Hi all I have Moodle on a domain with Wordpress. For Wordpress I have the Securi security plugin installed that monitors changes. And it seems it monitors Moodle file changes also because of the location of the moodle files. Any way it shows changes to files on a day where no one was logged into moodle. Moodle is new so there are only three accounts and none were logged in the day of the changes. Below are the files it shows changed. Is this some kind of auto update or a hack or some kind of false positive? (It also showed the same types of changes one other time in the past so far.)
19:07
system Warning: New file added: (multiple entries):
lea2018-01-26 15:26:20 pat@pwlawrence.com : Warning: New file added: (multiple entries): learning/lib/yuilib/3.17.2/widget-base/widget-base-min.js (size: 6487)
learning/lib/yuilib/3.17.2/widget-base/widget-base.js (size: 35349)
learning/lib/yuilib/3.17.2/widget-buttons/widget-buttons-debug.js
learning/lib/yuilib/3.17.2/widget-buttons/widget-buttons-min.js
learning/lib/yuilib/3.17.2/widget-buttons/widget-buttons.js
learning/lib/yuilib/3.17.2/widget-child/widget-child-debug.js
learning/lib/yuilib/3.17.2/widget-child/widget-child-min.js
learning/lib/yuilib/3.17.2/widget-child/widget-child.js
learning/lib/yuilib/3.17.2/widget-htmlparser/widget-htmlparser-debug.js
learning/lib/yuilib/3.17.2/widget-htmlparser/widget-htmlparser-min.js
learning/lib/yuilib/3.17.2/widget-htmlparser/widget-htmlparser.js
learning/lib/yuilib/3.17.2/widget-modality/assets/skins/night/widget-modality-skin.css
learning/lib/yuilib/3.17.2/widget-modality/assets/skins/night/widget-modality.css
learning/lib/yuilib/3.17.2/widget-modality/assets/skins/sam/widget-modality-skin.css
learning/lib/yuilib/3.17.2/widget-modality/assets/skins/sam/widget-modality.css
learning/lib/yuilib/3.17.2/widget-modality/assets/widget-modality-core.css
learning/lib/yuilib/3.17.2/widget-modality/widget-modality-debug.js
learning/lib/yuilib/3.17.2/widget-modality/widget-modality-min.js
learning/lib/yuilib/3.17.2/widget-modality/widget-modality.js
learning/lib/yuilib/3.17.2/widget-parent/widget-parent-debug.js
learning/lib/yuilib/3.17.2/widget-parent/widget-parent-min.js
learning/lib/yuilib/3.17.2/widget-parent/widget-parent.js
learning/lib/yuilib/3.17.2/widget-position-align/widget-position-align-debug.js
learning/lib/yuilib/3.17.2/widget-position-align/widget-position-align-min.js
learning/lib/yuilib/3.17.2/widget-position-align/widget-position-align.js
learning/lib/yuilib/3.17.2/widget-position-constrain/widget-position-constrain-debug.js
learning/lib/yuilib/3.17.2/widget-position-constrain/widget-position-constrain-min.js
learning/lib/yuilib/3.17.2/widget-position-constrain/widget-position-constrain.js
learning/lib/yuilib/3.17.2/widget-position/widget-position-debug.js
learning/lib/yuilib/3.17.2/widget-position/widget-position-min.js
learning/lib/yuilib/3.17.2/widget-position/widget-position.js
learning/lib/yuilib/3.17.2/widget-skin/widget-skin-debug.js
learning/lib/yuilib/3.17.2/widget-skin/widget-skin-min.js
learning/lib/yuilib/3.17.2/widget-skin/widget-skin.js
learning/lib/yuilib/3.17.2/widget-stack/assets/skins/night/widget-stack-skin.css
learning/lib/yuilib/3.17.2/widget-stack/assets/skins/night/widget-stack.css
learning/lib/yuilib/3.17.2/widget-stack/assets/skins/sam/widget-stack-skin.css
learning/lib/yuilib/3.17.2/widget-stack/assets/skins/sam/widget-stack.css
learning/lib/yuilib/3.17.2/widget-stack/assets/widget-stack-core.css
learning/lib/yuilib/3.17.2/widget-stack/widget-stack-debug.js
learning/lib/yuilib/3.17.2/widget-stack/widget-stack-min.js
learning/lib/yuilib/3.17.2/widget-stack/widget-stack.js
learning/lib/yuilib/3.17.2/widget-stdmod/widget-stdmod-debug.js
learning/lib/yuilib/3.17.2/widget-stdmod/widget-stdmod-min.js
learning/lib/yuilib/3.17.2/widget-stdmod/widget-stdmod.js
...
IP: 127.0.0.1
07:11
system Warning: New file added: (multiple entries):
.htaccess (size: 235)
fantastico_fileslist.txt (size: 394)
fantversion.php
index.php
learning/.htaccess
learning/.jshintrc
learning/.shifter.json
learning/CONTRIBUTING.txt
learning/COPYING.txt
learning/Gruntfile.js
learning/INSTALL.txt
learning/PULL_REQUEST_TEMPLATE.txt
learning/README.txt
learning/TRADEMARK.txt
learning/admin/admin_settings_search_form.php
learning/admin/antiviruses.php
learning/admin/auth.php
learning/admin/auth_config.php
learning/admin/blocks.php
learning/admin/category.php
learning/admin/cli/alternative_component_cache.php
learning/admin/cli/automated_backups.php
learning/admin/cli/backup.php
learning/admin/cli/cfg.php
learning/admin/cli/check_database_schema.php
learning/admin/cli/cron.php
learning/admin/cli/fix_course_sequence.php
learning/admin/cli/fix_deleted_users.php
learning/admin/cli/fix_orphaned_question_categories.php
learning/admin/cli/install.php
learning/admin/cli/install_database.php
learning/admin/cli/maintenance.php
learning/admin/cli/mysql_collation.php
learning/admin/cli/mysql_compressed_rows.php
learning/admin/cli/mysql_engine.php
learning/admin/cli/purge_caches.php
learning/admin/cli/reset_password.php
learning/admin/cli/svgtool.php
learning/admin/cli/upgrade.php
learning/admin/courseformats.php
learning/admin/cron.php
learning/admin/dataformats.php
learning/admin/editors.php
learning/admin/enrol.php
learning/admin/environment.php
18:59
system Warning: New file added: (multiple entries):
learning/lib/editor/tinymce/tiny_mce/3.5.11/plugins/advhr/editor_plugin_src.js (size: 1442)
learning/lib/editor/tinymce/tiny_mce/3.5.11/plugins/advhr/js/rule.js (size: 1322)
learning/lib/editor/tinymce/tiny_mce/3.5.11/plugins/advhr/langs/en_dlg.js
learning/lib/editor/tinymce/tiny_mce/3.5.11/plugins/advhr/rule.htm
learning/lib/editor/tinymce/tiny_mce/3.5.11/plugins/advimage/css/advimage.css
learning/lib/editor/tinymce/tiny_mce/3.5.11/plugins/advimage/editor_plugin.js
learning/lib/editor/tinymce/tiny_mce/3.5.11/plugins/advimage/editor_plugin_src.js
learning/lib/editor/tinymce/tiny_mce/3.5.11/plugins/advimage/image.htm
learning/lib/editor/tinymce/tiny_mce/3.5.11/plugins/advimage/js/image.js
learning/lib/editor/tinymce/tiny_mce/3.5.11/plugins/advimage/langs/en_dlg.js
learning/lib/editor/tinymce/tiny_mce/3.5.11/plugins/advlink/css/advlink.css
learning/lib/editor/tinymce/tiny_mce/3.5.11/plugins/advlink/editor_plugin.js
learning/lib/editor/tinymce/tiny_mce/3.5.11/plugins/advlink/editor_plugin_src.js
learning/lib/editor/tinymce/tiny_mce/3.5.11/plugins/advlink/js/advlink.js
learning/lib/editor/tinymce/tiny_mce/3.5.11/plugins/advlink/langs/en_dlg.js
learning/lib/editor/tinymce/tiny_mce/3.5.11/plugins/advlink/link.htm
learning/lib/editor/tinymce/tiny_mce/3.5.11/plugins/advlist/editor_plugin.js
learning/lib/editor/tinymce/tiny_mce/3.5.11/plugins/advlist/editor_plugin_src.js
learning/lib/editor/tinymce/tiny_mce/3.5.11/plugins/autolink/editor_plugin.js
learning/lib/editor/tinymce/tiny_mce/3.5.11/plugins/autolink/editor_plugin_src.js
learning/lib/editor/tinymce/tiny_mce/3.5.11/plugins/autoresize/editor_plugin.js
learning/lib/editor/tinymce/tiny_mce/3.5.11/plugins/autoresize/editor_plugin_src.js
learning/lib/editor/tinymce/tiny_mce/3.5.11/plugins/autosave/editor_plugin.js
learning/lib/editor/tinymce/tiny_mce/3.5.11/plugins/autosave/editor_plugin_src.js
learning/lib/editor/tinymce/tiny_mce/3.5.11/plugins/bbcode/editor_plugin.js
learning/lib/editor/tinymce/tiny_mce/3.5.11/plugins/bbcode/editor_plugin_src.js
learning/lib/editor/tinymce/tiny_mce/3.5.11/plugins/contextmenu/editor_plugin.js
learning/lib/editor/tinymce/tiny_mce/3.5.11/plugins/contextmenu/editor_plugin_src.js
learning/lib/editor/tinymce/tiny_mce/3.5.11/plugins/directionality/editor_plugin.js
learning/lib/editor/tinymce/tiny_mce/3.5.11/plugins/directionality/editor_plugin_src.js
learning/lib/editor/tinymce/tiny_mce/3.5.11/plugins/emotions/editor_plugin.js
learning/lib/editor/tinymce/tiny_mce/3.5.11/plugins/emotions/editor_plugin_src.js
learning/lib/editor/tinymce/tiny_mce/3.5.11/plugins/emotions/emotions.htm
learning/lib/editor/tinymce/tiny_mce/3.5.11/plugins/emotions/js/emotions.js
learning/lib/editor/tinymce/tiny_mce/3.5.11/plugins/emotions/langs/en_dlg.js
learning/lib/editor/tinymce/tiny_mce/3.5.11/plugins/example/dialog.htm
learning/lib/editor/tinymce/tiny_mce/3.5.11/plugins/example/editor_plugin.js
learning/lib/editor/tinymce/tiny_mce/3.5.11/plugins/example/editor_plugin_src.js
learning/lib/editor/tinymce/tiny_mce/3.5.11/plugins/example/js/dialog.js
learning/lib/editor/tinymce/tiny_mce/3.5.11/plugins/example/langs/en.js
learning/lib/editor/tinymce/tiny_mce/3.5.11/plugins/example/langs/en_dlg.js
learning/lib/editor/tinymce/tiny_mce/3.5.11/plugins/example_dependency/editor_plugin.js
learning/lib/editor/tinymce/tiny_mce/3.5.11/plugins/example_dependency/editor_plugin_src.js
learning/lib/editor/tinymce/tiny_mce/3.5.11/plugins/fullpage/css/fullpage.css
learning/lib/editor/tinymce/tiny_mce/3.5.11/plugins/fullpage/editor_plugin.js
...
IP: 127.0.0.1
07:01
system Warning: New file added: (multiple entries):
learning/lib/classes/message/inbound/handler.php (size: 9369)
learning/lib/classes/message/inbound/manager.php (size: 8515)
learning/lib/classes/message/inbound/private_files_handler.php
learning/lib/classes/message/inbound/processing_failed_exception.php
learning/lib/classes/message/manager.php
learning/lib/classes/message/message.php
learning/lib/classes/minify.php
learning/lib/classes/notification.php
learning/lib/classes/oauth2/api.php
learning/lib/classes/oauth2/client.php
learning/lib/classes/oauth2/endpoint.php
learning/lib/classes/oauth2/issuer.php
learning/lib/classes/oauth2/refresh_system_tokens_task.php
learning/lib/classes/oauth2/rest.php
learning/lib/classes/oauth2/rest_exception.php
learning/lib/classes/oauth2/system_account.php
learning/lib/classes/oauth2/user_field_mapping.php
learning/lib/classes/output/chooser.php
learning/lib/classes/output/chooser_item.php
learning/lib/classes/output/chooser_section.php
learning/lib/classes/output/external.php
learning/lib/classes/output/icon_system.php
learning/lib/classes/output/icon_system_font.php
learning/lib/classes/output/icon_system_fontawesome.php
learning/lib/classes/output/icon_system_standard.php
learning/lib/classes/output/inplace_editable.php
learning/lib/classes/output/mustache_filesystem_loader.php
learning/lib/classes/output/mustache_javascript_helper.php
learning/lib/classes/output/mustache_pix_helper.php
learning/lib/classes/output/mustache_quote_helper.php
learning/lib/classes/output/mustache_shorten_text_helper.php
learning/lib/classes/output/mustache_string_helper.php
learning/lib/classes/output/mustache_template_finder.php
learning/lib/classes/output/mustache_uniqid_helper.php
learning/lib/classes/output/mustache_user_date_helper.php
learning/lib/classes/output/notification.php
learning/lib/classes/output/url_rewriter.php
learning/lib/classes/persistent.php
learning/lib/classes/php_time_limit.php
learning/lib/classes/plugin_manager.php
learning/lib/classes/plugininfo/antivirus.php
learning/lib/classes/plugininfo/auth.php
learning/lib/classes/plugininfo/availability.php
learning/lib/classes/plugininfo/base.php
learning/lib/classes/plugininfo/block.php
18:59
system Warning: New file added: (multiple entries):
learning/lib/htmlpurifier/HTMLPurifier/AttrDef/URI/IPv4.php (size: 998)
learning/lib/htmlpurifier/HTMLPurifier/AttrDef/URI/IPv6.php (size: 2477)
learning/lib/htmlpurifier/HTMLPurifier/AttrTransform.php
learning/lib/htmlpurifier/HTMLPurifier/AttrTransform/Background.php
learning/lib/htmlpurifier/HTMLPurifier/AttrTransform/BdoDir.php
learning/lib/htmlpurifier/HTMLPurifier/AttrTransform/BgColor.php
learning/lib/htmlpurifier/HTMLPurifier/AttrTransform/BoolToCSS.php
learning/lib/htmlpurifier/HTMLPurifier/AttrTransform/Border.php
learning/lib/htmlpurifier/HTMLPurifier/AttrTransform/EnumToCSS.php
learning/lib/htmlpurifier/HTMLPurifier/AttrTransform/ImgRequired.php
learning/lib/htmlpurifier/HTMLPurifier/AttrTransform/ImgSpace.php
learning/lib/htmlpurifier/HTMLPurifier/AttrTransform/Input.php
learning/lib/htmlpurifier/HTMLPurifier/AttrTransform/Lang.php
learning/lib/htmlpurifier/HTMLPurifier/AttrTransform/Length.php
learning/lib/htmlpurifier/HTMLPurifier/AttrTransform/Name.php
learning/lib/htmlpurifier/HTMLPurifier/AttrTransform/NameSync.php
learning/lib/htmlpurifier/HTMLPurifier/AttrTransform/Nofollow.php
learning/lib/htmlpurifier/HTMLPurifier/AttrTransform/SafeEmbed.php
learning/lib/htmlpurifier/HTMLPurifier/AttrTransform/SafeObject.php
learning/lib/htmlpurifier/HTMLPurifier/AttrTransform/SafeParam.php
learning/lib/htmlpurifier/HTMLPurifier/AttrTransform/ScriptRequired.php
learning/lib/htmlpurifier/HTMLPurifier/AttrTransform/TargetBlank.php
learning/lib/htmlpurifier/HTMLPurifier/AttrTransform/TargetNoreferrer.php
learning/lib/htmlpurifier/HTMLPurifier/AttrTransform/Textarea.php
learning/lib/htmlpurifier/HTMLPurifier/AttrTypes.php
learning/lib/htmlpurifier/HTMLPurifier/AttrValidator.php
learning/lib/htmlpurifier/HTMLPurifier/Bootstrap.php
learning/lib/htmlpurifier/HTMLPurifier/CSSDefinition.php
learning/lib/htmlpurifier/HTMLPurifier/ChildDef.php
learning/lib/htmlpurifier/HTMLPurifier/ChildDef/Chameleon.php
learning/lib/htmlpurifier/HTMLPurifier/ChildDef/Custom.php
learning/lib/htmlpurifier/HTMLPurifier/ChildDef/Empty.php
learning/lib/htmlpurifier/HTMLPurifier/ChildDef/List.php
learning/lib/htmlpurifier/HTMLPurifier/ChildDef/Optional.php
learning/lib/htmlpurifier/HTMLPurifier/ChildDef/Required.php
learning/lib/htmlpurifier/HTMLPurifier/ChildDef/StrictBlockquote.php
learning/lib/htmlpurifier/HTMLPurifier/ChildDef/Table.php
learning/lib/htmlpurifier/HTMLPurifier/Config.php
learning/lib/htmlpurifier/HTMLPurifier/ConfigSchema.php
learning/lib/htmlpurifier/HTMLPurifier/ConfigSchema/Builder/ConfigSchema.php
learning/lib/htmlpurifier/HTMLPurifier/ConfigSchema/Builder/Xml.php
learning/lib/htmlpurifier/HTMLPurifier/ConfigSchema/Exception.php
learning/lib/htmlpurifier/HTMLPurifier/ConfigSchema/Interchange.php
learning/lib/htmlpurifier/HTMLPurifier/ConfigSchema/Interchange/Directive.php
learning/lib/htmlpurifier/HTMLPurifier/ConfigSchema/Interchange/Id.php
