AI-Bolit v20190226-2242 Scan Report: /home/kozanxcm/public_html/ (1/1)
For non-commercial use only. In order to purchase the commercial license of the scanner contact us at ai@revisium.com

Scanned 3118 folders and 9751 files. Memory used: 9.08 Mb.
Summary
Malware23
JS viruses7
Phishing pages2
Skipped big files21
Notice! Some of detected files may not contain malicious code. Scanner tries to minimize a number of false positives, but sometimes it's impossible, because same piece of code may be used either in malware or in normal scripts.
Attention! The scanner has detected suspicious or malicious files.

Most likely the website has been compromised. Please, contact web security experts from Revisium to check the report or clean the malware.


Also check your website for viruses with our free online scanner ReScan.Pro.

Revisium contacts: ai@revisium.com, https://revisium.com/en/home/
Caution! Do not leave either ai-bolit.php or report file on server and do not provide direct links to the report file. Report file contains sensitive information about your website which could be used by hackers. So keep it in safe place and don't leave on website!
Special Offers:
Critical
Vulnerable Scripts (2)
  • /home/kozanxcm/public_html/wp-includes/PHPMailer/PHPMailer.php - RCE : CVE-2016-10045, CVE-2016-10031
  • /home/kozanxcm/public_html/wp-includes/class-phpmailer.php - RCE : CVE-2016-10045, CVE-2016-10031
  • Shell script signatures detected. Might be a malicious or hacker's scripts (23)
    PathiNode ChangedModifiedSizeCRC32
    [x] 1…ithFallbackNoMercy::exec($command,$output,$result_code); }else{ return ExecWithFallbackNoMercy:: exec($command,$output); } } public static function runExec($method,$command,&$output=null,&$resu
    21/08/2023 00:12:58
    12/08/2023 05:18:36
    4.40 Kb
    214fda5beeae69a4d87367740356e626583c3ba6
    x
    1691817516
    id_fb6a43d6
    [x] 1…){ return ShellExec::exec($command,$output,$result_code); }else{ return ShellExec:: exec($command,$output); } } /* public function testCodeSupplied() { if($this->checkAvail
    21/08/2023 00:12:58
    12/08/2023 05:18:36
    853 b
    209ae2eaaff8cc863f6a7edb4606571654aa9e6e
    x
    1691817516
    id_fb6a43d6
    [x] BIG FILE. SKIPPED.
    21/08/2023 00:12:58
    12/08/2023 05:18:32
    864.09 Kb
    f567335cb76aaf039dd8b6efefee50a706d27af8
    x
    1691817512
    id_big_1
    [x] BIG FILE. SKIPPED.
    21/08/2023 00:12:58
    15/08/2023 13:38:04
    738.34 Kb
    32f023d32ea88af1b688a6b80202b529cd5e8bc4
    x
    1692106684
    id_big_1
    [x] BIG FILE. SKIPPED.
    22/08/2023 16:38:13
    22/08/2023 16:38:13
    721.26 Kb
    6e032adc2048c34d52f35634810479ee60b0e9cb
    x
    1692722293
    id_big_1
    [x] BIG FILE. SKIPPED.
    21/08/2023 00:12:58
    03/08/2023 13:02:38
    1.94 Mb
    f1e519afa376230b1732d06c8a03e56859fdb0c1
    x
    1691067758
    id_big_1
    [x] BIG FILE. SKIPPED.
    21/08/2023 00:12:58
    03/08/2023 13:02:36
    1.94 Mb
    f1e519afa376230b1732d06c8a03e56859fdb0c1
    x
    1691067756
    id_big_1
    [x] BIG FILE. SKIPPED.
    22/08/2023 11:18:04
    22/08/2023 11:18:04
    864.09 Kb
    da39a3ee5e6b4b0d3255bfef95601890afd80709
    x
    1692703084
    id_big_1
    [x] BIG FILE. SKIPPED.
    21/08/2023 00:13:14
    09/08/2023 00:18:11
    2.48 Mb
    21c01651cbd185ae2c962acb13689ddfaaeb2fa5
    x
    1691540291
    id_big_1
    [x] BIG FILE. SKIPPED.
    21/08/2023 00:13:14
    07/02/2023 07:04:52
    1.03 Mb
    edb1013d8bc6b681e54b06d77c0ab808d141d8b7
    x
    1675753492
    id_big_1
    [x] BIG FILE. SKIPPED.
    21/08/2023 00:13:14
    09/08/2023 00:18:13
    778.04 Kb
    fbfa1cc663b3a073d2ff84ab1657074a356b6d94
    x
    1691540293
    id_big_1
    [x] BIG FILE. SKIPPED.
    21/08/2023 00:13:14
    09/08/2023 00:18:16
    770.81 Kb
    5816025698c9193610af7434e0eaf2bf5b8181f8
    x
    1691540296
    id_big_1
    [x] BIG FILE. SKIPPED.
    21/08/2023 00:13:14
    09/08/2023 00:18:17
    685.22 Kb
    55fa4f9a8dc1fd61b6ba0fe2db1fe4138b136792
    x
    1691540297
    id_big_1
    [x] BIG FILE. SKIPPED.
    21/08/2023 00:13:14
    09/08/2023 00:18:19
    743.60 Kb
    b3132b7ccc57500c193b5f3401097cb486f01423
    x
    1691540299
    id_big_1
    [x] BIG FILE. SKIPPED.
    21/08/2023 00:13:14
    09/08/2023 00:18:21
    803.19 Kb
    47368c82d2c9c7abf1f7e6b22a5dde45384dc6ba
    x
    1691540301
    id_big_1
    [x] BIG FILE. SKIPPED.
    21/08/2023 00:13:14
    09/08/2023 00:18:24
    831.60 Kb
    13c41e3cec22f60ce4b618c0538e5baf02c6a4fe
    x
    1691540304
    id_big_1
    [x] BIG FILE. SKIPPED.
    21/08/2023 00:13:14
    09/08/2023 00:18:28
    2.10 Mb
    47a00154164b474c3afa00fe7bfae2c24f423b1f
    x
    1691540308
    id_big_1
    [x] BIG FILE. SKIPPED.
    21/08/2023 00:13:14
    09/08/2023 00:18:32
    1.83 Mb
    8fe4d105ff70674ab20fc7daefb6d62abbd12a3d
    x
    1691540312
    id_big_1
    [x] BIG FILE. SKIPPED.
    21/08/2023 00:13:14
    02/02/2023 16:36:32
    655.62 Kb
    a94cb330e3400bab6fd0002905a14599e9c362c4
    x
    1675355792
    id_big_1
    [x] BIG FILE. SKIPPED.
    21/08/2023 00:13:14
    26/10/2019 00:17:07
    802.97 Kb
    5f34f21d6c477d0b58c9ba7d5b4ed90d370ee998
    x
    1572049027
    id_big_1
    [x] 1…ceTags')===1){return force_balance_tags($text);}else{return$text;}}function force_balance_tags($text){$tagstack=array(); $stacksize=0;$tagqueue='';$newtext='';$single_tags=array('area','base','basefont','br','col','command','embed','frame',
    21/08/2023 00:13:14
    09/08/2023 00:18:51
    326.41 Kb
    61edfceedd4ce99e28ba8578fe885f198f0b4332
    x
    1691540331
    id_c825ce9d
    [x] BIG FILE. SKIPPED.
    25/08/2023 20:56:28
    25/08/2023 20:56:28
    92.56 Mb
    9c9ae747154cf0943dcf34f3bf5aae8ed3af4a3d
    x
    1692996988
    id_big_1
    [x] 1…chLocaleStringsForComponent(t,e)}catch(o){console.warn(`wordproof uikit: no locale for<span class="marker">&nbsp;</span> ${t}(${e}) loading default locale en.`),e=&quot;en&quot;,r=EnglishStrings[t]}return r},getLocaleStringsByNameAndLang=as
    22/08/2023 12:21:21
    22/08/2023 12:21:21
    51.58 Kb
    1d94a20da6d14560e92f3cb13e019a35cf2b304d
    x
    1692706881
    id_105a4fcd
    Javascript virus signatures detected: (7)
    PathiNode ChangedModifiedSizeCRC32
    [x] 1…y:(0,s.buildQueryString)(n)}).then((e=>{if(!e.ok)throw new Error(`There was a problem with the server,HTTP response code ${e.status}(${e.statusText}).`);return e.json()})).then((e=>{if(null==e||"-1"===e||void 0===e.success)throw new Error("
    21/08/2023 00:12:58
    15/08/2023 13:38:02
    41.10 Kb
    bd7dbbd9705cf7608c354cc103d8c7a099fe292f
    x
    1692106682
    id_105a4fcd
    [x] 1…on problems..then((response)=>{if(! response.ok){throw new Error(`There was a problem with the server,HTTP response code ${response.status}(${response.statusText}).`);}return response.json();}) // Check for problems with the transmitted dat
    21/08/2023 00:12:58
    15/08/2023 13:38:02
    61.36 Kb
    5d52b30e01f0518eee59f925b98f79da12be7176
    x
    1692106682
    id_105a4fcd
    [x] 1…shStrings[t];let r;try{r=await fetchLocaleStringsForComponent(t,e)}catch(o){console.warn(`wordproof uikit: no locale for ${t}(${e}) loading default locale en.`),e="en",r=EnglishStrings[t]}return r},getLocaleStringsByNameAndLang=async(t,e)=>
    22/08/2023 16:38:17
    22/08/2023 16:38:17
    619.82 Kb
    17e056baa8d64590dc0020b2ff5da98001c2c46a
    x
    1692722297
    id_105a4fcd
    [x] 1…eturn n=>{const r=e(n);return r.displayName=l(t,n),r}}const l=(e,t)=>{const n=t.displayName||t.name||"Component";return` ${s(null!=e?e:"")}(${n})`},f=(e,t,n)=>{let r,o,u,i,c,s=0,a=0,l=!1,f=!1,d=!0;function p(t){const n=r,i=o;return r=void 0
    21/08/2023 00:13:14
    09/08/2023 00:18:17
    34.79 Kb
    b3132b7ccc57500c193b5f3401097cb486f01423
    x
    1691540297
    id_105a4fcd
    [x] 1…name)}),rr=e=>(null!=e?e:[]).map(or);function ir(e){return e?.title?.rendered?(0,Ao.decodeEntities)(e.title.rendered):`# ${e.id}(${(0,Qt.__)("no title")})`}const sr=(e,t)=>{const n=er()(e||"").toLowerCase(),o=er()(t||"").toLowerCase();retur
    21/08/2023 00:13:14
    09/08/2023 00:18:20
    148.53 Kb
    7d663f2d89d7e599bc2d160bb87a7bf0019effc2
    x
    1691540300
    id_105a4fcd
    [x] 1…post){return post?.title?.rendered?(0,external_wp_htmlEntities_namespaceObject.decodeEntities)(post.title.rendered) : `# ${post.id}(${(0,external_wp_i18n_namespaceObject.__)('no title')})`;}const getItemPriority=(name,searchValue)=>{const n
    21/08/2023 00:13:14
    09/08/2023 00:18:34
    428.17 Kb
    bb39e0978382e429dba4baee7b0c988ea1122854
    x
    1691540314
    id_105a4fcd
    [x] 1…ner=Inner.displayName || Inner.name || 'Component';const outer=pascalCase(name!==null&&name!==void 0?name : '');return ` ${outer}(${inner})`;};;// CONCATENATED MODULE:./node_modules/wordpress/compose/build-module/utils/debounce/index.js /**
    21/08/2023 00:13:14
    09/08/2023 00:18:34
    186.45 Kb
    62d3ae2f2a3956c31ba133abff03e85280f373bd
    x
    1691540314
    id_105a4fcd
    Phishing pages detected: (2)
    PathiNode ChangedModifiedSizeCRC32
    [x] 1…onical" href="https://kozanbilgi.net/2023/08/apple-watch-ve-fitbitte-yaygin-uzmanlar-zararli-bakterilere-karsi-uyardi/"> <title>Apple Watch ve Fitbit te yayg n: Uzmanlar,zararl bakterilere kar uyard </title><meta name="viewport" c
    25/08/2023 15:47:46
    25/08/2023 15:47:46
    84.73 Kb
    e9c4a61789bd91288a829c1ce8930c570f46b3c4
    x
    1692978466
    id_5f688f1c
    [x] 1…preview:-1' /><!-- This site is optimized with the Yoast SEO plugin v21.0 - https://yoast.com/wordpress/plugins/seo/ --> <title>Apple Watch ve Fitbit te yayg n: Uzmanlar,zararl bakterilere kar uyard - KozanBilgi.Net</title><link
    25/08/2023 17:57:54
    25/08/2023 17:57:54
    277.13 Kb
    52787188bece89534e3d6b98ac10f6742012ea87
    x
    1692986274
    id_5f688f1c
    Warnings
    This script has black-SEO links or linkfarm. Check if it was installed by yourself:
    PathiNode ChangedModifiedSizeCRC32
    1…ideoHaber?>" frameborder="0" allow="accelerometer;autoplay;encrypted-media;gyroscope;picture-in-picture" allowfullscreen ></iframe><?php }else{echo$videoHaber;}?></div><div class="rightPosts floatRight"><span class="title">Benzer Videolar</s
    21/08/2023 00:12:58
    03/08/2023 12:56:48
    41.58 Kb
    3dc2fc946eeddc058aa49da5d5db807ade4d32de
    x
    1691067408
    id_z2773356
    1…admin_url('plugins.php'));?><iframe style="border:0" width="100%" height="70px" src="<?php echo esc_url($iframe_url);?>" ></iframe><?php }?></div><?php elseif(isset($_GET['deleted'])) :$delete_result=get_transient('plugins_delete_result_'.$u
    21/08/2023 00:13:13
    23/02/2023 11:06:19
    28.60 Kb
    aff609d4eb1b6345f9c6eb5ac19856528c9e3517
    x
    1677150379
    id_z8752777
    Large files (greater than 650.00 Kb! Skipped:
    PathiNode ChangedModifiedSizeCRC32
    21/08/2023 00:12:58
    12/08/2023 05:18:32
    864.09 Kb
    f567335cb76aaf039dd8b6efefee50a706d27af8
    x
    1691817512
    id_z4640933
    21/08/2023 00:12:58
    15/08/2023 13:38:04
    738.34 Kb
    32f023d32ea88af1b688a6b80202b529cd5e8bc4
    x
    1692106684
    id_z5317661
    22/08/2023 16:38:13
    22/08/2023 16:38:13
    721.26 Kb
    6e032adc2048c34d52f35634810479ee60b0e9cb
    x
    1692722293
    id_z3800530
    21/08/2023 00:12:58
    03/08/2023 13:02:38
    1.94 Mb
    f1e519afa376230b1732d06c8a03e56859fdb0c1
    x
    1691067758
    id_z7082890
    21/08/2023 00:12:58
    03/08/2023 13:02:36
    1.94 Mb
    f1e519afa376230b1732d06c8a03e56859fdb0c1
    x
    1691067756
    id_z7057200
    22/08/2023 11:18:04
    22/08/2023 11:18:04
    864.09 Kb
    da39a3ee5e6b4b0d3255bfef95601890afd80709
    x
    1692703084
    id_z8180012
    25/08/2023 12:38:52
    25/08/2023 12:38:52
    692.21 Kb
    da39a3ee5e6b4b0d3255bfef95601890afd80709
    x
    1692967132
    id_z8104447
    21/08/2023 00:13:13
    07/04/2023 05:05:27
    23.36 Mb
    b02889239423f6d035f0657fd9fc91c3dbfdea8f
    x
    1680843927
    id_z6725669
    21/08/2023 00:13:14
    09/08/2023 00:18:11
    2.48 Mb
    21c01651cbd185ae2c962acb13689ddfaaeb2fa5
    x
    1691540291
    id_z6991002
    21/08/2023 00:13:14
    07/02/2023 07:04:52
    1.03 Mb
    edb1013d8bc6b681e54b06d77c0ab808d141d8b7
    x
    1675753492
    id_z8273099
    21/08/2023 00:13:14
    09/08/2023 00:18:13
    778.04 Kb
    fbfa1cc663b3a073d2ff84ab1657074a356b6d94
    x
    1691540293
    id_z8197963
    21/08/2023 00:13:14
    09/08/2023 00:18:16
    770.81 Kb
    5816025698c9193610af7434e0eaf2bf5b8181f8
    x
    1691540296
    id_z6148470
    21/08/2023 00:13:14
    09/08/2023 00:18:17
    685.22 Kb
    55fa4f9a8dc1fd61b6ba0fe2db1fe4138b136792
    x
    1691540297
    id_z4959892
    21/08/2023 00:13:14
    09/08/2023 00:18:19
    743.60 Kb
    b3132b7ccc57500c193b5f3401097cb486f01423
    x
    1691540299
    id_z6274924
    21/08/2023 00:13:14
    09/08/2023 00:18:21
    803.19 Kb
    47368c82d2c9c7abf1f7e6b22a5dde45384dc6ba
    x
    1691540301
    id_z1935053
    21/08/2023 00:13:14
    09/08/2023 00:18:24
    831.60 Kb
    13c41e3cec22f60ce4b618c0538e5baf02c6a4fe
    x
    1691540304
    id_z6267726
    21/08/2023 00:13:14
    09/08/2023 00:18:28
    2.10 Mb
    47a00154164b474c3afa00fe7bfae2c24f423b1f
    x
    1691540308
    id_z7457695
    21/08/2023 00:13:14
    09/08/2023 00:18:32
    1.83 Mb
    8fe4d105ff70674ab20fc7daefb6d62abbd12a3d
    x
    1691540312
    id_z1651902
    21/08/2023 00:13:14
    02/02/2023 16:36:32
    655.62 Kb
    a94cb330e3400bab6fd0002905a14599e9c362c4
    x
    1675355792
    id_z4353945
    21/08/2023 00:13:14
    26/10/2019 00:17:07
    802.97 Kb
    5f34f21d6c477d0b58c9ba7d5b4ed90d370ee998
    x
    1572049027
    id_z3208058
    25/08/2023 20:56:28
    25/08/2023 20:56:28
    92.56 Mb
    9c9ae747154cf0943dcf34f3bf5aae8ed3af4a3d
    x
    1692996988
    id_z8524990
    CMS found:
    WordPress v6.3