Krydos

We raise the php memory limit when a user requires it to be raised. How many megabytes does this software recommend?

SSL has been successfully installed on pay.shop-place.biz. Obviously you'll need to change your hosting back to us before it'll do you any good though. http://byrondallas.heliohost.org/php/tools/dns_records.php?domain=shop-place.biz&rec=NS

Please post the following information: Your cPanel username Your main domain The server that you are on

-------- Original Message -------- Subject: [HE ABUSE #448749][65.19.143.4] New malicious URL found on: shop-place.biz (IP: 65.19.143.4) Date: Sun, 4 Aug 2013 02:40:58 -0700 (PDT) From: no-reply@abuse.he.net To: abuse@connexinternet.com We have received a complaint about your account. Please investigate and fix within 24 hours. Hurricane Electric Abuse Department support@he.net From malwaredb@it-mate.co.uk Sun Aug 4 02:40:49 2013 Return-Path: &--#60;malwaredb@it-mate.co.uk&--#62; X-Original-To: report@abuse.he.net Delivered-To: report@abuse.he.net Received: from he.net (he.net [216.218.186.2]) by abuse.he.net (Postfix) with SMTP id BF3CA541100 for &--#60;report@abuse.he.net&--#62;; Sun, 4 Aug 2013 02:40:48 -0700 (PDT) Received: from mysteryfcm.co.uk ([212.56.95.253]) by he.net for &--#60;abuse@he.net&--#62;; Sun, 4 Aug 2013 02:39:22 -0700 Received: from Malmon by mysteryfcm.co.uk (MDaemon PRO v13.0.3) with ESMTP id 23-md50000033171.msg for &--#60;abuse@he.net&--#62;; Sun, 04 Aug 2013 10:39:29 +0100 X-Spam-Processed: mysteryfcm.co.uk, Sun, 04 Aug 2013 10:39:29 +0100 (not processed: spam filter heuristic analysis disabled) X-HashCash: 1:20:130804:md50000033171::UrvVZ9blgAXkJmz+:00002AHb X-Return-Path: malwaredb@it-mate.co.uk X-Envelope-From: malwaredb@it-mate.co.uk X-MDaemon-Deliver-To: abuse@he.net Date: Sun, 04 Aug 2013 10:39:18 +0100 Subject: New malicious URL found on: shop-place.biz (IP: 65.19.143.4) To: abuse@he.net From: malwaredb@it-mate.co.uk Reply-To: services@it-mate.co.uk X-Mailer: I.T. Mate Malware Monitor Message-ID: &--#60;MDAEMON-F201308041039.AA3924845md50000000501@mysteryfcm.co.uk&--#62; A new malicious URL has been found in Hurricane Electric IP space. Host: shop-place.biz IP: 65.19.143.4 URL: http://shop-place.biz Since they weren't very specific about what was "malicious" about your site I have gone ahead and unsuspended it for you. Our virus scanner can't find any malware files on your account either. It might be in your best interest to contact your accusers and find out what they think is malicious about your site, and work with them to make sure they don't report your site again. We take malicious sites and our ToS very seriously. If we receive another report about your site it will be suspended again.

-------- Original Message -------- Subject: [HE ABUSE #448742][216.218.192.170] New malicious URL found on: dracot.com (IP: 216.218.192.170) Date: Sun, 4 Aug 2013 02:37:32 -0700 (PDT) From: no-reply@abuse.he.net To: abuse@connexinternet.com We have received a complaint about your account. Please investigate and fix within 24 hours. Hurricane Electric Abuse Department support@he.net From malwaredb@it-mate.co.uk Sun Aug 4 02:36:40 2013 Return-Path: &--#60;malwaredb@it-mate.co.uk&--#62; X-Original-To: report@abuse.he.net Delivered-To: report@abuse.he.net Received: from he.net (he.net [216.218.186.2]) by abuse.he.net (Postfix) with SMTP id 38A12541101 for &--#60;report@abuse.he.net&--#62;; Sun, 4 Aug 2013 02:36:36 -0700 (PDT) Received: from mysteryfcm.co.uk ([212.56.95.253]) by he.net for &--#60;abuse@he.net&--#62;; Sun, 4 Aug 2013 02:35:23 -0700 Received: from Malmon by mysteryfcm.co.uk (MDaemon PRO v13.0.3) with ESMTP id 08-md50000033184.msg for &--#60;abuse@he.net&--#62;; Sun, 04 Aug 2013 10:35:29 +0100 X-Spam-Processed: mysteryfcm.co.uk, Sun, 04 Aug 2013 10:35:29 +0100 (not processed: spam filter heuristic analysis disabled) X-HashCash: 1:20:130804:md50000033184::mHwK6KdD5fYGr9gx:00002YWO X-Return-Path: malwaredb@it-mate.co.uk X-Envelope-From: malwaredb@it-mate.co.uk X-MDaemon-Deliver-To: abuse@he.net Date: Sun, 04 Aug 2013 10:35:22 +0100 Subject: New malicious URL found on: dracot.com (IP: 216.218.192.170) To: abuse@he.net From: malwaredb@it-mate.co.uk Reply-To: services@it-mate.co.uk X-Mailer: I.T. Mate Malware Monitor Message-ID: &--#60;MDAEMON-F201308041035.AA3528861md50000000501@mysteryfcm.co.uk&--#62; A new malicious URL has been found in Hurricane Electric IP space. Host: dracot.com IP: 216.218.192.170 URL: http://dracot.com Since they weren't very specific about what was "malicious" about your site I have gone ahead and unsuspended it for you. Our virus scanner can't find any malware files on your account either. It might be in your best interest to contact your accusers and find out what they think is malicious about your site, and work with them to make sure they don't report your site again. We take malicious sites and our ToS very seriously. If we receive another report about your site it will be suspended again.

What is the server load like when it gives you a proxy error? I wonder if high load, which can be rather common on Johnny, causes the proxy connection to timeout resulting in that error?

Sounds like you triggered brute force protection. When the server decides that you're randomly guessing passwords it locks you out for a period of time. When you stopped trying to log in for a few hours it probably cleared the protection on it's own allowing you to log in or reset your password once again.

Your account has been moved to a Chinese accessible IP.

Stevie response time has been hovering around 200 ms which isn't excellent, but it's definitely fine for a free hosting plan. Our bandwidth usage has been normal all week too. There have been a few load spikes that would cause pages to load a little slower, but they are intermittent and generally only last 15 minutes at the most. Since you imply that your images always load slow then my guess is it has something to do with your site, or your internet connection. Furthermore, there are thousands of websites hosted on Stevie all of which have images of some sort I'm sure, and you're the only one saying they won't load. That generally indicates a localized problem with something specific to you, not the entire server. To redirect from your domain to your subdomain just use some html code like this: <meta http-equiv="refresh" content="0; url=http://subdomain.domain.heliohost.org/">

That error message basically means "there was some error but we won't tell you what it is because remote error messages are disabled." You should do as it suggests and enable more detailed error messages. Knowing what the problem is will help a lot for fixing it. Otherwise it's just randomly changing things and hoping for the best.

SSL has been installed on req.pin-center.info

Why not just convert the .doc files to .pdf on your home PC and then upload the .pdf files. Why does it need to be converted on the server?

Please clear your cache.

Try installing your module now.

Dedicated IP granted.

Why should this account be unsuspended?

The problem is these are the nameservers that you are using: 82.208.40.8 82.208.40.3 These are the nameservers you're supposed to be using: 65.19.143.3 64.62.211.133 We can't set your nameservers for you. You either need to log into your account where you purchased the domain, or contact support in charge of the domain. If you can't figure out how to change the nameservers, and the .uni.me people aren't helping you it might also work to change your main domain http://www.heliohost.org/home/support/scripts/domain

That's exactly what this does: It's obviously preferable and much easier to just get your registrar to set the nameservers properly rather than having to do a lot of extra steps though.

Well, so far your account has attempted to send 5006 emails just today. We're not responsible for securing your account for you; we just suspend the ToS violators regardless of whether it's you that is sending the emails and you're just playing dumb about it or your account was hacked. Either way it's your responsibility to take care of. When your sent email count reaches 5100 it will be suspended again permanently. I don't really know what to suggest. It's obvious some sort of spam bot network is involved because the emails are originating from about 100 different IPs and all connecting to your account to send their emails. Perhaps change all of your passwords? It might also be wise to backup any files you can't lose because if you can't fix this you won't have access to the account any longer. Our virus scanner doesn't show any malware files on your account.

If your registrar won't let you change your nameservers the best option is to contact your registrar to ask them how to go about setting nameservers. I've heard of some registrars where you have to submit a ticket before they will change the nameservers on your domain for you. There isn't much Heliohost can do about setting your nameservers for you since we don't have access to the registrars website. You have to negotiate that with them directly. The other option that sometimes works is you can change your account's main domain using http://www.heliohost.org/home/support/scripts/domain

The version of python you get depends on which shebang line you use. Python 2.4 has to be the default version since cpanel requires it to be. If you need a version of python that isn't available feel free to request it. Since you didn't specify which server your account is located on here is the list of all python versions available on both servers. Stevie: #!/usr/bin/python Python 2.4.3 #!/usr/bin/python2.4 Python 2.4.3 #!/usr/local/bin/python2.7 Python 2.7.1 #!/usr/local/bin/python2.4 Python 2.4.6 #!/usr/local/bin/python3.2 Python 3.2rc3 Johnny: #!/usr/bin/python Python 2.4.3 #!/usr/bin/python2.4 Python 2.4.3 #!/usr/local/bin/python2.7 Python 2.7.4

/home1/canc1968/public_html/mkt/uploads/images/logo.php5

SSL has been installed on vpngroups.org for you. I think that error is from high load causing the quite time consuming install process to time out. If you look at Stevie's load today you can see that it has been higher than usual. If you have a problem like that again you can post here for an admin to install it for you, or wait for a lower load time of the day and try again.

Set your nameservers to ns1.heliohost.org and ns2.heliohost.org http://byrondallas.heliohost.org/php/tools/dns_records.php?domain=navgg.pp.ua&rec=NS and delete any A records from your registrar to allow our system to set the correct A record for your account.

@byron, to save time you can just use the multimod labeled "Malware Found", and copy paste the "Malware. 1 file(s). HTML.Exploit.CVE_2013_0026" part into the blank provided. @fsps, your account is showing up as clean now. Thank you for taking care of this.