[Solved] Suspended: Pasarel

[Pasarel]

Username: Pasarel

Server: Stevie

Main Domain: revista-floyd.tk

 

Why was I suspended? Seems like my account didn't get inactive, and I don't understand what else I could've done.

 

Oh, God, I just realised what happened. I used a picture from my website as an avatar on a high traffic forum, and that kinda balled-up your servers. Any chances to get my account back?

[Tjoene]

Your were suspended for the following reason: Malware (2 files) JS.Trojan.Redir-5 found.

That means that there are some malware files found on your account.

 

For your safety, your account has been suspended.

You need to clean your files within 24 hours, or you will be suspended again.

 

To find the infected files you can take a backup of your site, download the files to your computer and scan the files using a virus- and mall-ware scanner like AVG Virus scanner and Malwarebytes.

If you are you certain that it is a false-positive, we strongly encourage you to file a false positive form here: http://cgi.clamav.net/sendvirus.cgi

 

 

Your account should be unsuspended now.

[Krydos]

It's been over 12 hours already since your account was unsuspended and the problem still hasn't been taken care of. Here is a hint:

/home/pasarel/public_html/wp-content/themes/erays/functions.php
/home/pasarel/public_html/wp-content/biaa/themes/erays/functions.php

You only have another 11 hours and 30 minutes left to take care of this or your account will be suspended again.

[Pasarel]

Thank you, but currently I can't access my website at all. It's not even showing the "suspended" page. Also, the forum is very slow, I really don't know why, as the server monitor claims everything is alright.

 

EDIT: The site loads now, I deleted the two files but it seems that nothing changed: my antivirus still shows a warning page when trying to load it. Am I THAT dumb?

[Krydos]

Your account show up as clean now. Thank you for taking care of this.

[Pasarel]

Hmmm, so it's clean now, huh? That's weird, because my antivirus is still blocking the website. I guess that's not your problem, though, I think it only got into some database containing infected websites to be avoided.