/home/evapharm4897/data/www/actisperm.ru/file.php - infected with PHP.Shell.702
/home/evapharm4897/data/www/actisperm.ru/modules/aggregator/qwfwutwg.php - infected with PHP.Shell.702
/home/evapharm4897/data/www/evapharm.ru/includes/database/sqlite/krqacbyi.php - infected with PHP.Shell.702
/home/evapharm4897/data/www/eva-line.ru/sites/all/libraries/colorbox/hvooxktf.php - infected with PHP.Shell.702
/home/evapharm4897/data/www/eva-line.ru/ini.php - infected with PHP.Shell.702
/home/evapharm4897/data/www/actisperm.ru/sites/all/themes/omega/zirsbytx.php - infected with PHP.Shell.702
/home/evapharm4897/data/www/evapharm.ru/5psbunkj.php - infected with PHP.Shell.702
/home/evapharm4897/data/www/actisperm.ru/page.php - infected with PHP.Shell.702
/home/evapharm4897/data/www/actisperm.ru/modules/file/tests/mmtujxgp.php - infected with PHP.Shell.702
/home/evapharm4897/data/www/evapharm.ru/info.php - infected with PHP.Shell.702
/home/evapharm4897/data/www/evapharm.ru/article.php - infected with PHP.Shell.702
/home/evapharm4897/data/www/eva-line.ru/modules/aggregator/tests/lppinzfb.php - infected with PHP.Shell.702
/home/evapharm4897/data/www/evapharm.ru/misc/farbtastic/zmmrqpkx.php - infected with PHP.Shell.702
/home/evapharm4897/data/www/evapharm.ru/modules/simpletest/tests/scdjygkv.php - infected with PHP.Shell.702
/home/evapharm4897/data/www/evapharm.ru/modules/simpletest/lib/Drupal/qiaixuzf.php - infected with PHP.Shell.702
/home/evapharm4897/data/www/evapharm.ru/modules/system/tests/dsxezmzi.php - infected with PHP.Shell.702
/home/evapharm4897/data/www/evapharm.ru/p337ggxn.php - infected with PHP.Shell.702
/home/evapharm4897/data/www/garnilotion.com/modules/poll/dwqwzibp.php - infected with PHP.Shell.702
/home/evapharm4897/data/www/garnilotion.com/c3hkfpr8.php - infected with PHP.Shell.702
/home/evapharm4897/data/www/garnilotion.com/view.php - infected with PHP.Shell.702
/home/evapharm4897/data/www/hyruan.ru/general.php - infected with PHP.Shell.702
/home/evapharm4897/data/www/garnilotion.com/help.php - infected with PHP.Shell.702
/home/evapharm4897/data/www/evapharm.ru/modules/profile/lqxkvcmd.php - infected with PHP.Shell.702
/home/evapharm4897/data/www/hyruan.ru/sites/default/files/styles/cawgyrdz.php - infected with PHP.Shell.702
/home/evapharm4897/data/www/hyruan.ru/images.tmp/stories/statyi/ltyljghv.php - infected with PHP.Shell.702
/home/evapharm4897/data/www/hyruan.ru/themes/garland/color/tixllzjg.php - infected with PHP.Shell.702
/home/evapharm4897/data/www/kyos.ru/forum/fm2biycq.php - infected with PHP.Shell.702
/home/evapharm4897/data/www/hyruan.ru/model14.php - infected with PHP.Shell.702
/home/evapharm4897/data/www/hyruan.ru/modules/rdf/tests/ngdmtozr.php - infected with PHP.Shell.702
/home/evapharm4897/data/www/hyruan.ru/modules/simpletest/tests/psr_4_test/havzouzn.php - infected with PHP.Shell.702
/home/taxisnv1517/data/test/13491nl.php.12848 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/71349nl.php.22134 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/ap0kk5k.php.29022 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/ap0kk5k.php.7616 - infected with PHP.Shell.57
/home/evapharm4897/data/www/protescal.ru/modules/locale/hbjexezw.php - infected with PHP.Shell.702
/home/evapharm4897/data/www/protescal.ru/db.php - infected with PHP.Shell.702
/home/evapharm4897/data/www/kyos.ru/forum/noa3wbny.php - infected with PHP.Shell.702
/home/evapharm4897/data/www/kyos.ru/forum/images/regimage/fonts/wqcotjfn.php - infected with PHP.Shell.702
/home/evapharm4897/data/www/kyos.ru/forum/images/smilies/djwpzvvk.php - infected with PHP.Shell.702
/home/taxisnv1517/data/test/array_chunk.php.6600 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/asin.php.6611 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/assert.php.27199 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/assert.php.26899 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/49660nl.php.8807 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/bcadd.php.31716 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/874735.php.24492 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/borong.gif.5857 - infected with PHP.Shell.41
/home/evapharm4897/data/www/refralon.ru/modules/user/tests/dfgjepsc.php - infected with PHP.Shell.702
/home/evapharm4897/data/www/protescal.ru/xml.php - infected with PHP.Shell.702
/home/taxisnv1517/data/test/cos.php.16080 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/bcadd.php.15183 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/cos.php.20085 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/curl_init.php.14257 - infected with PHP.Shell.57
/home/evapharm4897/data/www/protescal.ru/themes/bartik/images/fkvxarpg.php - infected with PHP.Shell.702
/home/taxisnv1517/data/test/curl_setopt_array.php.21852 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/editor_plugin_src.js.12378 - infected with JS.IFrame.233
/home/taxisnv1517/data/test/editor_plugin_src.js.14047 - infected with JS.IFrame.233
/home/taxisnv1517/data/test/874735.php.26920 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/curl_init.php.13128 - infected with PHP.Shell.57
/home/evapharm4897/data/www/kyos.ru/forum/images/rating/ifgeyeqt.php - infected with PHP.Shell.702
/home/taxisnv1517/data/test/cosh.php.9756 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/each.php.5793 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/editor_plugin_src.js.1658 - infected with JS.IFrame.233
/home/taxisnv1517/data/test/editor_plugin.js.26063 - infected with JS.IFrame.233
/home/taxisnv1517/data/test/editor_plugin.js.14244 - infected with JS.IFrame.233
/home/taxisnv1517/data/test/editor_plugin_src.js.17167 - infected with JS.IFrame.233
/home/taxisnv1517/data/test/cos.php.11280 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/borong.php.20112 - infected with PHP.Shell.41
/home/taxisnv1517/data/test/editor_plugin_src.js.14266 - infected with JS.IFrame.233
/home/taxisnv1517/data/test/date_timezone_set.php.30419 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/editor_plugin_src.js.15758 - infected with JS.IFrame.233
/home/taxisnv1517/data/test/editor_plugin_src.js.14868 - infected with JS.IFrame.233
/home/taxisnv1517/data/test/editor_plugin_src.js.15138 - infected with JS.IFrame.233
/home/taxisnv1517/data/test/editor_plugin_src.js.2420 - infected with JS.IFrame.233
/home/taxisnv1517/data/test/editor_plugin_src.js.23224 - infected with JS.IFrame.233
/home/taxisnv1517/data/test/editor_plugin_src.js.17847 - infected with JS.IFrame.233
/home/taxisnv1517/data/test/editor_plugin_src.js.19314 - infected with JS.IFrame.233
/home/taxisnv1517/data/test/editor_plugin_src.js.26072 - infected with JS.IFrame.233
/home/taxisnv1517/data/test/editor_plugin_src.js.299 - infected with JS.IFrame.233
/home/taxisnv1517/data/test/editor_plugin_src.js.25519 - infected with JS.IFrame.233
/home/taxisnv1517/data/test/editor_plugin_src.js.23618 - infected with JS.IFrame.233
/home/taxisnv1517/data/test/editor_plugin_src.js.30464 - infected with JS.IFrame.233
/home/taxisnv1517/data/test/editor_plugin_src.js.2899 - infected with JS.IFrame.233
/home/taxisnv1517/data/test/editor_plugin_src.js.177 - infected with JS.IFrame.233
/home/taxisnv1517/data/test/editor_plugin_src.js.3123 - infected with JS.IFrame.233
/home/taxisnv1517/data/test/editor_plugin_src.js.4729 - infected with JS.IFrame.233
/home/taxisnv1517/data/test/editor_plugin_src.js.3188 - infected with JS.IFrame.233
/home/evapharm4897/data/www/refralon.ru/sites/all/frweitrz.php - infected with PHP.Shell.702
/home/taxisnv1517/data/test/dump.php.25479 - infected with PHP.Spambot.7
/home/taxisnv1517/data/test/dialog.js.9460 - infected with JS.IFrame.233
/home/taxisnv1517/data/test/class_parents.php.19513 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/cosh.php.677 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/editor_plugin_src.js.21253 - infected with JS.IFrame.233
/home/taxisnv1517/data/test/alias.php.14371 - infected with PHP.Spambot.7
/home/taxisnv1517/data/test/editor_plugin_src.js.26004 - infected with JS.IFrame.233
/home/taxisnv1517/data/test/array_chunk.php.24401 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/editor_plugin_src.js.758 - infected with JS.IFrame.233
/home/taxisnv1517/data/test/editor_plugin_src.js.7652 - infected with JS.IFrame.233
/home/taxisnv1517/data/test/editor_plugin_src.js.8931 - infected with JS.IFrame.233
/home/taxisnv1517/data/test/editor_plugin_src.js.9400 - infected with JS.IFrame.233
/home/taxisnv1517/data/test/editor_template_src.js.8591 - infected with JS.IFrame.233
/home/taxisnv1517/data/test/editor_plugin_src.js.7898 - infected with JS.IFrame.233
/home/taxisnv1517/data/test/en.js.15522 - infected with JS.IFrame.233
/home/taxisnv1517/data/test/editor_plugin_src.js.6213 - infected with JS.IFrame.233
/home/taxisnv1517/data/test/feof.php.12910 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/fgetss.php.14120 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/editor_template_src.js.20294 - infected with JS.IFrame.233
/home/taxisnv1517/data/test/fgetss.php.17453 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/editor_plugin_src.js.7149 - infected with JS.IFrame.233
/home/taxisnv1517/data/test/flush.php.13047 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/fstat.php.27332 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/fstat.php.11803 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/ftp_fget.php.2436 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/ftell.php.6890 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/flush.php.20530 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/ftp_fget.php.5611 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/en_dlg.js.31208 - infected with JS.IFrame.233
/home/taxisnv1517/data/test/gzopen.php.3416 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/gzfile.php.541 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/gzopen.php.11310 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/iconv_mime_decode.php.16986 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/idate.php.11493 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/idate.php.11697 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/idate.php.30648 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/image_type_to_extension.php.12772 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/image_type_to_extension.php.336 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/idate.php.12018 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/is_string.php.2967 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/keas7vs.php.25931 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/keas7vs.php.12420 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/ksort.php.13810 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/ksort.php.12105 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/index.php.10685 - infected with PHP.Siggen.16
/home/taxisnv1517/data/test/ob_get_length.php.21547 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/ob_get_status.php.18727 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/gsm.php.12912 - infected with PHP.BackDoor.8
/home/taxisnv1517/data/test/odbc_field_precision.php.3915 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/is_integer.php.26599 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/index.php.19020 - infected with PHP.Siggen.16
/home/taxisnv1517/data/test/odbc_commit.php.18926 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/loginomBK.php.29566 - infected with PHP.Spambot.7
/home/taxisnv1517/data/test/levenshtein.php.23143 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/readdir.php.11089 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/readdir.php.22874 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/is_string.php.4266 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/p8jbdry.php.9809 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/preg_split.php.14450 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/session_cache_expire.php.20561 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/session_unset.php.13566 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/pollYhS.php.22710 - infected with PHP.Spambot.7
/home/taxisnv1517/data/test/phpmail.php.212 - infected with PHP.Shell.325
/home/taxisnv1517/data/test/similar_text.php.20803 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/p8jbdry.php.29282 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/spl_classes.php.13298 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/session_get_cookie_params.php.659 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/session_get_cookie_params.php.303 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/rawurlencode.php.10737 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/session_encode.php.30264 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/robotseQY.php.4482 - infected with PHP.Spambot.7
/home/taxisnv1517/data/test/strncasecmp.php.9479 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/strncasecmp.php.19305 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/stream_socket_accept.php.20246 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/strtotime.php.4047 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/sprintf.php.13338 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/strtotime.php.19572 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/spl_classes.php.21038 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/plszip.lib.php.235 - infected with PHP.Shell.325
/home/taxisnv1517/data/test/sslbtRE.php.1397 - infected with PHP.Spambot.7
/home/taxisnv1517/data/test/template.php.20589 - infected with PHP.Spambot.7
/home/taxisnv1517/data/test/substr_compare.php.13086 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/timezone_name_get.php.127 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/substr_compare.php.781 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/strtr.php.19009 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/templates.php.17600 - infected with PHP.Packed.7
/home/taxisnv1517/data/test/strtr.php.30911 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/umask.php.5852 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/templates.php.19661 - infected with PHP.Packed.7
/home/taxisnv1517/data/test/template.php.11812 - infected with PHP.Spambot.7
/home/taxisnv1517/data/test/variant_mul.php.6533 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/timezone_name_get.php.22075 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/variant_not.php.15612 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/utf.php.16455 - infected with PHP.Spambot.7
/home/taxisnv1517/data/test/test.php.19488 - infected with PHP.Spambot.7
/home/taxisnv1517/data/test/tiny_mce_gzip.js.3048 - infected with JS.IFrame.233
/home/taxisnv1517/data/test/utf.php.8094 - infected with PHP.Spambot.7
/home/taxisnv1517/data/test/variant_abs.php.19797 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/test.php.31106 - infected with PHP.Spambot.7
/home/taxisnv1517/data/test/variant_round.php.14767 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/wp-conf.php.8866 - infected with PHP.Siggen.16
/home/taxisnv1517/data/test/wp-conf.php.20290 - infected with PHP.Siggen.16
/home/taxisnv1517/data/test/wp-images.php.17316 - infected with PHP.Packed.7
/home/taxisnv1517/data/test/x.php.22027 - infected with PHP.Upload.26
/home/taxisnv1517/data/test/wp-conf.php.10304 - infected with PHP.Siggen.16
/home/taxisnv1517/data/test/wp-conf.php.23399 - infected with PHP.Siggen.16
/home/taxisnv1517/data/test/wp-conf.php.11557 - infected with PHP.Siggen.16
/home/taxisnv1517/data/test/w2629315n.php.31559 - infected with PHP.Shell.188
/home/taxisnv1517/data/test/wp-images.php.18956 - infected with PHP.Packed.7
/home/taxisnv1517/data/test/w21837848n.php.26649 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/xmlwriter_end_pi.php.29504 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/xmlwriter_start_element_ns.php.5376 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/wp-conf.php.28762 - infected with PHP.Siggen.16
/home/taxisnv1517/data/test/xxu.php.11121 - infected with PHP.Upload.26
/home/taxisnv1517/data/test/xmlwriter_start_element_ns.php.1518 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/71349nl.php.22134 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/xml_set_element_handler.php.13184 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/xmlwriter_write_element.php.11194 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/874735.php.24492 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/xmlwriter_full_end_element.php.28616 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/13491nl.php.12848 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/ap0kk5k.php.29022 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/xml_parse.php.12569 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/ap0kk5k.php.7616 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/array_chunk.php.24401 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/array_chunk.php.6600 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/borong.php.20112 - infected with PHP.Shell.41
/home/taxisnv1517/data/www/test/49660nl.php.8807 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/bcadd.php.31716 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/asin.php.6611 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/xmlwriter_end_pi.php.11390 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/assert.php.26899 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/874735.php.26920 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/wthm1394g.php.5288 - infected with PHP.Siggen.16
/home/taxisnv1517/data/www/test/cosh.php.9756 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/borong.gif.5857 - infected with PHP.Shell.41
/home/taxisnv1517/data/www/test/curl_init.php.13128 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/cos.php.16080 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/cos.php.11280 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/class_parents.php.19513 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/wp-images.php.27304 - infected with PHP.Packed.7
/home/taxisnv1517/data/www/test/cos.php.20085 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/dialog.js.9460 - infected with JS.IFrame.233
/home/taxisnv1517/data/www/test/each.php.5793 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/assert.php.27199 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/editor_plugin.js.26063 - infected with JS.IFrame.233
/home/taxisnv1517/data/www/test/editor_plugin_src.js.15758 - infected with JS.IFrame.233
/home/taxisnv1517/data/www/test/editor_plugin_src.js.17167 - infected with JS.IFrame.233
/home/taxisnv1517/data/www/test/editor_plugin_src.js.14266 - infected with JS.IFrame.233
/home/taxisnv1517/data/www/test/editor_plugin_src.js.21253 - infected with JS.IFrame.233
/home/taxisnv1517/data/www/test/editor_plugin_src.js.177 - infected with JS.IFrame.233
/home/taxisnv1517/data/www/test/editor_plugin_src.js.14047 - infected with JS.IFrame.233
/home/taxisnv1517/data/www/test/alias.php.14371 - infected with PHP.Spambot.7
/home/taxisnv1517/data/www/test/editor_plugin_src.js.14868 - infected with JS.IFrame.233
/home/taxisnv1517/data/www/test/editor_plugin_src.js.2420 - infected with JS.IFrame.233
/home/taxisnv1517/data/www/test/editor_plugin_src.js.15138 - infected with JS.IFrame.233
/home/taxisnv1517/data/www/test/editor_plugin_src.js.25519 - infected with JS.IFrame.233
/home/taxisnv1517/data/www/test/editor_plugin_src.js.23224 - infected with JS.IFrame.233
/home/taxisnv1517/data/www/test/editor_plugin_src.js.1658 - infected with JS.IFrame.233
/home/taxisnv1517/data/www/test/editor_plugin_src.js.23618 - infected with JS.IFrame.233
/home/taxisnv1517/data/www/test/editor_plugin_src.js.2899 - infected with JS.IFrame.233
/home/taxisnv1517/data/www/test/editor_plugin_src.js.26004 - infected with JS.IFrame.233
/home/taxisnv1517/data/www/test/editor_plugin_src.js.299 - infected with JS.IFrame.233
/home/taxisnv1517/data/www/test/editor_plugin_src.js.26072 - infected with JS.IFrame.233
/home/taxisnv1517/data/www/test/editor_plugin_src.js.12378 - infected with JS.IFrame.233
/home/taxisnv1517/data/www/test/cosh.php.677 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/editor_plugin_src.js.19314 - infected with JS.IFrame.233
/home/taxisnv1517/data/www/test/editor_plugin_src.js.3123 - infected with JS.IFrame.233
/home/taxisnv1517/data/www/test/editor_plugin_src.js.3188 - infected with JS.IFrame.233
/home/taxisnv1517/data/www/test/editor_template_src.js.20294 - infected with JS.IFrame.233
/home/taxisnv1517/data/www/test/editor_plugin_src.js.30464 - infected with JS.IFrame.233
/home/taxisnv1517/data/www/test/en_dlg.js.31208 - infected with JS.IFrame.233
/home/taxisnv1517/data/www/test/editor_plugin_src.js.9400 - infected with JS.IFrame.233
/home/taxisnv1517/data/www/test/dump.php.25479 - infected with PHP.Spambot.7
/home/taxisnv1517/data/www/test/editor_plugin_src.js.8931 - infected with JS.IFrame.233
/home/taxisnv1517/data/www/test/editor_plugin_src.js.7898 - infected with JS.IFrame.233
/home/taxisnv1517/data/www/test/en.js.15522 - infected with JS.IFrame.233
/home/taxisnv1517/data/www/test/editor_plugin_src.js.758 - infected with JS.IFrame.233
/home/taxisnv1517/data/www/test/editor_plugin_src.js.6213 - infected with JS.IFrame.233
/home/taxisnv1517/data/www/test/flush.php.13047 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/fgetss.php.17453 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/curl_setopt_array.php.21852 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/editor_plugin_src.js.4729 - infected with JS.IFrame.233
/home/taxisnv1517/data/www/test/feof.php.12910 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/flush.php.20530 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/date_timezone_set.php.30419 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/fgetss.php.14120 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/ftp_fget.php.5611 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/gzfile.php.541 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/editor_plugin_src.js.17847 - infected with JS.IFrame.233
/home/taxisnv1517/data/www/test/editor_plugin.js.14244 - infected with JS.IFrame.233
/home/taxisnv1517/data/www/test/fstat.php.11803 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/fstat.php.27332 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/curl_init.php.14257 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/editor_plugin_src.js.7652 - infected with JS.IFrame.233
/home/taxisnv1517/data/www/test/ftell.php.6890 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/ftp_fget.php.2436 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/editor_plugin_src.js.7149 - infected with JS.IFrame.233
/home/taxisnv1517/data/www/test/idate.php.11493 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/idate.php.11697 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/bcadd.php.15183 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/idate.php.12018 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/editor_template_src.js.8591 - infected with JS.IFrame.233
/home/taxisnv1517/data/www/test/gzopen.php.11310 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/iconv_mime_decode.php.16986 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/gsm.php.12912 - infected with PHP.BackDoor.8
/home/taxisnv1517/data/www/test/gzopen.php.3416 - infected with PHP.Shell.57
/home/taxisnv1517/data/test/racionais.php.17415//JSTAG_2[238ec][1e6] - infected with PHP.Shellbot.46
/home/taxisnv1517/data/www/test/idate.php.30648 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/image_type_to_extension.php.12772 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/is_integer.php.26599 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/image_type_to_extension.php.336 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/ksort.php.12105 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/index.php.10685 - infected with PHP.Siggen.16
/home/taxisnv1517/data/www/test/keas7vs.php.25931 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/ob_get_length.php.21547 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/ob_get_status.php.18727 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/keas7vs.php.12420 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/p8jbdry.php.29282 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/p8jbdry.php.9809 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/levenshtein.php.23143 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/odbc_field_precision.php.3915 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/odbc_commit.php.18926 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/ksort.php.13810 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/preg_split.php.14450 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/is_string.php.2967 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/readdir.php.11089 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/readdir.php.22874 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/rawurlencode.php.10737 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/session_unset.php.13566 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/similar_text.php.20803 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/session_encode.php.30264 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/session_cache_expire.php.20561 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/spl_classes.php.21038 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/session_get_cookie_params.php.303 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/session_get_cookie_params.php.659 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/is_string.php.4266 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/index.php.19020 - infected with PHP.Siggen.16
/home/taxisnv1517/data/www/test/strncasecmp.php.9479 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/sprintf.php.13338 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/strtr.php.30911 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/strtr.php.19009 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/pollYhS.php.22710 - infected with PHP.Spambot.7
/home/taxisnv1517/data/www/test/stream_socket_accept.php.20246 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/substr_compare.php.781 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/loginomBK.php.29566 - infected with PHP.Spambot.7
/home/taxisnv1517/data/www/test/spl_classes.php.13298 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/strtotime.php.19572 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/robotseQY.php.4482 - infected with PHP.Spambot.7
/home/taxisnv1517/data/www/test/strtotime.php.4047 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/timezone_name_get.php.127 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/strncasecmp.php.19305 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/timezone_name_get.php.22075 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/substr_compare.php.13086 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/variant_not.php.15612 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/tiny_mce_gzip.js.3048 - infected with JS.IFrame.233
/home/taxisnv1517/data/www/test/umask.php.5852 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/variant_mul.php.6533 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/sslbtRE.php.1397 - infected with PHP.Spambot.7
/home/taxisnv1517/data/www/test/w21837848n.php.26649 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/xml_parse.php.12569 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/variant_round.php.14767 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/variant_abs.php.19797 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/templates.php.17600 - infected with PHP.Packed.7
/home/taxisnv1517/data/www/test/test.php.19488 - infected with PHP.Spambot.7
/home/taxisnv1517/data/www/test/w2629315n.php.31559 - infected with PHP.Shell.188
/home/taxisnv1517/data/www/test/wp-conf.php.8866 - infected with PHP.Siggen.16
/home/taxisnv1517/data/www/test/xml_set_element_handler.php.13184 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/utf.php.8094 - infected with PHP.Spambot.7
/home/taxisnv1517/data/www/test/xxu.php.11121 - infected with PHP.Upload.26
/home/taxisnv1517/data/www/test/xmlwriter_start_element_ns.php.5376 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/wp-conf.php.20290 - infected with PHP.Siggen.16
/home/taxisnv1517/data/www/test/xmlwriter_write_element.php.11194 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/xmlwriter_full_end_element.php.28616 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/xmlwriter_end_pi.php.11390 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/phpmail.php.212 - infected with PHP.Shell.325
/home/taxisnv1517/data/www/test/xmlwriter_end_pi.php.29504 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/utf.php.16455 - infected with PHP.Spambot.7
/home/taxisnv1517/data/www/test/templates.php.19661 - infected with PHP.Packed.7
/home/taxisnv1517/data/www/test/template.php.11812 - infected with PHP.Spambot.7
/home/taxisnv1517/data/www/test/wp-images.php.27304 - infected with PHP.Packed.7
/home/taxisnv1517/data/www/test/wp-images.php.18956 - infected with PHP.Packed.7
/home/taxisnv1517/data/www/test/wp-conf.php.10304 - infected with PHP.Siggen.16
/home/taxisnv1517/data/www/test/wthm1394g.php.5288 - infected with PHP.Siggen.16
/home/taxisnv1517/data/www/test/wp-images.php.17316 - infected with PHP.Packed.7
/home/taxisnv1517/data/www/test/xmlwriter_start_element_ns.php.1518 - infected with PHP.Shell.57
/home/taxisnv1517/data/www/test/test.php.31106 - infected with PHP.Spambot.7
/home/taxisnv1517/data/www/test/template.php.20589 - infected with PHP.Spambot.7
/home/taxisnv1517/data/www/test/wp-conf.php.23399 - infected with PHP.Siggen.16
/home/taxisnv1517/data/www/test/plszip.lib.php.235 - infected with PHP.Shell.325
/home/taxisnv1517/data/www/test/wp-conf.php.11557 - infected with PHP.Siggen.16
/home/taxisnv1517/data/www/test/x.php.22027 - infected with PHP.Upload.26
/home/taxisnv1517/data/www/test/wp-conf.php.28762 - infected with PHP.Siggen.16
/home/u000999677/data/email/progulyaemsya.ru/admin/.maildir/.Trash/cur/1406130068.18463_0.184v1.q0.ru:2,S//6.part//opisanie.html - infected with Trojan.Redirect.197
/home/u000999677/data/email/progulyaemsya.ru/admin/.maildir/.Trash/cur/1406099622.11180_0.184v1.q0.ru:2,S//6.part//opisanie.html - infected with Trojan.Redirect.197
/home/u000999677/data/email/progulyaemsya.ru/admin/.maildir/.Trash/cur/1406274541.25488_0.184v1.q0.ru:2,S//6.part//noch.html - infected with Trojan.Redirect.195
/home/taxisnv1517/data/www/test/racionais.php.17415//JSTAG_2[238ec][1e6] - infected with PHP.Shellbot.46
/root/DDOS/lost-dos.txt - infected with Perl.Ircbot.141
/root/-crack-/logo.php - infected with PHP.Shell.194
/home/u000999677/data/email/progulyaemsya.ru/admin/.maildir/.Trash/cur/1406477128.20186_0.184v1.q0.ru:2,S//6.part//opisanie.html - infected with Trojan.Redirect.197
/home/u000999677/data/email/progulyaemsya.ru/admin/.maildir/.Trash/cur/1407561058.30279_0.184v1.q0.ru:2,S//6.part//opisanie.html - infected with Trojan.Redirect.197
/home/u000999677/data/email/progulyaemsya.ru/admin/.maildir/.Trash/cur/1447665415.12708_0.184v1.q0.ru:2,S//5.part//dhl16112015_6987878544212.exe - infected with Trojan.Upatre.9793