HEX
Server: nginx/1.29.3
System: Linux 11979.bigscoots-wpo.com 6.8.0-88-generic #89-Ubuntu SMP PREEMPT_DYNAMIC Sat Oct 11 01:02:46 UTC 2025 x86_64
User: nginx (1068)
PHP: 7.4.33
Disabled: exec,system,passthru,shell_exec,proc_open,proc_close,popen,show_source,cmd# Do not modify this line # 1684243876
Upload Files
File: //bigscoots/cpanel/foxcheck.sh
#!/bin/bash

grep -riEl "(smtp|anonymous)f[oO0]x" /home/*/etc/ | while read -r shadowhit
do 
	grep -iE "(smtp|anonymous)f[oO0]x" "${shadowhit}" >> /root/foxcheck.log
	if [[ "$shadowhit" == *"@pwcache"* ]]
	then
		rm -f "${shadowhit}"
	else
		sed -i -E '/(smtp|anonymous)f[oO0]x/d' "${shadowhit}"
	fi
done

find /home/*/mail/ -type d \( -name 'smtp*f[oO0]x*' -o -name 'anonymous*f[oO0]x*' \) | while read -r shadowdirhit
do
	echo "${shadowdirhit}" >> /root/foxcheck.log
	rm -rf "${shadowdirhit}"
done