| Server IP : 103.119.228.120 / Your IP : 13.59.147.113 Web Server : Apache System : Linux v8.techscape8.com 3.10.0-1160.119.1.el7.tuxcare.els2.x86_64 #1 SMP Mon Jul 15 12:09:18 UTC 2024 x86_64 User : nobody ( 99) PHP Version : 5.6.40 Disable Function : shell_exec,symlink,system,exec,proc_get_status,proc_nice,proc_terminate,define_syslog_variables,syslog,openlog,closelog,escapeshellcmd,passthru,ocinum cols,ini_alter,leak,listen,chgrp,apache_note,apache_setenv,debugger_on,debugger_off,ftp_exec,dl,dll,myshellexec,proc_open,socket_bind,proc_close,escapeshellarg,parse_ini_filepopen,fpassthru,exec,passthru,escapeshellarg,escapeshellcmd,proc_close,proc_open,ini_alter,popen,show_source,proc_nice,proc_terminate,proc_get_status,proc_close,pfsockopen,leak,apache_child_terminate,posix_kill,posix_mkfifo,posix_setpgid,posix_setsid,posix_setuid,dl,symlink,shell_exec,system,dl,passthru,escapeshellarg,escapeshellcmd,myshellexec,c99_buff_prepare,c99_sess_put,fpassthru,getdisfunc,fx29exec,fx29exec2,is_windows,disp_freespace,fx29sh_getupdate,fx29_buff_prepare,fx29_sess_put,fx29shexit,fx29fsearch,fx29ftpbrutecheck,fx29sh_tools,fx29sh_about,milw0rm,imagez,sh_name,myshellexec,checkproxyhost,dosyayicek,c99_buff_prepare,c99_sess_put,c99getsource,c99sh_getupdate,c99fsearch,c99shexit,view_perms,posix_getpwuid,posix_getgrgid,posix_kill,parse_perms,parsesort,view_perms_color,set_encoder_input,ls_setcheckboxall,ls_reverse_all,rsg_read,rsg_glob,selfURL,dispsecinfo,unix2DosTime,addFile,system,get_users,view_size,DirFiles,DirFilesWide,DirPrintHTMLHeaders,GetFilesTotal,GetTitles,GetTimeTotal,GetMatchesCount,GetFileMatchesCount,GetResultFiles,fs_copy_dir,fs_copy_obj,fs_move_dir,fs_move_obj,fs_rmdir,SearchText,getmicrotime MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /usr/local/maldetect/internals/ |
Upload File : |
if [ -z "$type" ]; then
type=scan
fi
cat >> $tmpf <<EOF
HOST: $HOSTNAME
SCAN ID: $scanid
STARTED: $scan_start_hr
COMPLETED: $scan_end_hr
ELAPSED: ${scan_et}s [find: ${file_list_et}s]
EOF
if [ "$spath" ]; then
echo "PATH: $hrspath" >> $tmpf
fi
if [ "$days" ] && [ ! "$days" == "all" ]; then
echo "RANGE: $days days" >> $tmpf
fi
cat >> $tmpf <<EOF
TOTAL HITS: $user_tot_hits
TOTAL CLEANED: $user_tot_cl
EOF
if [ "$quarantine_hits" == "0" ] && [ ! "$tot_hits" == "0" ]; then
echo "WARNING: Automatic quarantine is currently disabled, detected threats are still accessible to users!" >> $tmpf
echo "To enable, set quarantine_hits=1 and/or to quarantine hits from this scan run:" >> $tmpf
echo -e "/usr/local/sbin/maldet -q $datestamp.$$\n" >> $tmpf
elif [ "$quarantine_hits" == "1" ]; then
echo "NOTICE: Automatic quarantine is enabled, and all detected threats have been quarantined." >> $tmpf
echo "All quarantined files have been moved to $quardir, and their metadata have been preserved." >> $tmpf
echo "Please see below for details on which files have been moved to quarantine." >> $tmpf
fi
if [ "$quarantine_clean" == "1" ]; then
if [ "$type" == "scan" ] && [ -f "$sessdir/clean.$$" ] && [ ! -z "$(cat $sessdir/clean.$$)" ]; then
cleaned_list="$sessdir/clean.$$"
fi
if [ -f "$cleaned_list" ]; then
cat >> $tmpf <<EOF
CLEANED & RESTORED FILES:
$(cat $cleaned_list)
EOF
fi
if [ "$quarantine_suspend_user" == "1" ]; then
if [ -f "$sessdir/suspend.users.$$" ] && [ ! -z "$(cat $sessdir/suspend.users.$$)" ]; then
suspended_list="$sessdir/suspend.users.$$"
fi
if [ -f "$suspended_list" ]; then
cat >> $tmpf <<EOF
SUSPENDED ACCOUNTS:
$(cat "$suspended_list")
EOF
fi
fi
fi
if [ ! "$user_tot_hits" == "0" ]; then
hitlist_file="$tmpdir/.${sys_user}.hits"
if [ -f "$hitlist_file" ]; then
echo "FILE HIT LIST:" >> $tmpf
if [ "$coltest" ]; then
cat $hitlist_file | column -s ':' -t -o ':' >> $tmpf
else
cat $hitlist_file >> $tmpf
fi
fi
fi
cat >> $tmpf <<EOF
===============================================
Linux Malware Detect v$ver < proj@rfxn.com >
EOF