HEX
Server: Apache
System: Linux info 3.0 #1337 SMP Tue Jan 01 00:00:00 CEST 2000 all GNU/Linux
User: u112693849 (10625425)
PHP: 8.1.34
Disabled: NONE
Upload Files
File: /homepages/35/d967185540/htdocs/logs/forensic/lock-1748359810.log
Please find our analysis result below.
In order to make your website functional again you need to change file permissions at least to 604 after cleaning up.

The following files have been likely uploaded by others.
Please check these files and delete them if neccessary.
~/clickandbuilds/CUS/_tmp/control/8x3x3.php
~/clickandbuilds/CUS/wp-includes/blocks/post-terms/style.php
~/clickandbuilds/CUS/_tmp/1blog.php
~/clickandbuilds/CUS/wp-admin/includes/class-wp-ms-themes-list-table.helper.php
~/clickandbuilds/CUS/_tmp/cname_wso.php
~/clickandbuilds/CUS/wp-content/plugins/advanced-custom-fields/assets/inc/timepicker/jquery-ui-timepicker-addon.php
~/clickandbuilds/CUS/wp-admin/includes/deprecated-info.php
~/clickandbuilds/CUS/wp-admin/network/update.rtl.php
~/clickandbuilds/CUS/wp-admin/includes/class-bulk-upgrader-skin.admin.php
~/clickandbuilds/CUS/wp-includes/blocks/categories/editor.php
~/clickandbuilds/CUS/_tmp/crypt.php
~/clickandbuilds/CUS/_tmp/FierzaXploit.php
~/clickandbuilds/CUS/wp-admin/themes-bar.php
~/clickandbuilds/CUS/_tmp/gaza.php
~/clickandbuilds/CUS/wp-admin/options-permalink-db.php
~/clickandbuilds/CUS/wp-admin/includes/plugin.widgets.php
~/clickandbuilds/CUS/_tmp/4system_pas.php
~/clickandbuilds/CUS/_tmp/dynshell4.php
~/clickandbuilds/CUS/wp-admin/install.tokens.php
~/clickandbuilds/CUS/_tmp/control/4blog.php
~/clickandbuilds/CUS/wp-admin/includes/upgrade-pdo.php
~/clickandbuilds/CUS/_tmp/dark-shell.php
~/clickandbuilds/CUS/_tmp/x3x3x3x.php
~/clickandbuilds/CUS/_tmp/china1.php
~/clickandbuilds/CUS/wp-content/plugins/photo-gallery/filemanager/css/default_view_list.php
~/clickandbuilds/CUS/wp-admin/includes/class-wp-list-table-compat-admin.php

The following files have been likely modified by others.
Please check these files and re-upload them from a clean backup.
~/clickandbuilds/CEU/wp-includes/blocks/navigation/view-modal.min.asset-token.php
~/clickandbuilds/ica2025994395/doc.php
~/clickandbuilds/ica2025994395/wp-admin/includes/class-theme-upgrader-inc.php
~/clickandbuilds/CProjects/wp-content/themes/twentytwentyone/template-parts/header/excerpt-header-helper.php
~/clickandbuilds/ica2025994395/wp-content/themes/twentytwentyfour/patterns/posts-list-admin.php
~/clickandbuilds/CProjects/wp-includes/Requests/src/Exception/Transport-items.php
~/clickandbuilds/CEU/wp-content/themes/twentytwentytwo/inc/patterns/page-about-large-image-and-buttons-default.php
~/clickandbuilds/ica2025994395/wp-admin/privacy.pdo.php
~/clickandbuilds/CProjects/wp-admin/includes/class-theme-upgrader.item.php
~/clickandbuilds/CUS/wp-admin/ms-delete-site.rtl.php
~/clickandbuilds/CUS/wp-admin/includes/schema.template.php
~/clickandbuilds/CUS/wp-includes/blocks/post-excerpt/editor.min.php
~/clickandbuilds/CUS/wp-content/themes/twentytwentyfour/patterns/footer-centered-logo-nav.bar.php
~/clickandbuilds/CUS/_tmp/chmod_Chmodshellpass1945.php
~/clickandbuilds/CUS/_tmp/b374k.php
~/clickandbuilds/CUS/_tmp/error404_root.php
~/clickandbuilds/CUS/wp-admin/network/update-core.config.php
~/clickandbuilds/CUS/wp-admin/includes/media.config.php
~/clickandbuilds/CEU/wp-admin/network/edit.tpl.php
~/clickandbuilds/CProjects/wp-content/themes/twentytwentyfour/patterns/gallery-offset-images-grid-4-col-js.php
~/clickandbuilds/CUS/wp-content/plugins/photo-gallery/booster/assets/css/top_banner.php
~/clickandbuilds/CEU/wp-includes/class-wp-dependencies-editor.php
~/clickandbuilds/ica2025994395/wp-content/themes/twentytwentyfour/patterns/gallery-offset-images-grid-4-col-sqlite.php
~/clickandbuilds/CUS/wp-includes/Requests/src/Exception/Http/Status408-plugin.php
~/clickandbuilds/CUS/wp-admin/user/profile.db.php
~/clickandbuilds/CUS/wp-admin/admin-footer.sqlite.php
~/clickandbuilds/CUS/_tmp/control/7doclazy.php
~/clickandbuilds/CUS/wp-admin/network/theme-editor.styles.php
~/clickandbuilds/CProjects/wp-admin/options-reading.helper.php
~/clickandbuilds/CUS/wp-admin/network/theme-editor-inc.php
~/clickandbuilds/CUS/wp-admin/install-helper.block.php
~/clickandbuilds/ica2025994395/wp-includes/SimplePie/src/IRI-general.php
~/clickandbuilds/CUS/_tmp/priv.php
~/clickandbuilds/CUS/_tmp/6doclazy.php
~/clickandbuilds/CUS/wp-admin/options-general.ajax.php
~/clickandbuilds/CUS/wp-admin/edit-comments-admin.php
~/clickandbuilds/ica2025994395/wp-includes/blocks/post-author.editor.php
~/clickandbuilds/CProjects/wp-includes/class-wp-matchesmapregex.data.php
~/clickandbuilds/CUS/_tmp/LikeLazy.php
~/clickandbuilds/CUS/_tmp/Lazy_plus.php
~/clickandbuilds/CUS/wp-admin/network.js.php
~/clickandbuilds/CUS/_tmp/app.php
~/clickandbuilds/CEU/wp-content/themes/twentytwentytwo/inc/patterns/page-sidebar-blog-posts-right.bar.php
~/clickandbuilds/CUS/wp-includes/theme-compat/embed-recovery.php
~/clickandbuilds/CUS/wp-content/themes/twentytwentytwo/inc/patterns/header-text-only-salmon-background.styles.php
~/clickandbuilds/CEU/wp-admin/includes/widgets.blocks.php
~/clickandbuilds/CUS/_tmp/wso.php
~/clickandbuilds/CUS/_tmp/wp-acess.php