[Solved] Suspended: Monyooow

[monyo07]

a. Monyooow

b. Stevie

c. cjnprime.com

 

Hi, I know this is my third time to be suspended because of something spamming my email. But I already deleted what seemed to be causing it and it has stopped for a week then I have not checked it after that so I am not sure.

 

Thanks a lot for your great service.

[Tjoene]

Your were suspended for the following reason: Malware (13 files) PHP.Hide found.

That means that there are some malware files found on your account.

 

For your safety, your account has been suspended.

You need to clean your files within 24 hours, or you will be suspended again.

 

To find the infected files you can take a backup of your site, download the files to your computer and scan the files using a virus- and mall-ware scanner like AVG Virus scanner and Malwarebytes.

If you are you certain that it is a false-positive, we strongly encourage you to file a false positive form here: http://cgi.clamav.net/sendvirus.cgi

 

 

Your account should be unsuspended now.

[monyo07]

Thank you so much for this. I did what you said and scanned them with Avast Internet Security Pro and it says no threats found but I doubt it since there's something messing up with my email.

 

What else can you advise regarding this matter? Thanks!

 

UPDATE: I checked it and my email's good I wonder what files gave that result in your server 13 files PHP files found.

[Krydos]

I wonder what files

/home1/monyooow/public_html/clueslearning.net/wp-content/themes/newoffer/cache/b054a7ad27a73131e5d914ace6e7f975.php
/home1/monyooow/public_html/clueslearning.net/wp-content/themes/newoffer/cache/246aae6708b7e04fc19053736e7929f4.php
/home1/monyooow/public_html/clueslearning.net/wp-content/themes/newoffer/cache/a6c575bbc7fe5ef844d9d96059d6a6fb.php
/home1/monyooow/public_html/clueslearning.net/wp-content/themes/newoffer/cache/9ebc6e2951385fc633d8ed624008c427.php
/home1/monyooow/public_html/clueslearning.net/wp-content/themes/newoffer/cache/7ab6f1b5ca4227f2c9ae3631883a1864.php
/home1/monyooow/public_html/clueslearning.net/wp-content/themes/newoffer/cache/cfa22c096745e2d78fd1054a38320b2f.php
/home1/monyooow/public_html/clueslearning.net/wp-content/themes/newoffer/cache/f0b19d5964582251dbe9e7c9bfa8698e.php
/home1/monyooow/public_html/clueslearning.net/wp-content/themes/newoffer/cache/incs.php
/home1/monyooow/public_html/clueslearning.net/wp-content/themes/newoffer/cache/22ce3f5fa5fe28657a4034e150622aa4.php
/home1/monyooow/public_html/clueslearning.net/wp-content/themes/newoffer/cache/d7a891568426e7ff9bd810b86db57cb9.php
/home1/monyooow/public_html/clueslearning.net/wp-content/themes/newoffer/cache/17efcaf5d75a6e8068051bcf4ec0fd83.php
/home1/monyooow/public_html/clueslearning.net/wp-content/themes/newoffer/cache/4116445b9d434b062ba79330b3ba43b3.php
/home1/monyooow/public_html/clueslearning.net/wp-content/themes/newoffer/cache/1cae8feb0ef500eb04eaf027153175a4.php

[Shinryuu]

Maybe the homepage needs a really in-your-face warning about checking script addons before uploading them.

[Krydos]

Your account is showing up as clean now. Thank you for taking care of this.