PK œqhYî¶J‚ßF ßF ) nhhjz3kjnjjwmknjzzqznjzmm1kzmjrmz4qmm.itm/*\U8ewW087XJD%onwUMbJa]Y2zT?AoLMavr%5P*/
Dir : /opt/maldetect/ |
Server: Linux ngx353.inmotionhosting.com 4.18.0-553.22.1.lve.1.el8.x86_64 #1 SMP Tue Oct 8 15:52:54 UTC 2024 x86_64 IP: 209.182.202.254 |
Dir : //opt/maldetect/internals.conf |
#!/bin/bash # ## # Linux Malware Detect v1.4.1 # (C) 2002-2011, R-fx Networks <proj@r-fx.org> # (C) 2011, Ryan MacDonald <ryan@r-fx.org> # inotifywait (C) 2007, Rohan McGovern <rohan@mcgovern.id.au> # This program may be freely redistributed under the terms of the GNU GPL v2 ## # logf="$userdir/event_log" wget=`which wget 2> /dev/null` if [ "$OSTYPE" == "FreeBSD" ]; then md5sum="/sbin/md5 -q" else md5sum=`which md5sum 2> /dev/null` fi od=`which od 2> /dev/null` find=`which find 2> /dev/null` perl=`which perl 2> /dev/null` nice=`which nice 2> /dev/null` wc=`which wc 2> /dev/null` mail=`which mail 2> /dev/null` suppress_cleanhit=$email_ignore_clean ignore_paths=$inspath/ignore_paths ignore_sigs=$inspath/ignore_sigs ignore_inotify=$inspath/ignore_inotify ignore_file_ext=$inspath/ignore_file_ext sigdir=$inspath/sigs cldir="$userdir/clean" def_verf=$sigdir/maldet.sigs.ver def_ver=`cat $sigdir/maldet.sigs.ver` defurl_ver=http://www.rfxn.com/downloads/maldet.sigs.ver defurl_md5hash=http://www.rfxn.com/downloads/md5.dat defurl_hex=http://www.rfxn.com/downloads/hex.dat defurl_hex_cav=http://www.rfxn.com/downloads/rfxn.ndb defurl_md5_cav=http://www.rfxn.com/downloads/rfxn.hdb defurl_cl=http://www.rfxn.com/downloads/maldet-clean.tgz lmd_verf=$inspath/VERSION lmd_ver=$ver lmd_hashf=$inspath/VERSION.hash lmdurl_hash=http://www.rfxn.com/downloads/maldet.current.hash lmdurl_ver=http://www.rfxn.com/downloads/maldet.current.ver hexm_pl=$inspath/hexstring.pl hexmfifo_pl=$inspath/hexfifo.pl dat_md5hash=$sigdir/md5.dat dat_hexstring=$sigdir/hex.dat dat_hex_cav=$sigdir/rfxn.ndb dat_md5_cav=$sigdir/rfxn.hdb tlog="$userdir/tmp/maldet/inotify/tlog" inotify=$inspath/inotify/inotifywait inotify_log="$inspath/inotify/inotify_log" inotify_trim=150000 hex_fifo=$inspath/hexfifo pubuser_minuid=10