Okay - that's good info to digest.
I got started on this path after our Forum was unavailable EVERY SUNDAY during backups - for over three hours!! Additionally we have had numerous slowdowns at totally unpredictable times.
When confronted with this on Monday, our Host Provider (Webintellects) suggested that we include an anti-virus and malware detector s/w on our Apache server (with UBB).
We looked at the logs and saw that we were reaching Max Connections. And a lot of the incoming IP's were not logging in to the forum. So it appeared to be some sort of "phishing".
As a first step I added an htaccess file which blocked tens of thousands of Chinese IP addresses. And for the past 48 hours, our site has NEVER run faster than it is right now.
So the maldet is just another check to make sure that we don't have some other corruption already imbedded.
