep 19 02:05:24 2010 : 0644) /home/greatblo/public_html/forexmarketings.com
/wp-content/plugins/WPShoppingPages/shoppingpages.php [39.8] {Hidden,}
(Tue Apr 26 09:55:03 2011 : 0644) /home/greatblo/public_html/forexmarketings.com
/wp-content/plugins/amazon-showcase-wordpress-widget/log.php [144.9] {Webshell,F
IND_1,HTPASSWD,BASH_HISTORY,HTTPD_CONF,VHOSTS_CONF,PROFTPD_CONF,PSYBNC_CONF,ETC_
PASSWD,ETC_SHADOW,PERL_TMP_EXECUTION,}
(Sun Sep 19 02:05:22 2010 : 0644) /home/greatblo/public_html/forexmarketings.com
/wp-content/plugins/WPRobot/general.php [20.0] {Hidden,}
(Sun Aug 28 22:38:27 2011 : 0644) /home/greatblo/public_html/foolproofmuscleform
ula.com/termsandconditions/conf.php [134.9] {FIND_1,HTPASSWD,BASH_HISTORY,HTTPD_
CONF,VHOSTS_CONF,PROFTPD_CONF,PSYBNC_CONF,ETC_PASSWD,ETC_SHADOW,PERL_TMP_EXECUTI
ON,}
(Sun Aug 28 22:37:07 2011 : 0644) /home/greatblo/public_html/easycashprofessor.c
om/contact/config.php [134.9] {FIND_1,HTPASSWD,BASH_HISTORY,HTTPD_CONF,VHOSTS_CO
NF,PROFTPD_CONF,PSYBNC_CONF,ETC_PASSWD,ETC_SHADOW,PERL_TMP_EXECUTION,}
FTP logins
----------
ControlPanel logins
-------------------
SOURCE DATES
--------------- -----
BACKSTAGE 08/05/2011,08/07/2011,09/04/2011
110.159.150.23 09/04/2011 (23.150.159.110.tm-hsbb.tm.net.my)
110.159.250.14 08/06/2011,08/07/2011 (unknown)
Files modified/uploaded in last 24hrs
-------------------------------------
/home/greatblo/public_html/forexmarketings.com/automaticbacklinks_cache/74becae4
17b26b87dfaaf50fd2ea33f4.cache
/home/greatblo/public_html/forexmarketings.com/automaticbacklinks_cache/7e1b0acd
38cf65d6d12eede908bb0484.cache
/home/greatblo/public_html/forexmarketings.com/automaticbacklinks_cache/a53c27d3
bd83645f2757a2878ed165fc.cache
/home/greatblo/public_html/forexmarketings.com/automaticbacklinks_cache/4697cc77
bb4e702dc03fb7bdc34f2e92.cache
/home/greatblo/public_html/forexmarketings.com/automaticbacklinks_cache/48b2fb8d
d0752a02d5550a4806fb0026.cache
/home/greatblo/public_html/forexmarketings.com/automaticbacklinks_cache/e97fb420
0045b044d1ebc4cee5c070c7.cache
/home/greatblo/public_html/forexmarketings.com/automaticbacklinks_cache/9299f08f
eaad171ea69bd01d571cc993.cache
/home/greatblo/public_html/forexmarketings.com/automaticbacklinks_cache/8b2ba80c
bdd4c491834eb62ccbe3c697.cache
/home/greatblo/public_html/forexmarketings.com/automaticbacklinks_cache/3fcab984
f46607e927db96c4f6b1f0a5.cache
/home/greatblo/public_html/forexmarketings.com/automaticbacklinks_cache/d0b9fe68
99a7729b95291a619470464c.cache
Currently running processes under audited user
----------------------------------------------

You might also like