You are on page 1of 2

Applications installed

---------------------(* Most recent stable release)


WordPress CMS
3.2.1
GOOD
m/
WordPress CMS
3.2.1
GOOD
ngs.com/

=> /home/greatblo/public_html/guiltpill.co
=> /home/greatblo/public_html/forexmarketi

Malicious files
--------------[Minimum required score: 5.0]
(Tue Jun 28 12:29:59 2011 : 0644) /home/greatblo/public_html/guiltpill.com/wp-co
ntent/themes/twentyten/lol.php [40.0] {Hidden,}
(Sun Jun 26 08:09:39 2011 : 0644) /home/greatblo/public_html/guiltpill.com/wp-co
ntent/plugins/suspend/suspend.php [12.0] {Hidden,}
(Wed May 25 08:36:56 2011 : 0644) /home/greatblo/public_html/forexmarketings.com
/wp-content/themes/stock_news/header.php [19.9] {Hidden,}
(Sun Sep 19 02:05:24 2010 : 0644) /home/greatblo/public_html/forexmarketings.com
/wp-content/plugins/WPShoppingPages/shoppingpages.php [39.8] {Hidden,}
(Tue Apr 26 09:55:03 2011 : 0644) /home/greatblo/public_html/forexmarketings.com
/wp-content/plugins/amazon-showcase-wordpress-widget/log.php [144.9] {Webshell,F
IND_1,HTPASSWD,BASH_HISTORY,HTTPD_CONF,VHOSTS_CONF,PROFTPD_CONF,PSYBNC_CONF,ETC_
PASSWD,ETC_SHADOW,PERL_TMP_EXECUTION,}
(Sun Sep 19 02:05:22 2010 : 0644) /home/greatblo/public_html/forexmarketings.com
/wp-content/plugins/WPRobot/general.php [20.0] {Hidden,}
(Sun Aug 28 22:38:27 2011 : 0644) /home/greatblo/public_html/foolproofmuscleform
ula.com/termsandconditions/conf.php [134.9] {FIND_1,HTPASSWD,BASH_HISTORY,HTTPD_
CONF,VHOSTS_CONF,PROFTPD_CONF,PSYBNC_CONF,ETC_PASSWD,ETC_SHADOW,PERL_TMP_EXECUTI
ON,}
(Sun Aug 28 22:37:07 2011 : 0644) /home/greatblo/public_html/easycashprofessor.c
om/contact/config.php [134.9] {FIND_1,HTPASSWD,BASH_HISTORY,HTTPD_CONF,VHOSTS_CO
NF,PROFTPD_CONF,PSYBNC_CONF,ETC_PASSWD,ETC_SHADOW,PERL_TMP_EXECUTION,}
FTP logins
---------ControlPanel logins
------------------SOURCE
DATES
------------------BACKSTAGE
08/05/2011,08/07/2011,09/04/2011
110.159.150.23
09/04/2011 (23.150.159.110.tm-hsbb.tm.net.my)
110.159.250.14
08/06/2011,08/07/2011 (unknown)
Files modified/uploaded in last 24hrs
------------------------------------/home/greatblo/public_html/forexmarketings.com/automaticbacklinks_cache/74becae4
17b26b87dfaaf50fd2ea33f4.cache
/home/greatblo/public_html/forexmarketings.com/automaticbacklinks_cache/7e1b0acd
38cf65d6d12eede908bb0484.cache
/home/greatblo/public_html/forexmarketings.com/automaticbacklinks_cache/a53c27d3
bd83645f2757a2878ed165fc.cache
/home/greatblo/public_html/forexmarketings.com/automaticbacklinks_cache/4697cc77
bb4e702dc03fb7bdc34f2e92.cache
/home/greatblo/public_html/forexmarketings.com/automaticbacklinks_cache/48b2fb8d
d0752a02d5550a4806fb0026.cache
/home/greatblo/public_html/forexmarketings.com/automaticbacklinks_cache/e97fb420

0045b044d1ebc4cee5c070c7.cache
/home/greatblo/public_html/forexmarketings.com/automaticbacklinks_cache/9299f08f
eaad171ea69bd01d571cc993.cache
/home/greatblo/public_html/forexmarketings.com/automaticbacklinks_cache/8b2ba80c
bdd4c491834eb62ccbe3c697.cache
/home/greatblo/public_html/forexmarketings.com/automaticbacklinks_cache/3fcab984
f46607e927db96c4f6b1f0a5.cache
/home/greatblo/public_html/forexmarketings.com/automaticbacklinks_cache/d0b9fe68
99a7729b95291a619470464c.cache
Currently running processes under audited user
----------------------------------------------

You might also like