Sove

The server gives a 500 error if you hit either of those, it could be something else. 128mb memory limit is also way too high for a server with 20,000+ users.

Checked the spam folder?

Considering the time from that post, any chance your account has been suspended for inactivity after Krydos's post? Java is automatically removed from inactive accounts.

You can't install python modules, Krydos needs to look into it.

No, there is no way, especially when you don't even mention what stuff your account has.

why? i need my files back..

So you can move your phishing files to a new host or possibly a new heliohost account? Yeah, no.

This is because HTTP uploads are limited to 10MB in php.ini (it is there for everyone's safety and is actually higher than default, which is 2MB). FTP and cPanel uploads have no limit other than the 500MB disk usage cap.

Any chance you're using a CMS like wordpress or joomla and have uploaded plugins to it? Many of the plugins are nothing but backdoors.

Make sure you verify the safety of the plugins you upload, no doubt you uploaded a rogue one.

It can stay queued up to 24 hours until apache's scheduled restart.

Are you sure all your mysql connections are properly closed when they are not needed? Failing to do that is the most common reason for that error.

You have been suspended twice for the same license1.php file, do you keep adding it back over and over again? Honestly, doing that is one of the most stupid things you can do when it comes to computers.

Domain servers in listed order:

NS0.DNSMADEEASY.COM

NS1.DNSMADEEASY.COM

NS2.DNSMADEEASY.COM

NS3.DNSMADEEASY.COM

NS4.DNSMADEEASY.COM

Change them to ns1.heliohost.org and ns2.heliohost.org

Yeah it looks very bad. Bad timing with the other guys. So there is no more specific info? Such as which script is causing the most load?

Didn't bother looking up?

 

 %CPU 15.0 /usr/bin/php /home1/gaddons/public_html/forum/posting.php 

You probably didn't, but you uploaded a malicious wp-plugin or something. It's always worth checking to see if the plugin, theme or whatever is safe, as apparently quite many of them are nothing, but backdoors.

http://wiki.helionet.org/Moving_your_account

Have you waited 24 hours?

The problem is that your account is sending these emails, not receiving them.

Did you add the subdomain less than 24 hours ago? Each subdomain needs apache to be restarted before they work, so all subdomains are queued until apache's scheduled restart.

BUT WAIT!! How about this:

However, if your HelioHost cPanel account was deleted due to inactivity, feel free to create a new account.

...which is readable at My account was deleted. Can I get my data back? on: http://wiki.helionet.org/Heliohost_FAQ

"Note that I already participate in that survey.."

I understand that as can you have your data back when account is deleted. The answer is no. When an account is deleted, so is all of its contents.

The recommended way to login is through Heliohost's website, there are many ways to login that don't count to your logins, that url has to be one of those.

Considering you were resuspended so fast, the best guess is that you did absolutely nothing to fix the high load issue. The unsuspensions don't work by just posting in the forum and waiting for unsuspension, you actually need to fix whatever issue is causing the suspensions.

It's either brute force protection or your own poor ways to keep your account safe. You were not hacked.

You missed the point. Your account is suspended because you have multiple accounts, not because maybe someone else posted a "Suspended:Tberry" topic.

It's best to login only from http://www.heliohost.org/home/ to make sure the logins are counted. There are many ways to login without them being counted by the system.