Krydos

I didn't call you a liar. I was just letting you know what data I was seeing so that you can figure out how to prevent this from happening in the future. It doesn't do us any good to reset the brute force protection only to have the same problem occur an hour later.

I use imap with my email accounts on Stevie and my account has the exact same server settings as yours, but I only ever have 1 maybe 2 processes. Thousands of other accounts on Stevie use imap everyday and they don't have 6-8 imap processes constantly open either. This all leads me to believe that there is something about your client, your settings, or your ISP that is causing problems but not that thrre is anything wrong with the server.

Like I already said your account works and the password I emailed you works, but if you want to created a new account you first need to delete your current account http://www.heliohost.org/home/support/scripts/delete and then create a new account http://www.heliohost.org/home/signup

The successful login came from the same IP address that you have been posting to this forum so either it was you, you have a pretty serious malware compromise on your computer allowing a hacker to proxy through your IP, or you should ask people who also have access to connect to the Internet through your IP if they logged into your account. I have reset the brute force protection on your account. Make sure you don't use the wrong password or you'll just get locked out again.

Your site was clean before it was unsuspended unless you uploaded more infected files.

It looks like you managed to log successfully about fifteen minutes ago so I'm going to assume that this issue is resolved?

Thank you for taking care of this. Your account now shows up as clean. I would recommend taking regular backups of your site http://stevie.helioh...ckup/index.html and downloading the files to your computer. Then scan the files using some reputable program locally. That way you kill two birds with one stone: you know your files are clean and safe in case something happens to your site.

Unfortunately, you used up your 24 hour window to take care of this yourself so the infected files have already been deleted which could potentially break your site. However, the good news is your account is now unsuspended.

Try using a different browser or a different computer.

I tested the password before I emailed it to you. I assure you it works. It still sounds to me like you're not typing your username in all lowercase letters. Try copy pasting the username/password from the email to make sure you're not typing something wrong.

It looks like you created the account with a gmx.com account, and then changed the contact email to a gmail.com account. The password reset email would have been sent to the gmail.com account. Let us know if you still can't reset your password.

Your password was manually reset and emailed to the address that the account was created with.

Your site is now clean. Thank you for taking care of this.

Here are the files causing problems on your account. /home/cb/public_html/plugins/system/legacy/css/ae.php /home/cb/public_html/templates/beez/index.php /home/cb/public_html/modules/mod_php/css/ae.php You can either delete them or replace them with noninfected/nonmalicious files.

The [solved] flag is just there so that Heliohost staff can tell at a glance that there is nothing left to figure out or fix in this thread. We know what was causing the errors. We know how to fix it so the errors go away. What else is there that needs solving?

Your account was suspended for inactivity, because the last time you logged in was July 27th. To reactivate your account, please visit http://www.heliohost...t/scripts/renew. If you are still seeing the Account Suspended page after renewing your account, please clear your cache. -- Please spare a few minutes to take our brief survey: http://feedback.helionet.org/ Your participation in this survey is greatly appreciated.

Heliohost users don't need to request to move between servers because they can move their accounts on their own using the steps in this guide http://wiki.helionet.org/Moving_your_account

Thanks for reporting this issue. It should be working now. Let us know if you're still having any issues. It was a db issue, but no that command didn't fix it. Good guess though.

Your malware problem still hasn't been taken care of. Here is a hint: /home/bmccutch/public_html/products/cartoondownloader/cartoondownloader.exe /home/bmccutch/public_html/products/md5hashgrabber/md5hashgrabber.exe You need to get those files deleted or replaced with clean versions in the next four hours or your account will be suspended again.

Your account is now coming up as clean. Thank your for taking care of this, and thanks for sending the false positive report too.

I'm curious what your reasoning was for not voting? Also keep in mind that there are a lot of Heliohost users don't live in the US so maybe a more generic question would be "Who would you rather see as president of the United States?"

Your account has been manually unsuspended. If you still see the suspended page then you should try clearing your browsers cache. -- Please spare a few minutes to take our brief survey: http://feedback.heliohost.org/ Your participation in this survey is greatly appreciated.

I have a very hard time understanding what you're saying or asking for. I understand that English isn't everyone's primary language and that's fine. However, we only provide support in English and you would surely get better results if you put more effort into communicating what it is exactly that you need. Perhaps if English isn't your primary language you can find someone more fluent to translate for you? Anyways, communication issues aside, the account kaywebtr is suspended because only one account is allowed per person. When someone is found owning multiple accounts they are all suspended until the owner chooses one account to keep and the rest are deleted. Which account do you want to keep and which accounts would you like us to delete for you? You've said something about being hacked also. If your account is hacked simply delete all corrupted files and replace the with the original versions from a backup file. That's one of the many reasons why we suggest taking frequent backups of your site.

Nope, now it's 8 imap processes. The reason it was coming and going was probably because I killed your processes several times since you first posted about it to see if the first time was just a fluke or something. It's obviously not. I use imap on stevie too and I have it set to update pretty much constantly, and I'm sure a lot of other people do too without any issues like this. I have no idea how you have your client(s) set up, but there's definitely something odd going on. There's only 6 again now, but maybe this will help you. imapd /home/jugal/mail/jugal.me/subscribe imapd /home/jugal/mail/jugal.me/subscribe imapd /home/jugal/mail/jugal.me/i imapd /home/jugal/mail/jugal.me/mail imapd /home/jugal/mail/jugal.me/subscribe imapd /home/jugal/mail/thakkarpharmastation.com/mail

It's already been 12 hours and you haven't done anything about your malware problem yet. Here's a hint: /home/aisoft/public_html/mail/link.php /home/aisoft/public_html/mail/index.php /home/aisoft/public_html/mail/toor.php If they aren't deleted/cleaned within 24 hours from the timestamp on Tjoene's post your account will be suspended again.