Cleaning user owned files from /var/tmp/

Fixing any 777 perms



Any items listed here which are folders named with 5 to 7 random letters are are likely FTP account hacks



Checking for known bad files
/home2/citizenx/public_html/cp.php
/home2/citizenx/public_html/el/administrator/components/com_jbolo/models/cp.php
/home2/citizenx/public_html/el/tmp/j.php
/home2/citizenx/public_html/el/cp.php

Checking for known spam scripts

/home2/citizenx/public_html/publicmarket/cache/7410b0181bf6988f63053a361862d93e.spc
/home2/citizenx/public_html/kingsalmonconstruction/coblecompany/wp-content/tdo-mini-forms/include/tdomf-spam.php
/home2/citizenx/public_html/kingsalmonconstruction/coblecompany/wp-content/tdo-mini-forms.1/include/tdomf-spam.php
/home2/citizenx/public_html/kingsalmonconstruction/wp-content/tdo-mini-forms/include/tdomf-spam.php
/home2/citizenx/public_html/el/cgi-bin.php
/home2/citizenx/public_html/el/administrator/components/com_joomlastats/install/all.data.joomlastats.inc.php
/home2/citizenx/public_html/el/administrator/components/com_sh404sef/logs/2012-07-sh404SEF_security_log.151.txt
/home2/citizenx/public_html/el/cache/com_content/c835d1b4005cb70865d7fe918095bfdd.php
/home2/citizenx/public_html/el/cache/com_content/98759ce214f01a00ce5bb6795765e223.php
/home2/citizenx/public_html/el/cache/com_content/1420199ae98520d4b4ef272d2275f36f.php
/home2/citizenx/public_html/el/cache/com_content/d95e4f27275449a9858c6fcef19e6ac6.php
/home2/citizenx/public_html/el/cache/com_content/d419fdd49a23df8ddab88cae6d5038e0.php
/home2/citizenx/public_html/el/cache/com_content/c9fdb02cfdd7293bd1d916c754ff5abf.php
/home2/citizenx/public_html/el/cache/com_content/a6e5ff33debb3cfae8d3de67221e2f45.php
/home2/citizenx/public_html/el/cache/com_content/bdfafec0dc25157a882a1e4b1798b050.php
/home2/citizenx/public_html/el/cache/com_content/0a47091ab1ac914003e96c61c5e284de.php
/home2/citizenx/public_html/el/cache/com_content/a123971b211e4d02b0108bb5436a5cbd.php
/home2/citizenx/public_html/el/cache/com_content/d3c43068440cbdd7873f831f295ea749.php
/home2/citizenx/public_html/el/cache/com_content/ed7bdd062b9acaab62c5df24e1817e98.php
/home2/citizenx/public_html/el/cache/com_content/83a3f1b2dfccea9d3312d4436c88dcbc.php
/home2/citizenx/public_html/el/cache/com_content/f5b658904a7c623f8d4bd7e14db129af.php
/home2/citizenx/public_html/el/cache/com_content/5a4b87b3fc343ab1d14bc28e02175b05.php
/home2/citizenx/public_html/el/cache/com_content/20f4ffce0157b126fa49a0f96a41ca2e.php
/home2/citizenx/public_html/el/cache/com_content/2fbb542d9e3f2a626f96747ddcd98f2c.php
/home2/citizenx/public_html/el/cache/com_content/e4e55b2fe7bd57786cb70efde6a1e19f.php
/home2/citizenx/public_html/el/cache/com_content/2934d52fc4290ac35d53ed8afbf6f635.php
/home2/citizenx/public_html/el/cache/com_content/df73c2e430ebd500cdcec2d6af9798e5.php
/home2/citizenx/public_html/el/cache/com_content/fc798dd7d8f953c588a57f51b2859d20.php
/home2/citizenx/public_html/el/cache/com_content/eb166951b0fbbbf6e2e72d8fa7c2e100.php
/home2/citizenx/public_html/el/cache/com_content/af87345c1a225f4f952f1830ad6d010b.php
/home2/citizenx/public_html/el/cache/com_content/1716237b2baf02f60b21dd9bf232bb96.php
/home2/citizenx/public_html/el/cache/com_content/a26029b0ba721701055865e4f43372ed.php
/home2/citizenx/public_html/el/cache/com_content/eb28565f893df378e4b87fb808a45cc1.php
/home2/citizenx/public_html/el/cache/com_content/66968478ece17a3559fc0e92c56d573d.php
/home2/citizenx/public_html/el/cache/com_content/4c0a9301bd4f84bf9aa413fe34c357df.php
/home2/citizenx/public_html/el/cache/com_content/d38959fd2945e1481eaf9a4550942a54.php
/home2/citizenx/public_html/el/cache/com_content/08cedd57afb6f3b41e0541b06f3d0d3b.php
/home2/citizenx/public_html/el/cache/com_content/6ffce252c718b6ead2c24a02af7355e8.php
/home2/citizenx/public_html/el/cache/com_content/b735f5e54bc9d19ef8dc54955abfed5b.php
/home2/citizenx/public_html/el/cache/com_content/95867c0083b33f7a6d0f3fef57a6425b.php
/home2/citizenx/public_html/el/cache/com_content/5e573fe34b96bb82df0dcc1b855f8376.php
/home2/citizenx/public_html/el/cache/com_content/144cae5e6a02a8f37a49621a3e156cde.php
/home2/citizenx/public_html/el/cache/com_content/aaa4121e09c5f5d106ec77870accdd16.php
/home2/citizenx/public_html/el/cache/com_content/e6a22b9b3e0e237af3e31c45f103a68a.php
/home2/citizenx/public_html/el/cache/com_content/83c1cfa94345088981eac6dd0c763e2a.php
/home2/citizenx/public_html/el/cache/com_content/e18754a76f37e29cff02b4881ec22bb0.php
/home2/citizenx/public_html/el/cache/com_content/de7ad10d86fc7cd07667c9e5b3556916.php
/home2/citizenx/public_html/el/cache/com_content/a5a770e8520df626a2f1fdedbbac0902.php
/home2/citizenx/public_html/el/cache/com_content/1b35f66826f87ae39ecce471b3bb560d.php
/home2/citizenx/public_html/el/cache/com_content/a312f1d952ac183494f069a842bbcfa8.php
/home2/citizenx/public_html/el/cache/com_content/d7c7a70c1f82b065c2f2823fb4954792.php
/home2/citizenx/public_html/el/cache/com_content/ede29ee3fc39543f1c12c2f1a1e4a422.php
/home2/citizenx/public_html/el/cache/com_content/3224edcf315c28e570efa994473c8941.php
/home2/citizenx/public_html/el/cache/com_content/1247bed896127406b19f86fb2d4176ea.php
/home2/citizenx/public_html/el/cache/com_content/3d10fa70267a33b68903b4f84d045fcd.php
/home2/citizenx/public_html/el/cache/com_content/740e1c44405fcc4df46cf0af645450f1.php
/home2/citizenx/public_html/el/cache/com_content/3ba179003c3c93b03a5c5093a14d0b32.php
/home2/citizenx/public_html/el/cache/com_content/85300bd27daeb945ba05d10f1d926309.php
/home2/citizenx/public_html/el/cache/com_content/2fb90c5cdb44c988bfaad154dd93dfbf.php
/home2/citizenx/public_html/el/cache/com_content/a4e91a0487cbac971dd4779cb4092095.php
/home2/citizenx/public_html/el/cache/com_content/4bed88df653828c429060b3a7ec006e1.php
/home2/citizenx/public_html/el/cache/com_content/ccff4a8c4d2c089e0615c08c83d6b342.php
/home2/citizenx/public_html/el/cache/com_content/a0b8227b1c5c2778900e7ae6916b2e69.php
/home2/citizenx/public_html/el/cache/com_content/c39f4af7cacf3fd3cb6287b056e39974.php
/home2/citizenx/public_html/el/cache/com_content/ff9c717fb50576655fcbde6b20781aec.php
/home2/citizenx/public_html/el/cache/com_content/db8fd9eb8a4acf4ddc1d6baa993d9e28.php
/home2/citizenx/public_html/el/cache/com_content/e6c06fbfdb99f12504dbf7be6f227669.php
/home2/citizenx/public_html/el/cache/com_content/b0efb11017d469b1dae009c912580214.php
/home2/citizenx/public_html/el/cache/com_content/7b520065dfc82735fb0433227fcf1b6a.php
/home2/citizenx/public_html/el/cache/com_content/2988c4b6487cfa2eeca23aa18f435c65.php
/home2/citizenx/public_html/el/cache/com_content/750383d6e3b41c69c6cfc4511532c2c5.php
/home2/citizenx/public_html/el/cache/com_content/c80ce7289d8f4e19173e9d39603da372.php
/home2/citizenx/public_html/el/cache/com_content/e3e87f6d77e98fb5451f5d8cce4aa78b.php
/home2/citizenx/public_html/el/cache/com_content/138e17d3d71e410b97d86e6a785a105c.php
/home2/citizenx/public_html/el/cache/com_content/c53c9d49c627a4969971333872337189.php
/home2/citizenx/public_html/el/cache/com_content/d0b84f478aaa46c4b869fdb87a24896b.php
/home2/citizenx/public_html/el/cache/com_content/2db8ff2715dee960ee263ce366be6927.php
/home2/citizenx/public_html/el/cache/com_content/51b3d6bb226545acec52a7126a897dd3.php
/home2/citizenx/public_html/el/cache/com_content/35d5920b42a0687c73ff1429bec51bd9.php
/home2/citizenx/public_html/el/cache/com_content/ec421ff391bb3615477beb6ccce4cd65.php
/home2/citizenx/public_html/el/cache/com_content/dd2a9ecb6d66eea6ceccd32c8ec6a3a0.php
/home2/citizenx/public_html/el/cache/com_content/bce7cc1303ee36506160ed622366b0bd.php
/home2/citizenx/public_html/el/cache/com_content/111605f7e045793be5b0243f7ef9d35a.php
/home2/citizenx/public_html/el/cache/com_content/e878cca1837d43f553618fe59bc11f56.php
/home2/citizenx/public_html/el/cache/com_content/e23bed9765e681bdbf33aea69915f028.php
/home2/citizenx/public_html/el/cache/com_content/b2b1c69af4992a6ef478d8f8ad334cec.php
/home2/citizenx/public_html/el/cache/com_content/64bf9ef8baca56df37e57eb616e5ffbe.php
/home2/citizenx/public_html/el/cache/com_content/17458fdb0a39840654e6b24a0bd6c342.php
/home2/citizenx/public_html/el/cache/com_content/f258c5c5712b4041f83101043766c6aa.php
/home2/citizenx/public_html/el/cache/com_content/a01717c815c7dc19904eda70cb5d7f95.php
/home2/citizenx/public_html/el/cache/com_content/260eec9ec7541352776edf1a4d2d954c.php
/home2/citizenx/public_html/el/cache/com_content/bf2aa46d500583d72768bd3c811efa56.php
/home2/citizenx/public_html/el/cache/com_content/47711d7ce6341344a2c8a26c8b34b21a.php
/home2/citizenx/public_html/el/cache/com_content/731d8eee17b64ebfd25a77f2d657f3fa.php
/home2/citizenx/public_html/el/cache/com_content/2d93ae0d2cbe2ae2cb1c98d1c3fc6ee7.php
/home2/citizenx/public_html/el/cache/com_content/6a3a24a68db8ec94bb2822967e62e6fe.php
/home2/citizenx/public_html/el/cache/com_content/e28ae8f1b48ce4f743ba3e07f9e38413.php
/home2/citizenx/public_html/el/cache/com_content/94cf3fda4cd29d3c3d133fac99915df7.php
/home2/citizenx/public_html/el/cache/com_content/095c8e0bad52f7189453436a322ff0ce.php
/home2/citizenx/public_html/el/cache/com_content/77d0cd73d8ec9b26f105b15b3994e634.php
/home2/citizenx/public_html/el/cache/com_content/80696c0faeacbcc135e8bfd55310bb8c.php
/home2/citizenx/public_html/el/cache/com_content/36515b420b325f535942e52a8d9225ce.php
/home2/citizenx/public_html/el/cache/com_content/75ad18c6382d7acabb58699cf2124e8b.php
/home2/citizenx/public_html/el/cache/com_content/c8a172f2d7a00d4fd580e38265ae8949.php
/home2/citizenx/public_html/el/cache/com_content/99ba565161a21b2d9db04753528f17aa.php
/home2/citizenx/public_html/el/cache/com_content/3240e6ed3783f89c938512718e18e32b.php
/home2/citizenx/public_html/el/cache/com_content/eabb07eb76b67b6a288f8666c0629a36.php
/home2/citizenx/public_html/el/cache/com_content/b27114bb0ecf81f5fa57f201d5950748.php
/home2/citizenx/public_html/el/cache/com_content/8f03b429deb4012a336404e226a818f7.php
/home2/citizenx/public_html/el/cache/com_content/ad779df8f13df6d44abb650d165c11a6.php
/home2/citizenx/public_html/el/cache/com_content/9438a962ce4204a0adb6839bd2ecfb3c.php
/home2/citizenx/public_html/el/cache/com_content/4634e7b34a6c56cbc00d1cf8161b7877.php
/home2/citizenx/public_html/el/cache/com_content/eaaf5d0f4a53ace03c3609dd91b51724.php
/home2/citizenx/public_html/el/cache/com_content/3883830769dc3bdf55f3e6f0082d30db.php
/home2/citizenx/public_html/el/cache/com_content/4fd39566d5f50d8f8e9e3ff662bdd4e2.php
/home2/citizenx/public_html/el/cache/com_content/7fc92e1120d972df5f589dafbad0168d.php
/home2/citizenx/public_html/el/cache/com_content/3d78391fd214d90460357ac7f945ecec.php
/home2/citizenx/public_html/el/cache/com_content/d082b04be28fb90a822ffc54cd35391c.php
/home2/citizenx/public_html/el/cache/com_content/dab4a0a81645eead34072bb77370f1f2.php
/home2/citizenx/public_html/el/cache/com_content/632aeb15faa3013811ba36fe77fb55fd.php
/home2/citizenx/public_html/el/cache/com_content/56fd701e156658fe18b193bc01de2aa2.php
/home2/citizenx/public_html/el/cache/com_content/26e0a5bfb35fec8421f63550b4efc90b.php
/home2/citizenx/public_html/el/cache/com_content/336eb3a4be886d42d59bd6d982e7e17b.php
/home2/citizenx/public_html/el/cache/com_content/5a23467f7a8e76c400e84f13c18db392.php
/home2/citizenx/public_html/el/cache/com_content/277a6d21a05d04cb0842ee55903f1a0d.php
/home2/citizenx/public_html/el/cache/com_content/f4fac337274a79f0eac24bde41bc0c93.php
/home2/citizenx/public_html/el/cache/com_content/5cf703fea5018d3c144033efca50b04d.php
/home2/citizenx/public_html/el/cache/com_content/d427e976031905012f1bf248516b0b95.php
/home2/citizenx/public_html/el/cache/com_content/c7f3a1023123691afc92c94c27fa13d1.php
/home2/citizenx/public_html/el/cache/com_content/733a90a203864b6ec7e46fcae73819be.php
/home2/citizenx/public_html/el/cache/com_content/e861eac486be4787c2a5cb35b1a20728.php
/home2/citizenx/public_html/el/cache/com_content/559a496ad8df10696f8c1a55949da9e6.php
/home2/citizenx/public_html/el/cache/com_content/f0a104b26bc6b809228024f87d5df3a9.php
/home2/citizenx/public_html/el/cache/com_content/97fb5021fec6d60abf6bd4f288efd504.php
/home2/citizenx/public_html/el/cache/com_content/50e92567e75e9d1f4a73032cf1dc7d74.php
/home2/citizenx/public_html/el/cache/com_content/2a364ae41fd90d32fb7d9afdf554a424.php
/home2/citizenx/public_html/el/cache/com_content/877299253d4b38a45ce6c046650865b6.php
/home2/citizenx/public_html/el/cache/com_content/3319abd2480748c7cdfac71c8cee4c69.php
/home2/citizenx/public_html/el/cache/com_content/423ca011fc8b838d260f1ee0c7bb6082.php
/home2/citizenx/public_html/el/cache/com_content/f1cedbb2e5d48f07dcbbdeeb5b7a48a0.php
/home2/citizenx/public_html/el/cache/com_content/aa1bb8401b20478393a7f99e1b5ab5e7.php
/home2/citizenx/public_html/el/cache/com_content/83fee43ed3f77ac8c6b76ee036a3128c.php
/home2/citizenx/public_html/el/cache/com_content/5ef4d20f0e29faee0e3a94119429404b.php
/home2/citizenx/public_html/el/cache/com_content/83fe490d640fa03dce83f7f11abde8ac.php
/home2/citizenx/public_html/el/cache/com_content/dcfe8a211f04a4d6c1df031e1cc9967a.php
/home2/citizenx/public_html/el/cache/com_content/ea3c6d7cab91ea97df8f81213bc65a62.php
/home2/citizenx/public_html/el/cache/com_content/af2ec061251a665b042daf3190728169.php
/home2/citizenx/public_html/el/cache/com_content/5e05b58d35233445367354742c9b0228.php
/home2/citizenx/public_html/el/cache/com_content/b4749cbe493dd34a57b206c4b10d011e.php
/home2/citizenx/public_html/el/cache/com_content/bf66e08cb73b43caa85b7a27c294db10.php
/home2/citizenx/public_html/el/cache/com_content/43214abb143af9325cc3d1bed682fd28.php
/home2/citizenx/public_html/el/cache/com_content/8cda21b1a95260b56b5be5284e1a1b7e.php
/home2/citizenx/public_html/el/cache/com_content/855314ca9fd41a763da86b800fe2e9d7.php
/home2/citizenx/public_html/el/cache/com_content/0964132fde604e82d7bea27e047c0bec.php
/home2/citizenx/public_html/el/cache/com_content/7cb4d4c5ed037453534280b3ab840e5d.php
/home2/citizenx/public_html/el/cache/com_content/8c30faabd434f25eaca032eab1ede0d0.php
/home2/citizenx/public_html/el/cache/com_content/03b66823fbf9426b7d95203ec24bf364.php
/home2/citizenx/public_html/el/cache/com_content/7db6f15b712ab165a79f2c43055c6f23.php
/home2/citizenx/public_html/el/sexo.php

These files are suspicious and should be looked at before deleting


The redirects in these files may not be legitimate. Often the actual file name will give you an idea if it is legit ot not. If any .htaccess files are listed here, they need to be cleaned


TimThumb fixes


Thumbs DB fixes


Completed


Started at: Thu Aug 16 18:52:41 MDT 2012



/home2/citizenx/public_html/cp.txt
/home2/citizenx/public_html/publicmarket/templates/themza_j15_25/index.php
/home2/citizenx/public_html/confspy.log
/home2/citizenx/public_html/othelloculturalexchange/wp-content/themes/Castalia/footer.php
/home2/citizenx/public_html/othelloculturalexchange/wp-content/themes/International_Travel/functions.php
/home2/citizenx/public_html/othelloculturalexchange/wp-content/themes/eye-gaze-premium-wordpress-theme/eye-gaze-premium-wordpress-theme/Open-Theme-Files/EYEGaze/phpThumb/docs/phpthumb.changelog.txt
/home2/citizenx/public_html/othelloculturalexchange/wp-content/themes/newtravel-mag/footer.php
/home2/citizenx/public_html/othelloculturalexchange/wp-content/themes/tour-around/functions.php
/home2/citizenx/public_html/kingsalmonconstruction/coblecompany/wp-content/plugins/yet-another-photoblog/lib/phpThumb-1.7.8/docs/phpthumb.changelog.txt
/home2/citizenx/public_html/kingsalmonconstruction/coblecompany/wp-content/plugins/yet-another-photoblog/lib/Savant2-2.4.3/Savant2/Savant2_Compiler_basic.php
/home2/citizenx/public_html/kingsalmonconstruction/wp-content/themes/wp-modern-architecture-10/footer.php
/home2/citizenx/public_html/cp.php
/home2/citizenx/public_html/el/cp.txt
/home2/citizenx/public_html/el/cgi-bin.php
/home2/citizenx/public_html/el/alpha.php
/home2/citizenx/public_html/el/tmp/j.php
/home2/citizenx/public_html/el/confspy.log
/home2/citizenx/public_html/el/page2.php
/home2/citizenx/public_html/el/time/sexo.php
/home2/citizenx/public_html/el/cp.php
/home2/citizenx/public_html/el/videos/tol.php
/home2/citizenx/public_html/el/sexo.php
/home2/citizenx/public_html/el/al.txt

Completed at: Thu Aug 16 19:09:17 MDT 2012


Started at: Thu Aug 16 19:09:17 MDT 2012


Started at: Thu Aug 16 19:20:04 MDT 2012

/home2/citizenx/public_html/el/alpha.php

Completed at: Thu Aug 16 19:23:09 MDT 2012



/home2/citizenx/public_html/othelloculturalexchange/wp-content/themes/travelmate-blog-20/footer.php
/home2/citizenx/public_html/el/cgi-bin.php
/home2/citizenx/public_html/el/page2.php
/home2/citizenx/public_html/el/time/sexo.php
/home2/citizenx/public_html/el/sexo.php

The Content listed below may not be a complete list of malicious content on your account.
You are ultimately responsible for all of your content.
This is just what we have found that appears to be malicious.
These files appear to contain malicious code. You will want to review the files and remove the injected code from important files and/or remove unused or invalid files.