Gecko [ www.cardpearl.org ]

Name	Size	Permission	Date
.cagefs	[ DIR ]	drwxrwx--x	2026-04-13 07:37
.caldav	[ DIR ]	drwxr-xr-x	2026-04-13 05:31
.cl.selector	[ DIR ]	drwxr-xr-x	2026-04-09 10:31
.cpanel	[ DIR ]	drwx------	2026-04-14 22:48
.gnupg	[ DIR ]	drwx------	2026-03-21 07:51
.htpasswds	[ DIR ]	drwxr-x---	2026-03-21 07:51
.nc_plugin	[ DIR ]	drwx--x--x	2025-11-29 15:19
.softaculous	[ DIR ]	drwx--x--x	2026-03-21 07:51
.spamassassin	[ DIR ]	drwx------	2026-03-21 07:51
.subaccounts	[ DIR ]	drwx------	2026-03-21 07:51
.trash	[ DIR ]	drwx------	2026-04-14 10:35
3patiigold.com	[ DIR ]	drwxr-x---	2026-04-13 15:42
6x6bet.download	[ DIR ]	drwxr-x---	2026-04-14 00:17
6x6bet.pk	[ DIR ]	drwxr-x---	2026-03-21 07:51
999-r.com.pk	[ DIR ]	drwxr-x---	2026-04-13 11:38
apkaltra.com	[ DIR ]	drwxr-x---	2026-03-25 14:48
apkbet.com.pk	[ DIR ]	drwxr-x---	2026-04-14 00:17
apkslots.com.pk	[ DIR ]	drwxr-x---	2026-04-14 00:17
bet877.pk	[ DIR ]	drwxr-x---	2026-04-14 00:17
cardpearl.org	[ DIR ]	drwxr-x---	2026-04-15 01:30
etc	[ DIR ]	drwxr-x---	2026-03-21 07:51
f9game.cc	[ DIR ]	drwxr-x---	2026-04-14 00:17
k6-club.com.pk	[ DIR ]	drwxr-x---	2026-04-14 22:48
logs	[ DIR ]	drwx------	2026-04-14 12:38
lscache	[ DIR ]	drwxrws---	2026-03-29 08:45
lscmData	[ DIR ]	drwx------	2026-03-24 15:07
mail	[ DIR ]	drwxr-x--x	2026-04-15 02:20
pkr3patii.com	[ DIR ]	drwxr-x---	2026-04-14 00:17
public_ftp	[ DIR ]	drwxr-x---	2026-03-21 07:51
public_html	[ DIR ]	drwxr-x---	2026-04-13 12:52
qaidi804bet.com.pk	[ DIR ]	drwxr-x---	2026-04-14 00:17
softaculous_backups	[ DIR ]	drwx--x--x	2026-04-15 00:38
ssl	[ DIR ]	drwxr-xr-x	2026-03-29 15:01
tmp	[ DIR ]	drwxr-xr-x	2026-04-13 12:12
vip9999game.com	[ DIR ]	drwxr-x---	2026-04-14 00:17
win10.pk	[ DIR ]	drwxr-x---	2026-03-21 07:51
winrupee.net	[ DIR ]	drwxr-x---	2026-04-13 10:28
www	[ DIR ]	drwxr-x---	2026-04-13 12:52
.bash_history	303 B	-rw-r--r--	2026-04-02 07:36
.bash_logout	18 B	-rw-r--r--	2025-07-30 20:11
.bash_profile	141 B	-rw-r--r--	2025-07-30 20:11
.bashrc	376 B	-rw-r--r--	2025-07-30 20:11
.gemrc	139 B	-rw-r--r--	2025-07-30 20:11
.imunify_patch_id	106 B	-rw-r--r--	2025-07-30 21:00
.last.inodes	6.5 KB	-rw-r--r--	2026-04-14 09:49
.lastlogin	607 B	-rw-------	2026-04-14 22:48
.myimunify_id	102 B	-rw-rw----	2025-07-30 21:00
.spamassassinboxenable	0 B	-rw-r--r--	2025-07-30 20:11
.spamassassinenable	0 B	-rw-r--r--	2025-07-30 20:11
.wget-hsts	168 B	-rw-r--r--	2025-11-26 05:16
backup-11.30.2025_02-25-35_apkbuxzx.tar.gz	970.69 MB	-rw-r--r--	2025-11-30 07:29
scanreport-apkbuxzx-2025-11-29T15:55:11.315295.txt	6.25 KB	-rw-r--r--	2025-11-29 16:27
scanreport-apkbuxzx-2025-12-04T21:33:00.853921.txt	3.87 KB	-rw-r--r--	2025-12-04 22:52
scanreport-apkbuxzx-Apr_12_2026_13h20m.txt	9.91 KB	-rw-r--r--	2026-04-12 18:40
scanreport-apkbuxzx-Apr_13_2026_01h23m.txt	8.84 KB	-rw-r--r--	2026-04-13 06:39
scanreport-apkbuxzx-Mar_25_2026_09h11m.txt	12.82 KB	-rw-r--r--	2026-03-25 14:46

Rename

----------- SCAN REPORT -----------
TimeStamp: Sun, 12 Apr 2026 13:20:55 -0400
(/usr/sbin/cxs --background --clamdsock /var/clamd --dbreport --defapache nobody --doptions Mv --exploitscan --nofallback --filemax 50000 --noforce --html --ignore /etc/cxs/cxs.ignore.manual --options mMOLfSGchexdnwZDRru --noprobability --qoptions Mv --report /home/apkbuxzx/scanreport-apkbuxzx-Apr_12_2026_13h20m.txt --sizemax 1000000 --ssl --summary --sversionscan --timemax 30 --unofficial --user apkbuxzx --virusscan --vmrssmax 2000000 --waitscan 0 --xtra /etc/cxs/cxs.xtra.manual)

Scanning /home/apkbuxzx:

'/home/apkbuxzx/.nc_plugin/hidden'
# World writeable directory

'/home/apkbuxzx/3patiigold.com/.tmb'
# World writeable directory

'/home/apkbuxzx/3patiigold.com/wp-content/themes/appyn-new-Version/includes/google-api-php-client-master/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php'
# Universal decode regex match = [universal decoder]

'/home/apkbuxzx/3patiigold.com/wp-content/themes/appyn-new-Version/includes/google-api-php-client-master/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php'
# Universal decode regex match = [universal decoder]

'/home/apkbuxzx/6x6bet.download/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php'
# Universal decode regex match = [universal decoder]

'/home/apkbuxzx/6x6bet.download/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php'
# Universal decode regex match = [universal decoder]

'/home/apkbuxzx/999-r.com.pk/wp-content/themes/appyn-1/includes/google-api-php-client-master/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php'
# Universal decode regex match = [universal decoder]

'/home/apkbuxzx/999-r.com.pk/wp-content/themes/appyn-1/includes/google-api-php-client-master/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php'
# Universal decode regex match = [universal decoder]

'/home/apkbuxzx/apkaltra.com/wp-content/plugins/ultimate-addons-for-gutenberg/admin-core/inc/admin-menu.php'
# Universal decode regex match = [universal decoder]

'/home/apkbuxzx/apkaltra.com/wp-content/plugins/ultimate-addons-for-gutenberg/includes/blocks/forms/frontend.css.php'
# Universal decode regex match = [universal decoder]

'/home/apkbuxzx/apkaltra.com/wp-content/themes/appyn-1/includes/google-api-php-client-master/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php'
# Universal decode regex match = [universal decoder]

'/home/apkbuxzx/apkaltra.com/wp-content/themes/appyn-1/includes/google-api-php-client-master/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php'
# Universal decode regex match = [universal decoder]

'/home/apkbuxzx/apkbet.com.pk/wp-content/themes/appyn-new-Version/includes/google-api-php-client-master/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php'
# Universal decode regex match = [universal decoder]

'/home/apkbuxzx/apkbet.com.pk/wp-content/themes/appyn-new-Version/includes/google-api-php-client-master/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php'
# Universal decode regex match = [universal decoder]

'/home/apkbuxzx/apkslots.com.pk/wp-content/themes/appyn-new-Version/includes/google-api-php-client-master/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php'
# Universal decode regex match = [universal decoder]

'/home/apkbuxzx/apkslots.com.pk/wp-content/themes/appyn-new-Version/includes/google-api-php-client-master/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php'
# Universal decode regex match = [universal decoder]

'/home/apkbuxzx/cardpearl.org/index.php'
# Universal decode regex match = [universal decoder]

'/home/apkbuxzx/cardpearl.org/wp-headre.php'
# Universal decode regex match = [universal decoder]
# Scan Timeout (30 secs) while processing:
'/home/apkbuxzx/cardpearl.org/wp-admin/css/colors/sunrise/TEEhi.php'

'/home/apkbuxzx/cardpearl.org/wp-admin/images/media-button-music-3x.gif'
# Suspicious image file (hidden script file)
# Universal decode regex match = [universal decoder]

'/home/apkbuxzx/cardpearl.org/wp-includes/reviall.php'
# Universal decode regex match = [universal decoder]
# Scan Timeout (30 secs) while processing:
'/home/apkbuxzx/cardpearl.org/wp-includes/blocks/comments-pagination-numbers/wp/KYFETVANBr.php'

'/home/apkbuxzx/cardpearl.org/wp-includes/images/smilies/icon_twistedd.png'
# Suspicious image file (hidden script file)
# Universal decode regex match = [universal decoder]

'/home/apkbuxzx/cardpearl.org/wp-includes/js/dist/server-sied-renderr.min.js'
# Universal decode regex match = [universal decoder]

'/home/apkbuxzx/cardpearl.org/wp-includes/js/dist/script-modules/block-library/search/wp/Gnwctsbf.php'
# Universal decode regex match = [universal decoder]

'/home/apkbuxzx/f9game.cc/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php'
# Universal decode regex match = [universal decoder]

'/home/apkbuxzx/f9game.cc/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php'
# Universal decode regex match = [universal decoder]

'/home/apkbuxzx/k6-club.com.pk/wp-content/themes/appyn-new-2026/includes/google-api-php-client-master/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php'
# Universal decode regex match = [universal decoder]

'/home/apkbuxzx/k6-club.com.pk/wp-content/themes/appyn-new-2026/includes/google-api-php-client-master/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php'
# Universal decode regex match = [universal decoder]

'/home/apkbuxzx/pkr3patii.com/wp-content/plugins/wp-file-manager/lib/codemirror/mode/clike/index.html'
# Suspicious file type [application/x-c]

'/home/apkbuxzx/pkr3patii.com/wp-content/themes/getmodsapk/admin/inc/modules/google-api-php-client-master/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php'
# Universal decode regex match = [universal decoder]

'/home/apkbuxzx/pkr3patii.com/wp-content/themes/getmodsapk/admin/inc/modules/google-api-php-client-master/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php'
# Universal decode regex match = [universal decoder]

'/home/apkbuxzx/pkr3patii.com/wp-content/themes/includes/google-api-php-client-master/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php'
# Universal decode regex match = [universal decoder]

'/home/apkbuxzx/pkr3patii.com/wp-content/themes/includes/google-api-php-client-master/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php'
# Universal decode regex match = [universal decoder]

'/home/apkbuxzx/public_html/wp-content/cache/wp/NKTFlhli.php'
# Universal decode regex match = [universal decoder]

'/home/apkbuxzx/public_html/wp-content/wp-includes/abilities-api/wp/wBovUZwDWF.php'
# Universal decode regex match = [universal decoder]
# Scan Timeout (30 secs) while processing:
'/home/apkbuxzx/public_html/wp-content/wp-includes/pomo/wp/kvrInuLu.php'

'/home/apkbuxzx/public_html/wp-content/wp-includes/sodium_compat/src/Core/ChaCha20/wp/SoQJxNAm.php'
# Universal decode regex match = [universal decoder]

'/home/apkbuxzx/public_html/wp-content-20260411212432/cache/wp/NKTFlhli.php'
# Universal decode regex match = [universal decoder]

'/home/apkbuxzx/public_html/wp-content-20260411213427/cache/wp/NKTFlhli.php'
# Universal decode regex match = [universal decoder]

'/home/apkbuxzx/public_html/wp-includes-20260411212426/abilities-api/wp/wBovUZwDWF.php'
# Universal decode regex match = [universal decoder]
# Scan Timeout (30 secs) while processing:
'/home/apkbuxzx/public_html/wp-includes-20260411212426/pomo/wp/kvrInuLu.php'

'/home/apkbuxzx/public_html/wp-includes-20260411212426/sodium_compat/src/Core/ChaCha20/wp/SoQJxNAm.php'
# Universal decode regex match = [universal decoder]

'/home/apkbuxzx/public_html/wp-includes-20260411213529/abilities-api/wp/wBovUZwDWF.php'
# Universal decode regex match = [universal decoder]
# Scan Timeout (30 secs) while processing:
'/home/apkbuxzx/public_html/wp-includes-20260411213529/pomo/wp/kvrInuLu.php'

'/home/apkbuxzx/public_html/wp-includes-20260411213529/sodium_compat/src/Core/ChaCha20/wp/SoQJxNAm.php'
# Universal decode regex match = [universal decoder]

'/home/apkbuxzx/qaidi804bet.com.pk/wp-content/plugins/wp-file-manager/lib/codemirror/mode/clike/index.html'
# Suspicious file type [application/x-c]

'/home/apkbuxzx/qaidi804bet.com.pk/wp-content/themes/getmodsapk/admin/inc/modules/google-api-php-client-master/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php'
# Universal decode regex match = [universal decoder]

'/home/apkbuxzx/qaidi804bet.com.pk/wp-content/themes/getmodsapk/admin/inc/modules/google-api-php-client-master/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php'
# Universal decode regex match = [universal decoder]

'/home/apkbuxzx/vip9999game.com/wp-content/plugins/loginpress/classes/traits/loginpress-settings-trait.php'
# Universal decode regex match = [universal decoder]

'/home/apkbuxzx/vip9999game.com/wp-content/themes/appyn-2/includes/google-api-php-client-master/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php'
# Universal decode regex match = [universal decoder]

'/home/apkbuxzx/vip9999game.com/wp-content/themes/appyn-2/includes/google-api-php-client-master/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php'
# Universal decode regex match = [universal decoder]

'/home/apkbuxzx/winrupee.net/.tmb/marijuan.php'
# ClamAV detected virus = [TO-35409.WEBSHELL.business74_marijuan.MD5-f83044c559d6b70c17bf5f7155e9e881.size-25504.UNOFFICIAL]

'/home/apkbuxzx/winrupee.net/wp-content/plugins/file-manager-advanced/application/library/codemirror/mode/clike/index.html'
# Suspicious file type [application/x-c]

----------- SCAN SUMMARY -----------
Scanned directories: 27002
Scanned files: 182964
Ignored items: 397
Suspicious matches: 51
Viruses found: 1
Fingerprint matches: 0
Data scanned: 4523.83 MB
Scan peak memory: 393960 kB
Scan time/item: 0.023 sec
Scan time: 4758.392 sec