HOST:      earth.rso.bg
SCAN ID:   180426-0236.860408
STARTED:   Apr 26 2018 02:36:10 +0300
COMPLETED: Apr 26 2018 02:40:01 +0300
ELAPSED:   231s [find: 0s]

PATH:          /home/demcdads/
TOTAL FILES:   20418
TOTAL HITS:    6
TOTAL CLEANED: 0

WARNING: Automatic quarantine is currently disabled, detected threats are still accessible to users!
To enable, set quarantine_hits=1 and/or to quarantine hits from this scan run:
/usr/local/sbin/maldet -q 180426-0236.860408

FILE HIT LIST:
{YARA}eval_post : /home/demcdads/logs/megastroi.decor-trade.bg-Apr-2018.gz
{HEX}Malware.Expert.generic.str.replace.2 : /home/demcdads/multisite_visitki/modules/contextual/shortcut.php
{HEX}Malware.Expert.generic.eval.64 : /home/demcdads/multisite_visitki/sites/all/themes/main_theme/tracker.php
{YARA}eval_post : /home/demcdads/tmp/analog/megastroi.decor-trade.bg/cache
{YARA}eval_post : /home/demcdads/tmp/analog/addkostoff.decor-trade.bg/cache
{HEX}Malware.Expert.generic.eval.base64.decode.36 : /home/demcdads/addkostoff.com/sites/libasset.php
===============================================
Linux Malware Detect v1.6.2 < proj@rfxn.com >