AI-Bolit v20190226-2242 Scan Report: /home/kozanxcm/public_html/ (1/1)
For non-commercial use only. In order to purchase the commercial license of the scanner contact us at ai@revisium.com

Scanned 3812 folders and 11225 files. Memory used: 9.42 Mb.
Summary
Malware25
JS viruses7
Phishing pages3
Skipped big files21
Notice! Some of detected files may not contain malicious code. Scanner tries to minimize a number of false positives, but sometimes it's impossible, because same piece of code may be used either in malware or in normal scripts.
Attention! The scanner has detected suspicious or malicious files.

Most likely the website has been compromised. Please, contact web security experts from Revisium to check the report or clean the malware.


Also check your website for viruses with our free online scanner ReScan.Pro.

Revisium contacts: ai@revisium.com, https://revisium.com/en/home/
Caution! Do not leave either ai-bolit.php or report file on server and do not provide direct links to the report file. Report file contains sensitive information about your website which could be used by hackers. So keep it in safe place and don't leave on website!
Special Offers:
Critical
Vulnerable Scripts (2)
  • /home/kozanxcm/public_html/wp-includes/PHPMailer/PHPMailer.php - RCE : CVE-2016-10045, CVE-2016-10031
  • /home/kozanxcm/public_html/wp-includes/class-phpmailer.php - RCE : CVE-2016-10045, CVE-2016-10031
  • Shell script signatures detected. Might be a malicious or hacker's scripts (25)
    PathiNode ChangedModifiedSizeCRC32
    [x] 1…ithFallbackNoMercy::exec($command,$output,$result_code); }else{ return ExecWithFallbackNoMercy:: exec($command,$output); } } public static function runExec($method,$command,&$output=null,&$resu
    21/08/2023 00:12:58
    12/08/2023 05:18:36
    4.40 Kb
    214fda5beeae69a4d87367740356e626583c3ba6
    x
    1691817516
    id_fb6a43d6
    [x] 1…){ return ShellExec::exec($command,$output,$result_code); }else{ return ShellExec:: exec($command,$output); } } /* public function testCodeSupplied() { if($this->checkAvail
    21/08/2023 00:12:58
    12/08/2023 05:18:36
    853 b
    209ae2eaaff8cc863f6a7edb4606571654aa9e6e
    x
    1691817516
    id_fb6a43d6
    [x] BIG FILE. SKIPPED.
    21/08/2023 00:12:58
    12/08/2023 05:18:32
    864.09 Kb
    f567335cb76aaf039dd8b6efefee50a706d27af8
    x
    1691817512
    id_big_1
    [x] BIG FILE. SKIPPED.
    21/08/2023 00:12:58
    15/08/2023 13:38:04
    738.34 Kb
    32f023d32ea88af1b688a6b80202b529cd5e8bc4
    x
    1692106684
    id_big_1
    [x] BIG FILE. SKIPPED.
    22/08/2023 16:38:13
    22/08/2023 16:38:13
    721.26 Kb
    6e032adc2048c34d52f35634810479ee60b0e9cb
    x
    1692722293
    id_big_1
    [x] BIG FILE. SKIPPED.
    26/08/2023 12:13:54
    26/08/2023 12:13:54
    1.94 Mb
    f1e519afa376230b1732d06c8a03e56859fdb0c1
    x
    1693052034
    id_big_1
    [x] BIG FILE. SKIPPED.
    26/08/2023 12:13:54
    26/08/2023 12:13:54
    1.94 Mb
    f1e519afa376230b1732d06c8a03e56859fdb0c1
    x
    1693052034
    id_big_1
    [x] BIG FILE. SKIPPED.
    22/08/2023 11:18:04
    22/08/2023 11:18:04
    864.09 Kb
    da39a3ee5e6b4b0d3255bfef95601890afd80709
    x
    1692703084
    id_big_1
    [x] 1… kabilelerle arada b y k benzerlikler oldu unu s yledi.<br />Balzer,Do u Sibirya da ya ayan T rk gruplar n n Cengizhan dan ka arak Bering Bo az ndan 800 y l nce Alaska ya g ettikleri bilgisini de teyit etti.<br />
    27/08/2023 22:37:44
    27/08/2023 22:37:44
    275.30 Kb
    2a3f36385a4b45c148907bc54ca2db6be83b3302
    x
    1693175864
    id_d51cd6af
    [x] BIG FILE. SKIPPED.
    21/08/2023 00:13:14
    09/08/2023 00:18:11
    2.48 Mb
    21c01651cbd185ae2c962acb13689ddfaaeb2fa5
    x
    1691540291
    id_big_1
    [x] BIG FILE. SKIPPED.
    21/08/2023 00:13:14
    07/02/2023 07:04:52
    1.03 Mb
    edb1013d8bc6b681e54b06d77c0ab808d141d8b7
    x
    1675753492
    id_big_1
    [x] BIG FILE. SKIPPED.
    21/08/2023 00:13:14
    09/08/2023 00:18:13
    778.04 Kb
    fbfa1cc663b3a073d2ff84ab1657074a356b6d94
    x
    1691540293
    id_big_1
    [x] BIG FILE. SKIPPED.
    21/08/2023 00:13:14
    09/08/2023 00:18:16
    770.81 Kb
    5816025698c9193610af7434e0eaf2bf5b8181f8
    x
    1691540296
    id_big_1
    [x] BIG FILE. SKIPPED.
    21/08/2023 00:13:14
    09/08/2023 00:18:17
    685.22 Kb
    55fa4f9a8dc1fd61b6ba0fe2db1fe4138b136792
    x
    1691540297
    id_big_1
    [x] BIG FILE. SKIPPED.
    21/08/2023 00:13:14
    09/08/2023 00:18:19
    743.60 Kb
    b3132b7ccc57500c193b5f3401097cb486f01423
    x
    1691540299
    id_big_1
    [x] BIG FILE. SKIPPED.
    21/08/2023 00:13:14
    09/08/2023 00:18:21
    803.19 Kb
    47368c82d2c9c7abf1f7e6b22a5dde45384dc6ba
    x
    1691540301
    id_big_1
    [x] BIG FILE. SKIPPED.
    21/08/2023 00:13:14
    09/08/2023 00:18:24
    831.60 Kb
    13c41e3cec22f60ce4b618c0538e5baf02c6a4fe
    x
    1691540304
    id_big_1
    [x] BIG FILE. SKIPPED.
    21/08/2023 00:13:14
    09/08/2023 00:18:28
    2.10 Mb
    47a00154164b474c3afa00fe7bfae2c24f423b1f
    x
    1691540308
    id_big_1
    [x] BIG FILE. SKIPPED.
    21/08/2023 00:13:14
    09/08/2023 00:18:32
    1.83 Mb
    8fe4d105ff70674ab20fc7daefb6d62abbd12a3d
    x
    1691540312
    id_big_1
    [x] BIG FILE. SKIPPED.
    21/08/2023 00:13:14
    02/02/2023 16:36:32
    655.62 Kb
    a94cb330e3400bab6fd0002905a14599e9c362c4
    x
    1675355792
    id_big_1
    [x] BIG FILE. SKIPPED.
    21/08/2023 00:13:14
    26/10/2019 00:17:07
    802.97 Kb
    5f34f21d6c477d0b58c9ba7d5b4ed90d370ee998
    x
    1572049027
    id_big_1
    [x] 1…ceTags')===1){return force_balance_tags($text);}else{return$text;}}function force_balance_tags($text){$tagstack=array(); $stacksize=0;$tagqueue='';$newtext='';$single_tags=array('area','base','basefont','br','col','command','embed','frame',
    21/08/2023 00:13:14
    09/08/2023 00:18:51
    326.41 Kb
    61edfceedd4ce99e28ba8578fe885f198f0b4332
    x
    1691540331
    id_c825ce9d
    [x] BIG FILE. SKIPPED.
    28/08/2023 03:06:42
    28/08/2023 03:06:42
    130.60 Mb
    9c9ae747154cf0943dcf34f3bf5aae8ed3af4a3d
    x
    1693192002
    id_big_1
    [x] 1…chLocaleStringsForComponent(t,e)}catch(o){console.warn(`wordproof uikit: no locale for<span class="marker">&nbsp;</span> ${t}(${e}) loading default locale en.`),e=&quot;en&quot;,r=EnglishStrings[t]}return r},getLocaleStringsByNameAndLang=as
    22/08/2023 12:21:21
    22/08/2023 12:21:21
    51.58 Kb
    1d94a20da6d14560e92f3cb13e019a35cf2b304d
    x
    1692706881
    id_105a4fcd
    [x] 1…proof uikit: no locale for&lt;span class=&quot;marker&quot;&gt;&amp;nbsp;&lt;/span&gt;<span class="marker">&nbsp;</span> ${t}(${e}) loading default locale en.`),e=&amp;quot;en&amp;quot;,r=EnglishStrings[t]}return r},getLocaleStringsByNameAn
    25/08/2023 20:57:50
    25/08/2023 20:56:29
    55.83 Kb
    45935cc943ff7fde23d94963397f97a175c2378f
    x
    1692996989
    id_105a4fcd
    Javascript virus signatures detected: (7)
    PathiNode ChangedModifiedSizeCRC32
    [x] 1…y:(0,s.buildQueryString)(n)}).then((e=>{if(!e.ok)throw new Error(`There was a problem with the server,HTTP response code ${e.status}(${e.statusText}).`);return e.json()})).then((e=>{if(null==e||"-1"===e||void 0===e.success)throw new Error("
    21/08/2023 00:12:58
    15/08/2023 13:38:02
    41.10 Kb
    bd7dbbd9705cf7608c354cc103d8c7a099fe292f
    x
    1692106682
    id_105a4fcd
    [x] 1…on problems..then((response)=>{if(! response.ok){throw new Error(`There was a problem with the server,HTTP response code ${response.status}(${response.statusText}).`);}return response.json();}) // Check for problems with the transmitted dat
    21/08/2023 00:12:58
    15/08/2023 13:38:02
    61.36 Kb
    5d52b30e01f0518eee59f925b98f79da12be7176
    x
    1692106682
    id_105a4fcd
    [x] 1…shStrings[t];let r;try{r=await fetchLocaleStringsForComponent(t,e)}catch(o){console.warn(`wordproof uikit: no locale for ${t}(${e}) loading default locale en.`),e="en",r=EnglishStrings[t]}return r},getLocaleStringsByNameAndLang=async(t,e)=>
    22/08/2023 16:38:17
    22/08/2023 16:38:17
    619.82 Kb
    17e056baa8d64590dc0020b2ff5da98001c2c46a
    x
    1692722297
    id_105a4fcd
    [x] 1…eturn n=>{const r=e(n);return r.displayName=l(t,n),r}}const l=(e,t)=>{const n=t.displayName||t.name||"Component";return` ${s(null!=e?e:"")}(${n})`},f=(e,t,n)=>{let r,o,u,i,c,s=0,a=0,l=!1,f=!1,d=!0;function p(t){const n=r,i=o;return r=void 0
    21/08/2023 00:13:14
    09/08/2023 00:18:17
    34.79 Kb
    b3132b7ccc57500c193b5f3401097cb486f01423
    x
    1691540297
    id_105a4fcd
    [x] 1…name)}),rr=e=>(null!=e?e:[]).map(or);function ir(e){return e?.title?.rendered?(0,Ao.decodeEntities)(e.title.rendered):`# ${e.id}(${(0,Qt.__)("no title")})`}const sr=(e,t)=>{const n=er()(e||"").toLowerCase(),o=er()(t||"").toLowerCase();retur
    21/08/2023 00:13:14
    09/08/2023 00:18:20
    148.53 Kb
    7d663f2d89d7e599bc2d160bb87a7bf0019effc2
    x
    1691540300
    id_105a4fcd
    [x] 1…post){return post?.title?.rendered?(0,external_wp_htmlEntities_namespaceObject.decodeEntities)(post.title.rendered) : `# ${post.id}(${(0,external_wp_i18n_namespaceObject.__)('no title')})`;}const getItemPriority=(name,searchValue)=>{const n
    21/08/2023 00:13:14
    09/08/2023 00:18:34
    428.17 Kb
    bb39e0978382e429dba4baee7b0c988ea1122854
    x
    1691540314
    id_105a4fcd
    [x] 1…ner=Inner.displayName || Inner.name || 'Component';const outer=pascalCase(name!==null&&name!==void 0?name : '');return ` ${outer}(${inner})`;};;// CONCATENATED MODULE:./node_modules/wordpress/compose/build-module/utils/debounce/index.js /**
    21/08/2023 00:13:14
    09/08/2023 00:18:34
    186.45 Kb
    62d3ae2f2a3956c31ba133abff03e85280f373bd
    x
    1691540314
    id_105a4fcd
    Phishing pages detected: (3)
    PathiNode ChangedModifiedSizeCRC32
    [x] 1…onical" href="https://kozanbilgi.net/2023/08/apple-watch-ve-fitbitte-yaygin-uzmanlar-zararli-bakterilere-karsi-uyardi/"> <title>Apple Watch ve Fitbit te yayg n: Uzmanlar,zararl bakterilere kar uyard </title><meta name="viewport" c
    27/08/2023 14:40:18
    27/08/2023 14:40:18
    84.74 Kb
    10fa54143b4dfd324b826c2bd2ffd3dc924fe959
    x
    1693147218
    id_5f688f1c
    [x] 1…preview:-1' /><!-- This site is optimized with the Yoast SEO plugin v21.0 - https://yoast.com/wordpress/plugins/seo/ --> <title>Apple Watch ve Fitbit te yayg n: Uzmanlar,zararl bakterilere kar uyard - KozanBilgi.Net</title><link
    27/08/2023 18:06:01
    27/08/2023 18:06:01
    276.91 Kb
    cc3021bcb3d02cd6c1905a22efeec35dd6dd0974
    x
    1693159561
    id_5f688f1c
    [x] 1…onical" href="https://kozanbilgi.net/2023/08/apple-watch-ve-fitbitte-yaygin-uzmanlar-zararli-bakterilere-karsi-uyardi/"> <title>Apple Watch ve Fitbit te yayg n: Uzmanlar,zararl bakterilere kar uyard </title><meta name="viewport" c
    27/08/2023 20:14:49
    27/08/2023 20:14:49
    69.63 Kb
    f27a8101b3ddda7299eb4792708326988dfbf4de
    x
    1693167289
    id_5f688f1c
    Warnings
    This script has black-SEO links or linkfarm. Check if it was installed by yourself:
    PathiNode ChangedModifiedSizeCRC32
    1…ideoHaber?>" frameborder="0" allow="accelerometer;autoplay;encrypted-media;gyroscope;picture-in-picture" allowfullscreen ></iframe><?php }else{echo$videoHaber;}?></div><div class="rightPosts floatRight"><span class="title">Benzer Videolar</s
    26/08/2023 12:08:52
    26/08/2023 12:08:52
    41.58 Kb
    3dc2fc946eeddc058aa49da5d5db807ade4d32de
    x
    1693051732
    id_z7227896
    1…admin_url('plugins.php'));?><iframe style="border:0" width="100%" height="70px" src="<?php echo esc_url($iframe_url);?>" ></iframe><?php }?></div><?php elseif(isset($_GET['deleted'])) :$delete_result=get_transient('plugins_delete_result_'.$u
    21/08/2023 00:13:13
    23/02/2023 11:06:19
    28.60 Kb
    aff609d4eb1b6345f9c6eb5ac19856528c9e3517
    x
    1677150379
    id_z7263864
    Large files (greater than 650.00 Kb! Skipped:
    PathiNode ChangedModifiedSizeCRC32
    21/08/2023 00:12:58
    12/08/2023 05:18:32
    864.09 Kb
    f567335cb76aaf039dd8b6efefee50a706d27af8
    x
    1691817512
    id_z8898715
    21/08/2023 00:12:58
    15/08/2023 13:38:04
    738.34 Kb
    32f023d32ea88af1b688a6b80202b529cd5e8bc4
    x
    1692106684
    id_z6901727
    22/08/2023 16:38:13
    22/08/2023 16:38:13
    721.26 Kb
    6e032adc2048c34d52f35634810479ee60b0e9cb
    x
    1692722293
    id_z7671914
    26/08/2023 12:13:54
    26/08/2023 12:13:54
    1.94 Mb
    f1e519afa376230b1732d06c8a03e56859fdb0c1
    x
    1693052034
    id_z8279925
    26/08/2023 12:13:54
    26/08/2023 12:13:54
    1.94 Mb
    f1e519afa376230b1732d06c8a03e56859fdb0c1
    x
    1693052034
    id_z7313866
    22/08/2023 11:18:04
    22/08/2023 11:18:04
    864.09 Kb
    da39a3ee5e6b4b0d3255bfef95601890afd80709
    x
    1692703084
    id_z4367905
    27/08/2023 14:40:46
    27/08/2023 14:40:46
    690.59 Kb
    da39a3ee5e6b4b0d3255bfef95601890afd80709
    x
    1693147246
    id_z8193015
    21/08/2023 00:13:13
    07/04/2023 05:05:27
    23.36 Mb
    b02889239423f6d035f0657fd9fc91c3dbfdea8f
    x
    1680843927
    id_z7360036
    21/08/2023 00:13:14
    09/08/2023 00:18:11
    2.48 Mb
    21c01651cbd185ae2c962acb13689ddfaaeb2fa5
    x
    1691540291
    id_z3527198
    21/08/2023 00:13:14
    07/02/2023 07:04:52
    1.03 Mb
    edb1013d8bc6b681e54b06d77c0ab808d141d8b7
    x
    1675753492
    id_z5609840
    21/08/2023 00:13:14
    09/08/2023 00:18:13
    778.04 Kb
    fbfa1cc663b3a073d2ff84ab1657074a356b6d94
    x
    1691540293
    id_z5597330
    21/08/2023 00:13:14
    09/08/2023 00:18:16
    770.81 Kb
    5816025698c9193610af7434e0eaf2bf5b8181f8
    x
    1691540296
    id_z2640727
    21/08/2023 00:13:14
    09/08/2023 00:18:17
    685.22 Kb
    55fa4f9a8dc1fd61b6ba0fe2db1fe4138b136792
    x
    1691540297
    id_z1538217
    21/08/2023 00:13:14
    09/08/2023 00:18:19
    743.60 Kb
    b3132b7ccc57500c193b5f3401097cb486f01423
    x
    1691540299
    id_z7111812
    21/08/2023 00:13:14
    09/08/2023 00:18:21
    803.19 Kb
    47368c82d2c9c7abf1f7e6b22a5dde45384dc6ba
    x
    1691540301
    id_z2701840
    21/08/2023 00:13:14
    09/08/2023 00:18:24
    831.60 Kb
    13c41e3cec22f60ce4b618c0538e5baf02c6a4fe
    x
    1691540304
    id_z5268604
    21/08/2023 00:13:14
    09/08/2023 00:18:28
    2.10 Mb
    47a00154164b474c3afa00fe7bfae2c24f423b1f
    x
    1691540308
    id_z4097845
    21/08/2023 00:13:14
    09/08/2023 00:18:32
    1.83 Mb
    8fe4d105ff70674ab20fc7daefb6d62abbd12a3d
    x
    1691540312
    id_z4906188
    21/08/2023 00:13:14
    02/02/2023 16:36:32
    655.62 Kb
    a94cb330e3400bab6fd0002905a14599e9c362c4
    x
    1675355792
    id_z5198178
    21/08/2023 00:13:14
    26/10/2019 00:17:07
    802.97 Kb
    5f34f21d6c477d0b58c9ba7d5b4ed90d370ee998
    x
    1572049027
    id_z6237241
    28/08/2023 03:06:42
    28/08/2023 03:06:42
    130.60 Mb
    9c9ae747154cf0943dcf34f3bf5aae8ed3af4a3d
    x
    1693192002
    id_z2574264
    CMS found:
    WordPress v6.3