----------- SCAN REPORT -----------
TimeStamp: Fri, 18 Jul 2025 08:21:41 -0400
(/usr/sbin/cxs --clamdsock /var/clamd --dbreport --defapache nobody --doptions Mv --exploitscan --nofallback --filemax 10000 --noforce --html --ignore /etc/cxs/cxs.ignore.manual --options mMOLfSGchexdnwZDRru --noprobability --qoptions Mv --report /home/wwwrenee/scan_report-2025-07-18_08-21 --sizemax 1000000 --ssl --summary --sversionscan --timemax 30 --unofficial --user wwwrenee --virusscan --vmrssmax 2000000 --waitscan 0 --xtra /etc/cxs/cxs.xtra.manual)


Scanning /home/wwwrenee:

'/home/wwwrenee/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/wwwrenee]
# Clamd Error for [SCAN /home/wwwrenee/logs/.php.error.log]: /home/wwwrenee/logs/.php.error.log: Excluded
# Clamd Error for [SCAN /home/wwwrenee/logs/DAV-error.log]: /home/wwwrenee/logs/DAV-error.log: Excluded
# Clamd Error for [SCAN /home/wwwrenee/logs/reneesense.com-Jul-2025.gz]: /home/wwwrenee/logs/reneesense.com-Jul-2025.gz: Excluded
# Clamd Error for [SCAN /home/wwwrenee/logs/reneesense.com-ssl_log-Jul-2025.gz]: /home/wwwrenee/logs/reneesense.com-ssl_log-Jul-2025.gz: Excluded
# Clamd Error for [SCAN /home/wwwrenee/logs/roundcube/carddav.log]: /home/wwwrenee/logs/roundcube/carddav.log: Excluded
# Clamd Error for [SCAN /home/wwwrenee/logs/roundcube/errors.log]: /home/wwwrenee/logs/roundcube/errors.log: Excluded
# Clamd Error for [SCAN /home/wwwrenee/logs/roundcube/sendmail.log]: /home/wwwrenee/logs/roundcube/sendmail.log: Excluded

'/home/wwwrenee/public_html/config-main.php'
# Decode regex match = [decode regex: 1]

'/home/wwwrenee/public_html/tmp.zip'
# ClamAV detected virus = [YARA.php_in_image.UNOFFICIAL]

'/home/wwwrenee/public_html/Backup/old_files/wp-content/plugins/akismet/akismet.php'
# Script version check [OLD] [Akismet Anti-spam: Spam Protection v5.3.1 < v5.3.7]

'/home/wwwrenee/public_html/Backup/old_files/wp-content/plugins/defender-security/src/extra/maxmind-db/reader/ext/maxminddb.c'
# Suspicious file type [application/x-c]

'/home/wwwrenee/public_html/Backup/old_files/wp-content/plugins/duplicate-page/duplicatepage.php'
# Script version check [OLD] [Duplicate Page v4.5.3 < v4.5.4]

'/home/wwwrenee/public_html/Backup/old_files/wp-content/plugins/elementor/elementor.php'
# Script version check [OLD] [Elementor v3.11.3 < v3.28.4]

'/home/wwwrenee/public_html/Backup/old_files/wp-content/plugins/elementor/core/frontend/frontend/TPKYQACBpWsbL.gif'
# Suspicious image file (hidden script file)

'/home/wwwrenee/public_html/Backup/old_files/wp-content/plugins/elementor/core/frontend/frontend/cache.php'
# Decode regex match = [decode regex: 1]

'/home/wwwrenee/public_html/Backup/old_files/wp-content/plugins/elfsight-instagram-feed-cc/api/api-options.php'
# Universal decode regex match = [universal decoder]

'/home/wwwrenee/public_html/Backup/old_files/wp-content/plugins/google-site-kit/google-site-kit.php'
# Script version check [OLD] [Site Kit by Google v1.121.0 < v1.151.0]

'/home/wwwrenee/public_html/Backup/old_files/wp-content/plugins/hummingbird-performance/wp-hummingbird.php'
# Script version check [OLD] [Hummingbird v3.4.2 < v3.13.0]

'/home/wwwrenee/public_html/Backup/old_files/wp-content/plugins/hummingbird-performance/vendor/predis/predis/src/Replication/Replication/cache.php'
# Decode regex match = [decode regex: 1]

'/home/wwwrenee/public_html/Backup/old_files/wp-content/plugins/ithemes-security-pro/pro/webauthn/entries/profile/profile/cache.php'
# Decode regex match = [decode regex: 1]

'/home/wwwrenee/public_html/Backup/old_files/wp-content/plugins/jetpack/jetpack.php'
# Script version check [OLD] [Jetpack v12.2.1 < v14.5]

'/home/wwwrenee/public_html/Backup/old_files/wp-content/plugins/jetpack/extensions/plugins/site-editor-snackbars/site-editor-snackbars/cache.php'
# Decode regex match = [decode regex: 1]

'/home/wwwrenee/public_html/Backup/old_files/wp-content/plugins/jetpack/modules/masterbar/admin-menu/class-admin-menu.php'
# Universal decode regex match = [universal decoder]

'/home/wwwrenee/public_html/Backup/old_files/wp-content/plugins/mailchimp-for-wp/mailchimp-for-wp.php'
# Script version check [OLD] [MC4WP: Mailchimp for WordPress v4.9.11 < v4.10.3]

'/home/wwwrenee/public_html/Backup/old_files/wp-content/plugins/one-click-demo-import/one-click-demo-import.php'
# Script version check [OLD] [One Click Demo Import v3.2.0 < v3.3.0]

'/home/wwwrenee/public_html/Backup/old_files/wp-content/plugins/stop-spammer-registrations-plugin/modules/chkexploits.php'
# Decode regex match = [decode regex: 1]

'/home/wwwrenee/public_html/Backup/old_files/wp-content/plugins/top-10/includes/frontend/blocks/popular-posts/popular-posts/cache.php'
# Decode regex match = [decode regex: 1]

'/home/wwwrenee/public_html/Backup/old_files/wp-content/plugins/uk-cookie-consent/uk-cookie-consent.php'
# Script version check [OLD] [GDPR/CCPA Cookie Consent Banner v3.2 < v3.3.1]

'/home/wwwrenee/public_html/Backup/old_files/wp-content/plugins/updraftplus/updraftplus.php'
# Script version check [OLD] [UpdraftPlus - Backup/Restore v1.24.1 < v1.25.5]

'/home/wwwrenee/public_html/Backup/old_files/wp-content/plugins/updraftplus/includes/Google/Http/Http/cache.php'
# Decode regex match = [decode regex: 1]

'/home/wwwrenee/public_html/Backup/old_files/wp-content/plugins/woocommerce/woocommerce.php'
# Script version check [OLD] [WooCommerce v7.8.0 < v9.8.2]

'/home/wwwrenee/public_html/Backup/old_files/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'
# Universal decode regex match = [universal decoder]

'/home/wwwrenee/public_html/Backup/old_files/wp-content/plugins/woocommerce/packages/woocommerce-blocks/assets/js/base/context/providers/add-to-cart-form/form/submit/submit/cache.php'
# Decode regex match = [decode regex: 1]

'/home/wwwrenee/public_html/Backup/old_files/wp-content/plugins/woocommerce/packages/woocommerce-blocks/assets/js/blocks/checkout/inner-blocks/checkout-order-summary-coupon-form/checkout-order-summary-coupon-form/cache.php'
# Decode regex match = [decode regex: 1]

'/home/wwwrenee/public_html/Backup/old_files/wp-content/plugins/woocommerce/packages/woocommerce-blocks/assets/js/blocks/mini-cart/mini-cart-contents/inner-blocks/mini-cart-checkout-button-block/mini-cart-checkout-button-block/cache.php'
# Decode regex match = [decode regex: 1]

'/home/wwwrenee/public_html/Backup/old_files/wp-content/plugins/woocommerce/packages/woocommerce-blocks/assets/js/editor-components/product-tag-control/product-tag-control/cache.php'
# Decode regex match = [decode regex: 1]

'/home/wwwrenee/public_html/Backup/old_files/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'
# Universal decode regex match = [universal decoder]

'/home/wwwrenee/public_html/Backup/old_files/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'
# Suspicious file type [application/x-c]

'/home/wwwrenee/public_html/Backup/old_files/wp-content/plugins/woocommerce-payments/woocommerce-payments.php'
# Script version check [OLD] [WooPayments v7.2.0 < v9.2.0]

'/home/wwwrenee/public_html/Backup/old_files/wp-content/plugins/woocommerce-payments/includes/admin/class-wc-payments-admin.php'
# Universal decode regex match = [universal decoder]

'/home/wwwrenee/public_html/Backup/old_files/wp-content/plugins/wordfence/wordfence.php'
# Script version check [OLD] [Wordfence Security v7.9.0 < v8.0.5]

'/home/wwwrenee/public_html/Backup/old_files/wp-content/plugins/wp-reset/wp-reset.php'
# Script version check [OLD] [WP Reset v1.95 < v2.04]

'/home/wwwrenee/public_html/Backup/old_files/wp-content/themes/maxcoach/assets/libs/easing/easing/cache.php'
# (decoded file [depth: 1]) Decode regex match = [decode regex: 1]
# (decoded file [depth: 2]) Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P2223]]

'/home/wwwrenee/public_html/Backup/old_files/wp-content/uploads/js_composer'
# World writeable directory

'/home/wwwrenee/public_html/Backup/old_files/wp-includes/version.php'
# Script version check [OLD] [Wordpress v6.2.2 < v6.8.2]

'/home/wwwrenee/public_html/Backup/wp-admin/includes/class-wp-screen-database.php'
# Known exploit = [Fingerprint Match (md5)] [PHP Shell Exploit]

'/home/wwwrenee/public_html/Backup/wp-content/plugins/akismet/akismet.php'
# Script version check [OLD] [Akismet Anti-Spam v5.0.2 < v5.3.7]

'/home/wwwrenee/public_html/Backup/wp-content/plugins/contact-form-7/wp-contact-form-7.php'
# Script version check [OLD] [Contact Form 7 v5.7.4 < v6.0.6]

'/home/wwwrenee/public_html/Backup/wp-content/plugins/duplicate-page/duplicatepage.php'
# Script version check [OLD] [Duplicate Page v4.5.1 < v4.5.4]

'/home/wwwrenee/public_html/Backup/wp-content/plugins/elementor/elementor.php'
# Script version check [OLD] [Elementor v3.7.4 < v3.28.4]

'/home/wwwrenee/public_html/Backup/wp-content/plugins/elfsight-instagram-feed-cc/api/api-options.php'
# Universal decode regex match = [universal decoder]

'/home/wwwrenee/public_html/Backup/wp-content/plugins/google-site-kit/google-site-kit.php'
# Script version check [OLD] [Site Kit by Google v1.95.0 < v1.151.0]

'/home/wwwrenee/public_html/Backup/wp-content/plugins/hummingbird-performance/wp-hummingbird.php'
# Script version check [OLD] [Hummingbird v3.4.2 < v3.13.0]

'/home/wwwrenee/public_html/Backup/wp-content/plugins/jet-elements/templates/jet-services/jet-services/cache.php'
# Decode regex match = [decode regex: 1]

'/home/wwwrenee/public_html/Backup/wp-content/plugins/jetpack/jetpack.php'
# Script version check [OLD] [Jetpack v11.8.4 < v14.5]

'/home/wwwrenee/public_html/Backup/wp-content/plugins/jetpack/modules/masterbar/admin-menu/class-admin-menu.php'
# Universal decode regex match = [universal decoder]

'/home/wwwrenee/public_html/Backup/wp-content/plugins/jetpack/modules/widgets/contact-info/contact-info/cache.php'
# Decode regex match = [decode regex: 1]

'/home/wwwrenee/public_html/Backup/wp-content/plugins/learnpress/inc/admin/settings/email-groups/email-groups/cache.php'
# Decode regex match = [decode regex: 1]

'/home/wwwrenee/public_html/Backup/wp-content/plugins/mailchimp-for-wp/mailchimp-for-wp.php'
# Script version check [OLD] [MC4WP: Mailchimp for WordPress v4.9.1 < v4.10.3]

'/home/wwwrenee/public_html/Backup/wp-content/plugins/one-click-demo-import/one-click-demo-import.php'
# Script version check [OLD] [One Click Demo Import v3.1.2 < v3.3.0]

'/home/wwwrenee/public_html/Backup/wp-content/plugins/regenerate-thumbnails/regenerate-thumbnails.php'
# Script version check [OLD] [Regenerate Thumbnails v3.1.5 < v3.1.6]

'/home/wwwrenee/public_html/Backup/wp-content/plugins/tuxedo-big-file-uploads/uninstall-schema.php'
# Known exploit = [Fingerprint Match (md5)] [PHP Upload Exploit]

'/home/wwwrenee/public_html/Backup/wp-content/plugins/uk-cookie-consent/uk-cookie-consent.php'
# Script version check [OLD] [Termly | GDPR/CCPA Cookie Consent Banner v3.0.3 < v3.3.1]

'/home/wwwrenee/public_html/Backup/wp-content/plugins/updraftplus/updraftplus.php'
# Script version check [OLD] [UpdraftPlus - Backup/Restore v1.22.24 < v1.25.5]

'/home/wwwrenee/public_html/Backup/wp-content/plugins/woocommerce/woocommerce.php'
# Script version check [OLD] [WooCommerce v7.3.0 < v9.8.2]

'/home/wwwrenee/public_html/Backup/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'
# Universal decode regex match = [universal decoder]

'/home/wwwrenee/public_html/Backup/wp-content/plugins/woocommerce/packages/woocommerce-blocks/assets/js/blocks/mini-cart/mini-cart/cache.php'
# (decoded file [depth: 1]) Decode regex match = [decode regex: 1]
# (decoded file [depth: 2]) Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P2223]]

'/home/wwwrenee/public_html/Backup/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'
# Universal decode regex match = [universal decoder]

'/home/wwwrenee/public_html/Backup/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'
# Suspicious file type [application/x-c]

'/home/wwwrenee/public_html/Backup/wp-content/plugins/woocommerce-payments/woocommerce-payments.php'
# Script version check [OLD] [WooCommerce Payments v5.5.1 < v9.2.0]

'/home/wwwrenee/public_html/Backup/wp-content/plugins/woocommerce-payments/includes/admin/class-wc-payments-admin.php'
# Universal decode regex match = [universal decoder]

'/home/wwwrenee/public_html/Backup/wp-content/plugins/wordfence/wordfence.php'
# Script version check [OLD] [Wordfence Security v7.9.0 < v8.0.5]

'/home/wwwrenee/public_html/Backup/wp-content/plugins/wp-reset/wp-reset.php'
# Script version check [OLD] [WP Reset v1.95 < v2.04]

'/home/wwwrenee/public_html/Backup/wp-content/themes/efor/comments-info.php'
# Known exploit = [Fingerprint Match (md5)] [PHP Upload Exploit]

'/home/wwwrenee/public_html/Backup/wp-content/uploads/js_composer'
# World writeable directory

'/home/wwwrenee/public_html/Backup/wp-includes/functions.wp-styles-client.php'
# Known exploit = [Fingerprint Match (md5)] [PHP Shell Exploit]

'/home/wwwrenee/public_html/Backup/wp-includes/version.php'
# Script version check [OLD] [Wordpress v6.0.2 < v6.8.2]

'/home/wwwrenee/public_html/Backup/wp-includes/Text/Diff/Diff/cache.php'
# (decoded file [depth: 1]) Decode regex match = [decode regex: 1]
# (decoded file [depth: 2]) Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P2223]]

'/home/wwwrenee/public_html/cgi-bin/cgi-bin/cache.php'
# Decode regex match = [decode regex: 1]

'/home/wwwrenee/public_html/cgi-bin/cgi-bin/cgi-bin/cache.php'
# Decode regex match = [decode regex: 1]

'/home/wwwrenee/public_html/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php'
# Decode regex match = [decode regex: 1]

'/home/wwwrenee/public_html/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php'
# Decode regex match = [decode regex: 1]

'/home/wwwrenee/public_html/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php'
# Decode regex match = [decode regex: 1]

'/home/wwwrenee/public_html/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php'
# Decode regex match = [decode regex: 1]

'/home/wwwrenee/public_html/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php'
# Decode regex match = [decode regex: 1]

'/home/wwwrenee/public_html/images/images/cache.php'
# Decode regex match = [decode regex: 1]

'/home/wwwrenee/public_html/images/images/images/cache.php'
# Decode regex match = [decode regex: 1]

'/home/wwwrenee/public_html/images/images/images/images/cache.php'
# Decode regex match = [decode regex: 1]

'/home/wwwrenee/public_html/images/images/images/images/images/cache.php'
# Decode regex match = [decode regex: 1]

'/home/wwwrenee/public_html/images/images/images/images/images/kJhTmGWaK.tif'
# Suspicious image file (hidden script file)

'/home/wwwrenee/public_html/images/images/images/images/images/images/cache.php'
# Decode regex match = [decode regex: 1]

'/home/wwwrenee/public_html/images/images/images/images/images/images/images/cache.php'
# Decode regex match = [decode regex: 1]

'/home/wwwrenee/public_html/images/images/images/images/images/images/images/images/cache.php'
# Decode regex match = [decode regex: 1]

'/home/wwwrenee/public_html/wp-admin/tmp.zip'
# ClamAV detected virus = [YARA.php_in_image.UNOFFICIAL]

'/home/wwwrenee/public_html/wp-admin/css/colors/coffee/coffee/cache.php'
# Decode regex match = [decode regex: 1]

'/home/wwwrenee/public_html/wp-admin/css/colors/colors/HnXVbCrqZActlgFNG.gif'
# Suspicious image file (hidden script file)

'/home/wwwrenee/public_html/wp-admin/css/colors/colors/cache.php'
# Decode regex match = [decode regex: 1]

'/home/wwwrenee/public_html/wp-admin/css/colors/midnight/midnight/cache.php'
# Decode regex match = [decode regex: 1]

'/home/wwwrenee/public_html/wp-admin/css/colors/sunrise/sunrise/cache.php'
# Decode regex match = [decode regex: 1]

'/home/wwwrenee/public_html/wp-admin/css/css/cache.php'
# Decode regex match = [decode regex: 1]

'/home/wwwrenee/public_html/wp-admin/images/images/cache.php'
# Decode regex match = [decode regex: 1]

'/home/wwwrenee/public_html/wp-admin/includes/class-ftp-sockets-request.php'
# Known exploit = [Fingerprint Match (md5)] [PHP Shell Exploit]

'/home/wwwrenee/public_html/wp-admin/includes/includes/cache.php'
# Decode regex match = [decode regex: 1]

'/home/wwwrenee/public_html/wp-admin/js/widgets/widgets/cache.php'
# Decode regex match = [decode regex: 1]

'/home/wwwrenee/public_html/wp-admin/network/plugin-editor-stack.php'
# Known exploit = [Fingerprint Match (md5)] [PHP Shell Exploit]

'/home/wwwrenee/public_html/wp-admin/network/network/cache.php'
# Decode regex match = [decode regex: 1]

'/home/wwwrenee/public_html/wp-content/plugins/hello.php'
# Known exploit = [Fingerprint Match (fp)] [RFI Exploit [P2255]]

'/home/wwwrenee/public_html/wp-content/plugins/akismet/akismet.php'
# Known exploit = [Fingerprint Match (fp)] [RFI Exploit [P2255]]

'/home/wwwrenee/public_html/wp-content/plugins/akismet/_inc/img/logo-rrrspqnsop.png'
# Suspicious image file (hidden script file)
# Universal decode regex match = [universal decoder]

'/home/wwwrenee/public_html/wp-content/plugins/contact-form-7/wp-contact-form-7.php'
# Script version check [OLD] [Contact Form 7 v5.7.4 < v6.0.6]

'/home/wwwrenee/public_html/wp-content/plugins/duplicate-page/duplicatepage.php'
# Script version check [OLD] [Duplicate Page v4.5.1 < v4.5.4]

'/home/wwwrenee/public_html/wp-content/plugins/elementor/elementor.php'
# Script version check [OLD] [Elementor v3.7.4 < v3.28.4]

'/home/wwwrenee/public_html/wp-content/plugins/elementor/modules/promotions/admin-menu-items/admin-menu-items/VsHtEgCfWvFm.jpg'
# Suspicious image file (hidden script file)

'/home/wwwrenee/public_html/wp-content/plugins/elementor/modules/promotions/admin-menu-items/admin-menu-items/cache.php'
# Decode regex match = [decode regex: 1]

'/home/wwwrenee/public_html/wp-content/plugins/elfsight-instagram-feed-cc/api/api-options.php'
# Universal decode regex match = [universal decoder]

'/home/wwwrenee/public_html/wp-content/plugins/google-site-kit/google-site-kit.php'
# Script version check [OLD] [Site Kit by Google v1.95.0 < v1.151.0]

'/home/wwwrenee/public_html/wp-content/plugins/hummingbird-performance/wp-hummingbird.php'
# Script version check [OLD] [Hummingbird v3.4.2 < v3.13.0]

'/home/wwwrenee/public_html/wp-content/plugins/insta-gallery/includes/view/backend/backend/cache.php'
# Decode regex match = [decode regex: 1]

'/home/wwwrenee/public_html/wp-content/plugins/jet-elements/includes/addons/addons/cache.php'
# Decode regex match = [decode regex: 1]

'/home/wwwrenee/public_html/wp-content/plugins/jetpack/jetpack.php'
# Script version check [OLD] [Jetpack v11.8.4 < v14.5]

'/home/wwwrenee/public_html/wp-content/plugins/jetpack/modules/masterbar/admin-menu/class-admin-menu.php'
# Universal decode regex match = [universal decoder]

'/home/wwwrenee/public_html/wp-content/plugins/jetpack/modules/videopress/js/js/cache.php'
# Decode regex match = [decode regex: 1]

'/home/wwwrenee/public_html/wp-content/plugins/js_composer/assets/less/settings_tabs/settings_tabs/cache.php'
# Decode regex match = [decode regex: 1]

'/home/wwwrenee/public_html/wp-content/plugins/js_composer/assets/less/settings_tabs/settings_tabs/pVkP.tif'
# Suspicious image file (hidden script file)

'/home/wwwrenee/public_html/wp-content/plugins/learnpress-paid-membership-pro/inc/classes/classes/cache.php'
# Decode regex match = [decode regex: 1]

'/home/wwwrenee/public_html/wp-content/plugins/mailchimp-for-wp/mailchimp-for-wp.php'
# Script version check [OLD] [MC4WP: Mailchimp for WordPress v4.9.1 < v4.10.3]

'/home/wwwrenee/public_html/wp-content/plugins/one-click-demo-import/one-click-demo-import.php'
# Script version check [OLD] [One Click Demo Import v3.1.2 < v3.3.0]

'/home/wwwrenee/public_html/wp-content/plugins/paid-memberships-pro/blocks/account-links-section/account-links-section/cache.php'
# Decode regex match = [decode regex: 1]

'/home/wwwrenee/public_html/wp-content/plugins/paid-memberships-pro/includes/lib/lib/cache.php'
# Decode regex match = [decode regex: 1]

'/home/wwwrenee/public_html/wp-content/plugins/pro-elements/modules/forms/submissions/database/repositories/repositories/cache.php'
# Decode regex match = [decode regex: 1]

'/home/wwwrenee/public_html/wp-content/plugins/regenerate-thumbnails/regenerate-thumbnails.php'
# Script version check [OLD] [Regenerate Thumbnails v3.1.5 < v3.1.6]

'/home/wwwrenee/public_html/wp-content/plugins/uk-cookie-consent/uk-cookie-consent.php'
# Script version check [OLD] [Termly | GDPR/CCPA Cookie Consent Banner v3.0.3 < v3.3.1]

'/home/wwwrenee/public_html/wp-content/plugins/updraftplus/options-database.php'
# Known exploit = [Fingerprint Match (md5)] [PHP Upload Exploit]

'/home/wwwrenee/public_html/wp-content/plugins/updraftplus/updraftplus.php'
# Script version check [OLD] [UpdraftPlus - Backup/Restore v1.22.24 < v1.25.5]

'/home/wwwrenee/public_html/wp-content/plugins/updraftplus/vendor/guzzle/guzzle/src/Guzzle/Service/Description/Description/cache.php'
# Decode regex match = [decode regex: 1]

'/home/wwwrenee/public_html/wp-content/plugins/woocommerce/woocommerce.php'
# Script version check [OLD] [WooCommerce v7.3.0 < v9.8.2]

'/home/wwwrenee/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'
# Universal decode regex match = [universal decoder]

'/home/wwwrenee/public_html/wp-content/plugins/woocommerce/packages/woocommerce-blocks/assets/js/base/components/country-input/country-input/cache.php'
# Decode regex match = [decode regex: 1]

'/home/wwwrenee/public_html/wp-content/plugins/woocommerce/packages/woocommerce-blocks/assets/js/base/components/product-name/stories/stories/cache.php'
# Decode regex match = [decode regex: 1]

'/home/wwwrenee/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'
# Universal decode regex match = [universal decoder]

'/home/wwwrenee/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'
# Suspicious file type [application/x-c]

'/home/wwwrenee/public_html/wp-content/plugins/woocommerce-payments/woocommerce-payments.php'
# Script version check [OLD] [WooCommerce Payments v5.5.1 < v9.2.0]

'/home/wwwrenee/public_html/wp-content/plugins/woocommerce-payments/includes/admin/class-wc-payments-admin.php'
# Universal decode regex match = [universal decoder]

'/home/wwwrenee/public_html/wp-content/plugins/woocommerce-payments/includes/payment-methods/payment-methods/VjIybmxlhCpc.gif'
# Suspicious image file (hidden script file)

'/home/wwwrenee/public_html/wp-content/plugins/woocommerce-payments/includes/payment-methods/payment-methods/cache.php'
# Decode regex match = [decode regex: 1]

'/home/wwwrenee/public_html/wp-content/plugins/woocommerce-payments/vendor/woocommerce/subscriptions-core/includes/gateways/paypal/includes/deprecated/deprecated/cache.php'
# Decode regex match = [decode regex: 1]

'/home/wwwrenee/public_html/wp-content/plugins/wordfence/wordfence-class.php'
# Known exploit = [Fingerprint Match (md5)] [PHP Upload Exploit]

'/home/wwwrenee/public_html/wp-content/plugins/wordfence/wordfence.php'
# Script version check [OLD] [Wordfence Security v7.9.0 < v8.0.5]

'/home/wwwrenee/public_html/wp-content/plugins/wordfence/models/page/page/cache.php'
# (decoded file [depth: 1]) Decode regex match = [decode regex: 1]
# (decoded file [depth: 2]) Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P2223]]

'/home/wwwrenee/public_html/wp-content/plugins/wp-console/lib/php-7.4/vendor/symfony/console/Resources/bin/hiddeninput.exe'
# MS Windows Binary/Executable [application/x-winexec]

'/home/wwwrenee/public_html/wp-content/plugins/wp-console/lib/php-8.0/vendor/symfony/console/Question/Question/cache.php'
# Decode regex match = [decode regex: 1]

'/home/wwwrenee/public_html/wp-content/plugins/wp-console/lib/php-8.0/vendor/symfony/console/Resources/bin/hiddeninput.exe'
# MS Windows Binary/Executable [application/x-winexec]

'/home/wwwrenee/public_html/wp-content/plugins/wp-reset/wp-reset.php'
# Script version check [OLD] [WP Reset v1.95 < v2.04]

'/home/wwwrenee/public_html/wp-content/themes/efor/layout-singular-repository.php'
# Known exploit = [Fingerprint Match (md5)] [PHP Upload Exploit]

'/home/wwwrenee/public_html/wp-content/themes/maxcoach/assets/libs/smartresize/smartresize/YaVPRH.tiff'
# Suspicious image file (hidden script file)

'/home/wwwrenee/public_html/wp-content/themes/maxcoach/assets/libs/smartresize/smartresize/cache.php'
# (decoded file [depth: 1]) Decode regex match = [decode regex: 1]
# (decoded file [depth: 2]) Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P2223]]

'/home/wwwrenee/public_html/wp-content/themes/twentytwentyone/searchform-method.php'
# Known exploit = [Fingerprint Match (md5)] [PHP Upload Exploit]

'/home/wwwrenee/public_html/wp-includes/Ipv6.php'
# ClamAV detected virus = [{HEX}php.base64.inject.182.UNOFFICIAL]

'/home/wwwrenee/public_html/wp-includes/connection.php'
# ClamAV detected virus = [{HEX}php.base64.inject.182.UNOFFICIAL]

'/home/wwwrenee/public_html/wp-includes/header.php'
# ClamAV detected virus = [TO-28313.WEBSHELL.dropdown_php_encoded.MD5-8e8dd49cd421ac1289bb12f9549ff881.size-32497.UNOFFICIAL]

'/home/wwwrenee/public_html/wp-includes/https-migration-function.php'
# Known exploit = [Fingerprint Match (md5)] [PHP Shell Exploit]

'/home/wwwrenee/public_html/wp-includes/index.php'
# ClamAV detected virus = [{HEX}php.base64.inject.182.UNOFFICIAL]

'/home/wwwrenee/public_html/wp-includes/system-ctl.php'
# ClamAV detected virus = [{HEX}php.base64.inject.182.UNOFFICIAL]

'/home/wwwrenee/public_html/wp-includes/version.php'
# Script version check [OLD] [Wordpress v6.0.2 < v6.8.2]

'/home/wwwrenee/public_html/wp-includes/wincust.php'
# ClamAV detected virus = [TO-34708.WEBSHELL.1_about.php.MD5-fcfb16d84dedcbf89ab5b6a1835dbb77.size-47388.UNOFFICIAL]

'/home/wwwrenee/public_html/wp-includes/wp-22.php'
# Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P1974]]

'/home/wwwrenee/public_html/wp-includes/ID3/module.audio.flac-ajax-response.php'
# Known exploit = [Fingerprint Match (md5)] [PHP Shell Exploit]

'/home/wwwrenee/public_html/wp-includes/SimplePie/Decode/HTML/HTML/cache.php'
# Decode regex match = [decode regex: 1]

'/home/wwwrenee/public_html/wp-includes/Text/Diff/Engine/rrrspqnsop.ttf'
# Universal decode regex match = [universal decoder]

'/home/wwwrenee/public_html/wp-includes/blocks/comment-author-name/comment-author-name/cache.php'
# Decode regex match = [decode regex: 1]

'/home/wwwrenee/public_html/wp-includes/blocks/comments-pagination-numbers/comments-pagination-numbers/cache.php'
# (decoded file [depth: 1]) Decode regex match = [decode regex: 1]
# (decoded file [depth: 2]) Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P2223]]

'/home/wwwrenee/public_html/wp-includes/blocks/cover/style-rel.css'
# Universal decode regex match = [universal decoder]

'/home/wwwrenee/public_html/wp-includes/blocks/navigation/navigation/cache.php'
# Decode regex match = [decode regex: 1]

'/home/wwwrenee/public_html/wp-includes/blocks/paragraph/paragraph/cache.php'
# (decoded file [depth: 1]) Decode regex match = [decode regex: 1]
# (decoded file [depth: 2]) Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P2223]]

'/home/wwwrenee/public_html/wp-includes/blocks/read-more/read-more/cache.php'
# Decode regex match = [decode regex: 1]

'/home/wwwrenee/public_html/wp-includes/blocks/site-tagline/site-tagline/cache.php'
# Decode regex match = [decode regex: 1]

'/home/wwwrenee/public_html/wp-includes/blocks/site-tagline/site-tagline/uhLEHV.tiff'
# Suspicious image file (hidden script file)

'/home/wwwrenee/public_html/wp-includes/blocks/site-title/site-title/cache.php'
# Decode regex match = [decode regex: 1]

'/home/wwwrenee/public_html/wp-includes/css/dist/editor/editor/cache.php'
# Decode regex match = [decode regex: 1]

'/home/wwwrenee/public_html/wp-includes/images/w-eeefcdafbc.gif'
# Suspicious image file (hidden script file)
# Universal decode regex match = [universal decoder]

'/home/wwwrenee/public_html/wp-includes/images/wpspin-1x.gif'
# Suspicious image file (hidden script file)

'/home/wwwrenee/public_html/wp-includes/images/xit-3x.gif'
# Suspicious image file (hidden script file)

'/home/wwwrenee/public_html/wp-includes/images/media/eeefcdafbc.png'
# Suspicious image file (hidden script file)
# Universal decode regex match = [universal decoder]

'/home/wwwrenee/public_html/wp-includes/images/media/media/ByCsWVKMUtTqx.jpeg'
# Suspicious image file (hidden script file)

'/home/wwwrenee/public_html/wp-includes/images/media/media/cache.php'
# (decoded file [depth: 1]) Decode regex match = [decode regex: 1]
# (decoded file [depth: 2]) Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P2223]]

'/home/wwwrenee/public_html/wp-includes/js/crop/crop/cache.php'
# Decode regex match = [decode regex: 1]

'/home/wwwrenee/public_html/wp-includes/js/mediaelement/mediaelement/cache.php'
# Decode regex match = [decode regex: 1]

'/home/wwwrenee/public_html/wp-includes/js/tinymce/plugins/wpdialogs/wpdialogs/cache.php'
# Decode regex match = [decode regex: 1]

'/home/wwwrenee/public_html/zsXUhZi/cache.php'
# Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P2223]]

'/home/wwwrenee/public_html/zsXUhZi/zsXUhZi/cache.php'
# Decode regex match = [decode regex: 1]

'/home/wwwrenee/public_html/zsXUhZi/zsXUhZi/zsXUhZi/E.jpg'
# Suspicious image file (hidden script file)

'/home/wwwrenee/public_html/zsXUhZi/zsXUhZi/zsXUhZi/KPFNJqySCsATxn.png'
# Suspicious image file (hidden script file)

'/home/wwwrenee/public_html/zsXUhZi/zsXUhZi/zsXUhZi/cache.php'
# (decoded file [depth: 1]) Decode regex match = [decode regex: 1]
# (decoded file [depth: 2]) Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P2223]]

'/home/wwwrenee/public_html/zsXUhZi/zsXUhZi/zsXUhZi/zsXUhZi/cache.php'
# Decode regex match = [decode regex: 1]

'/home/wwwrenee/public_html/zsXUhZi/zsXUhZi/zsXUhZi/zsXUhZi/hHaunYCZRBTQPNWvMxw.jpg'
# Suspicious image file (hidden script file)

'/home/wwwrenee/public_html/zsXUhZi/zsXUhZi/zsXUhZi/zsXUhZi/zsXUhZi/cache.php'
# (decoded file [depth: 1]) Decode regex match = [decode regex: 1]
# (decoded file [depth: 2]) Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P2223]]

'/home/wwwrenee/public_html/zsXUhZi/zsXUhZi/zsXUhZi/zsXUhZi/zsXUhZi/zsXUhZi/batyqu.tiff'
# Suspicious image file (hidden script file)

'/home/wwwrenee/public_html/zsXUhZi/zsXUhZi/zsXUhZi/zsXUhZi/zsXUhZi/zsXUhZi/cache.php'
# Decode regex match = [decode regex: 1]

'/home/wwwrenee/public_html/zsXUhZi/zsXUhZi/zsXUhZi/zsXUhZi/zsXUhZi/zsXUhZi/zsXUhZi/cache.php'
# Decode regex match = [decode regex: 1]
# Clamd Error for [SCAN /home/wwwrenee/tmp/awstats/awstats.reneesense.com.conf]: /home/wwwrenee/tmp/awstats/awstats.reneesense.com.conf: Excluded
# Clamd Error for [SCAN /home/wwwrenee/tmp/awstats/awstats012023.reneesense.com.txt]: /home/wwwrenee/tmp/awstats/awstats012023.reneesense.com.txt: Excluded
# Clamd Error for [SCAN /home/wwwrenee/tmp/awstats/awstats012024.reneesense.com.txt]: /home/wwwrenee/tmp/awstats/awstats012024.reneesense.com.txt: Excluded
# Clamd Error for [SCAN /home/wwwrenee/tmp/awstats/awstats012025.reneesense.com.txt]: /home/wwwrenee/tmp/awstats/awstats012025.reneesense.com.txt: Excluded
# Clamd Error for [SCAN /home/wwwrenee/tmp/awstats/awstats022023.reneesense.com.txt]: /home/wwwrenee/tmp/awstats/awstats022023.reneesense.com.txt: Excluded
# Clamd Error for [SCAN /home/wwwrenee/tmp/awstats/awstats022024.reneesense.com.txt]: /home/wwwrenee/tmp/awstats/awstats022024.reneesense.com.txt: Excluded
# Clamd Error for [SCAN /home/wwwrenee/tmp/awstats/awstats022025.reneesense.com.txt]: /home/wwwrenee/tmp/awstats/awstats022025.reneesense.com.txt: Excluded
# Clamd Error for [SCAN /home/wwwrenee/tmp/awstats/awstats032023.reneesense.com.txt]: /home/wwwrenee/tmp/awstats/awstats032023.reneesense.com.txt: Excluded
# Clamd Error for [SCAN /home/wwwrenee/tmp/awstats/awstats032024.reneesense.com.txt]: /home/wwwrenee/tmp/awstats/awstats032024.reneesense.com.txt: Excluded
# Clamd Error for [SCAN /home/wwwrenee/tmp/awstats/awstats032025.reneesense.com.txt]: /home/wwwrenee/tmp/awstats/awstats032025.reneesense.com.txt: Excluded
# Clamd Error for [SCAN /home/wwwrenee/tmp/awstats/awstats042023.reneesense.com.txt]: /home/wwwrenee/tmp/awstats/awstats042023.reneesense.com.txt: Excluded
# Clamd Error for [SCAN /home/wwwrenee/tmp/awstats/awstats042024.reneesense.com.txt]: /home/wwwrenee/tmp/awstats/awstats042024.reneesense.com.txt: Excluded
# Clamd Error for [SCAN /home/wwwrenee/tmp/awstats/awstats042025.reneesense.com.txt]: /home/wwwrenee/tmp/awstats/awstats042025.reneesense.com.txt: Excluded
# Clamd Error for [SCAN /home/wwwrenee/tmp/awstats/awstats052023.reneesense.com.txt]: /home/wwwrenee/tmp/awstats/awstats052023.reneesense.com.txt: Excluded
# Clamd Error for [SCAN /home/wwwrenee/tmp/awstats/awstats052024.reneesense.com.txt]: /home/wwwrenee/tmp/awstats/awstats052024.reneesense.com.txt: Excluded
# Clamd Error for [SCAN /home/wwwrenee/tmp/awstats/awstats052025.reneesense.com.txt]: /home/wwwrenee/tmp/awstats/awstats052025.reneesense.com.txt: Excluded
# Clamd Error for [SCAN /home/wwwrenee/tmp/awstats/awstats062023.reneesense.com.txt]: /home/wwwrenee/tmp/awstats/awstats062023.reneesense.com.txt: Excluded
# Clamd Error for [SCAN /home/wwwrenee/tmp/awstats/awstats062024.reneesense.com.txt]: /home/wwwrenee/tmp/awstats/awstats062024.reneesense.com.txt: Excluded
# Clamd Error for [SCAN /home/wwwrenee/tmp/awstats/awstats062025.reneesense.com.txt]: /home/wwwrenee/tmp/awstats/awstats062025.reneesense.com.txt: Excluded
# Clamd Error for [SCAN /home/wwwrenee/tmp/awstats/awstats072023.reneesense.com.txt]: /home/wwwrenee/tmp/awstats/awstats072023.reneesense.com.txt: Excluded
# Clamd Error for [SCAN /home/wwwrenee/tmp/awstats/awstats072024.reneesense.com.txt]: /home/wwwrenee/tmp/awstats/awstats072024.reneesense.com.txt: Excluded
# Clamd Error for [SCAN /home/wwwrenee/tmp/awstats/awstats072025.reneesense.com.txt]: /home/wwwrenee/tmp/awstats/awstats072025.reneesense.com.txt: Excluded
# Clamd Error for [SCAN /home/wwwrenee/tmp/awstats/awstats082023.reneesense.com.txt]: /home/wwwrenee/tmp/awstats/awstats082023.reneesense.com.txt: Excluded
# Clamd Error for [SCAN /home/wwwrenee/tmp/awstats/awstats082024.reneesense.com.txt]: /home/wwwrenee/tmp/awstats/awstats082024.reneesense.com.txt: Excluded
# Clamd Error for [SCAN /home/wwwrenee/tmp/awstats/awstats092023.reneesense.com.txt]: /home/wwwrenee/tmp/awstats/awstats092023.reneesense.com.txt: Excluded
# Clamd Error for [SCAN /home/wwwrenee/tmp/awstats/awstats092024.reneesense.com.txt]: /home/wwwrenee/tmp/awstats/awstats092024.reneesense.com.txt: Excluded
# Clamd Error for [SCAN /home/wwwrenee/tmp/awstats/awstats102022.reneesense.com.txt]: /home/wwwrenee/tmp/awstats/awstats102022.reneesense.com.txt: Excluded
# Clamd Error for [SCAN /home/wwwrenee/tmp/awstats/awstats102023.reneesense.com.txt]: /home/wwwrenee/tmp/awstats/awstats102023.reneesense.com.txt: Excluded
# Clamd Error for [SCAN /home/wwwrenee/tmp/awstats/awstats102024.reneesense.com.txt]: /home/wwwrenee/tmp/awstats/awstats102024.reneesense.com.txt: Excluded
# Clamd Error for [SCAN /home/wwwrenee/tmp/awstats/awstats112022.reneesense.com.txt]: /home/wwwrenee/tmp/awstats/awstats112022.reneesense.com.txt: Excluded
# Clamd Error for [SCAN /home/wwwrenee/tmp/awstats/awstats112023.reneesense.com.txt]: /home/wwwrenee/tmp/awstats/awstats112023.reneesense.com.txt: Excluded
# Clamd Error for [SCAN /home/wwwrenee/tmp/awstats/awstats112024.reneesense.com.txt]: /home/wwwrenee/tmp/awstats/awstats112024.reneesense.com.txt: Excluded
# Clamd Error for [SCAN /home/wwwrenee/tmp/awstats/awstats122022.reneesense.com.txt]: /home/wwwrenee/tmp/awstats/awstats122022.reneesense.com.txt: Excluded
# Clamd Error for [SCAN /home/wwwrenee/tmp/awstats/awstats122023.reneesense.com.txt]: /home/wwwrenee/tmp/awstats/awstats122023.reneesense.com.txt: Excluded
# Clamd Error for [SCAN /home/wwwrenee/tmp/awstats/awstats122024.reneesense.com.txt]: /home/wwwrenee/tmp/awstats/awstats122024.reneesense.com.txt: Excluded
# Clamd Error for [SCAN /home/wwwrenee/tmp/awstats/ssl/awstats.reneesense.com.conf]: /home/wwwrenee/tmp/awstats/ssl/awstats.reneesense.com.conf: Excluded
# Clamd Error for [SCAN /home/wwwrenee/tmp/awstats/ssl/awstats012023.reneesense.com.txt]: /home/wwwrenee/tmp/awstats/ssl/awstats012023.reneesense.com.txt: Excluded
# Clamd Error for [SCAN /home/wwwrenee/tmp/awstats/ssl/awstats012024.reneesense.com.txt]: /home/wwwrenee/tmp/awstats/ssl/awstats012024.reneesense.com.txt: Excluded
# Clamd Error for [SCAN /home/wwwrenee/tmp/awstats/ssl/awstats012025.reneesense.com.txt]: /home/wwwrenee/tmp/awstats/ssl/awstats012025.reneesense.com.txt: Excluded
# Clamd Error for [SCAN /home/wwwrenee/tmp/awstats/ssl/awstats022023.reneesense.com.txt]: /home/wwwrenee/tmp/awstats/ssl/awstats022023.reneesense.com.txt: Excluded
# Clamd Error for [SCAN /home/wwwrenee/tmp/awstats/ssl/awstats022024.reneesense.com.txt]: /home/wwwrenee/tmp/awstats/ssl/awstats022024.reneesense.com.txt: Excluded
# Clamd Error for [SCAN /home/wwwrenee/tmp/awstats/ssl/awstats022025.reneesense.com.txt]: /home/wwwrenee/tmp/awstats/ssl/awstats022025.reneesense.com.txt: Excluded
# Clamd Error for [SCAN /home/wwwrenee/tmp/awstats/ssl/awstats032023.reneesense.com.txt]: /home/wwwrenee/tmp/awstats/ssl/awstats032023.reneesense.com.txt: Excluded
# Clamd Error for [SCAN /home/wwwrenee/tmp/awstats/ssl/awstats032024.reneesense.com.txt]: /home/wwwrenee/tmp/awstats/ssl/awstats032024.reneesense.com.txt: Excluded
# Clamd Error for [SCAN /home/wwwrenee/tmp/awstats/ssl/awstats032025.reneesense.com.txt]: /home/wwwrenee/tmp/awstats/ssl/awstats032025.reneesense.com.txt: Excluded
# Clamd Error for [SCAN /home/wwwrenee/tmp/awstats/ssl/awstats042023.reneesense.com.txt]: /home/wwwrenee/tmp/awstats/ssl/awstats042023.reneesense.com.txt: Excluded
# Clamd Error for [SCAN /home/wwwrenee/tmp/awstats/ssl/awstats042024.reneesense.com.txt]: /home/wwwrenee/tmp/awstats/ssl/awstats042024.reneesense.com.txt: Excluded
# Clamd Error for [SCAN /home/wwwrenee/tmp/awstats/ssl/awstats042025.reneesense.com.txt]: /home/wwwrenee/tmp/awstats/ssl/awstats042025.reneesense.com.txt: Excluded
# Clamd Error for [SCAN /home/wwwrenee/tmp/awstats/ssl/awstats052023.reneesense.com.txt]: /home/wwwrenee/tmp/awstats/ssl/awstats052023.reneesense.com.txt: Excluded
# Clamd Error for [SCAN /home/wwwrenee/tmp/awstats/ssl/awstats052024.reneesense.com.txt]: /home/wwwrenee/tmp/awstats/ssl/awstats052024.reneesense.com.txt: Excluded

----------- SCAN SUMMARY -----------
Scanned directories: 15569
Scanned files: 116704
Ignored items: 293
Suspicious matches: 206
Viruses found: 8
Fingerprint matches: 26
Data scanned: 6361.27 MB
Scan peak memory: 432676 kB
Scan time/item: 0.016 sec
Scan time: 2101.036 sec