wolstech

I wouldn't be surprised if the false positive on Hall_Of_Mirrors.exe is the cause, especially if you didn't delete it. Accounts are re-suspended if you don't fix whatever it found. Your file is clean according to all major AV programs based on this VirusTotal scan report I ran on the file after your initial suspension: https://www.virustotal.com/file/87da07a170d020492f64f99c3eff62a338acf97903916ac2ec14b9fc97ed89fb/analysis/1359162127/ Seeing that ClamAV reports clean in that report, an admin may need to update the definitions on the server...

Trojan.Agent is a generic detection. I often get false positives for Trojan.Agent on a bunch of harmless stuff as well, so you're not alone. They come and go as the AV database updates... As for your file, it's clean across the board: https://www.virustot...sis/1359162127/ Not sure why HH's ClamAV flagged it, but submitting a false positive report is still a good idea so it gets looked into for the future.

You're not the only one wondering where gdiplus.dll went. http://www.helionet.org/index/topic/14610-server-error-in-application-gdiplusdll/ That user also has an ASP app suffering the same error for no explainable reason. His was working great, then a bunch of pages just quit working... You might want to try uploading gdiplus.dll to your bin folder as was suggested in that topic if you haven't already tried it. Otherwise an admin will probably need to look at it.

Unfortunately not. cPanel requires a dedicated IP for SSL, and the $12 is needed because that's what heliohost's provider charges them for the extra dedicated IP address; it's something that Heliohost can't control. SSL is I think the only thing that's not free here though...

Host accounts and forum accounts are completely separate. Logging into the forum does not count for monthly login, only cpanel logins do. Also, forum accounts don't expire, only hosting accounts do.

This one was a bad perl script abusing the server... http://www.helionet.org/index/topic/14456-solved-johnny-server-down/

hydratech.com doesn't seem to be suspended...I see a site for the Potomac Classic Thunderbird Club. Perhaps try another browser or computer if clearing your cache didn't help?

When the server sees you accessing it on port 2096 (the :2096 in the URL specifies the port to use), it automatically turns on HTTPS and directs you to webmail. If you're using the URL that Krydos posted above, you're already doing this.

I'm assuming you're referring to the one in heliohost.org's top menu? I noticed that the other day myself... The one at the top of the CS forum was fixed a while back.

You're not the only one: http://www.helionet.org/index/topic/14310-stevie-down/ The whole server is down. I'm sure the admins will fix it soon enough though.

That's what it looks like. /tmp seems to have lost its write permission. PMA gives that error, and my site is showing session errors complaining that /tmp has a read-only filesystem...

PHP mails count towards your 50 per day limit, even if it is undeliverable. If it sends 2 mails (to you and user) per registration, 25 attempted registrations will burn through your limit for the day. If you have a spam issue, spambots that abuse registration or "contact us" forms will rack up emails quickly. Best first step would probably be to disable the email functions in everything that sends mail on your site, then wait a few days. If the email traffic dies down, turn email features back on one at a time until you find what caused the issue.

It's usually recommended that you keep the emails under 50 per day.

What domain is it? Also, are the domain's nameservers set to ns1.heliohost.org and ns2.heliohost.org? If not, you'll need to change them to ns1.heliohost.org and ns2.heliohost.org before you can add the domain.

We don't even offer paid accounts. Everybody here has a free account, so yes. WordPress seems to have quite an issue with being hacked. What you said is a good start: Frequent backups, avoid random plugins, use long passwords. Also, keeping it updated is essential. WP's website has a few anti-hack plugins listed, but I'm not sure how well (or even if) they work. If you're not on search engines yet, the WHOIS database is a good possibility. Since you have your own domain, you're probably listed in there. I know that WHOIS is often scoured by bots that harvest emails and URLs for hackers, spammers, etc. to abuse. An admin will have to advise on this one, but I don't believe HH offers access to these.

Shinryuu's suggestions are a good first step: Use a clean backup if you have one, inspect things like htaccess, and change your password. Also, since WordPress tends to be prone to hacking, make sure it and anything (plugins, mods, etc.) you've added to it are up to date. The actual "rebon test" message that replaces your page is caused by the below JS, which the hacker's code inserts into your page's body: document.documentElement.innerHTML = unescape('%72%65%62%6f%6e%20%74%65%73%74'); That code above just sets the contents of the javascript "document" element (which represents the entire page) to "rebon test".

Correct. If you're on Stevie, you'll need to switch servers. Also, you have to request Java for your account in the Java Requests forum before it will work.

An admin hasn't responded to your Java request yet. http://www.helionet.org/index/topic/13987-request-for-java-jindal89/ Usually, an admin replies to your Java request when they add you to the queue. It takes up to 24 hours from the time they reply for Java to work.

I've wondered the same thing. It would make more sense to put them on Stevie since it has better up time. I often have to refresh topics to get them to load, and it's annoying when IPB's AJAX-based posting times out, losing my posts (has HH considered a better forum product like XenForo? IPB seems to be going down the tubes now...I belong to 3 other forums, and 2 of them just dumped IPB). Johhny likely needs more resources than Stevie because of the extras, but being a VM, I imagine it probably has less than Stevie since it must share with Cody. Much of the forum downtime is likely due to Johnny accounts causing high load...

DNS changes can take a while. Usually it takes 24 hours or so, but I've seen it several days. When it finally does take effect, you'll see either whatever content you uploaded or the queued page (depending on if HH's server has set up the domain already)

It looks fine for me as well. If it still looks down for you, perhaps try clearing your cache.

Also working here. I see a generic joomla install: http://i49.tinypic.com/2w4jv3c.png Try what Shinryuu said. If you still get 504s, it could be your ISP. I've seen ISPs sometimes give 504 when overloaded.

Ditto. http://ultimatesmsapi.tk/ is fine for me as well. Also, @rahul758: That website gives me a facebook "Like us or wait" nag. I'm sure that I'm not alone in finding it very annoying. Consider removing it.

You're only allowed one account. You should delete one. If you don't, they'll both get suspended. If you're really on Stevie, you need to move your account: http://wiki.helionet.org/Moving_your_account When deleting your account, be sure to do it twice, once for each of your two accounts. Register for Johnny here: http://www.heliohost.org/home/signup/johnny

Are you receiving/responding to a lot of mail through the inquiries email address? Is the address forwarded or sent to a mail account on HH? Does the contact form send an email when it is submitted? Do you receive a lot of junk through the form? Sometimes heavy mail volume can be caused by software functions people forgot about (e.g. forum software that auto-mails people when replies are made). If you haven't already, you should check if anything on your account has such a feature and turn it off if so. I only see a wordpress install though.