jazons Posted February 22, 2013 Posted February 22, 2013 Hello, my account does not work again. Email account not working. my user: jazonsmy Server: steviemain domain: bestserver.heliohost.org
Tjoene Posted February 22, 2013 Posted February 22, 2013 Your account was suspended for the following reason: Malware. 2 file(s). PHP.Trojan.Spambot FOUND That means that there are some malware files found on your account. For your safety and to protect your website from potential further corruption the account has been suspended. To find the infected files we recommend making a backup of your site, download the backup file to your computer, and scan the backup using a reputable virus and malware scanner. If you're having trouble locating the offending files please ask and we can provide more information. If you are you certain that it is a false-positive, we strongly encourage you to file a false positive form here: http://cgi.clamav.net/sendvirus.cgi Your account should be unsuspended now, but keep in mind that this is a temporary unsuspension. You have 24 hours starting at the time of this post to clean your account of any and all malicious files or your account will be resuspended.
jazons Posted February 22, 2013 Author Posted February 22, 2013 What files were infected? Scan antyvir computer.
Krydos Posted February 22, 2013 Posted February 22, 2013 What files were infected? /home/jazons/public_html/mw3/forum/xmlrpcQyt.php
jazons Posted February 23, 2013 Author Posted February 23, 2013 Someone broke to the server again? December 2012 - 1x February 2013 - 2xip: Ukraina 31.133.32.171 /home/jazons/public_html/mw3/forum/8Qssl.php This file was also previously infected/home/jazons/public_html/mw3/forum/viewpage.php thank you
Shinryuu Posted February 23, 2013 Posted February 23, 2013 Some hacker is gaining control over your account, enough to put malware on it. It is your account though and so your responsibility to prevent this and to fix it. Earlier when you were suspended for excess email usage your account tried to send 20,000 emails. When we unsuspended you to let you find the malware file an admin set it up so that any attempts to access the file was denied and the count was up to 150 unique IPs before so if you don't find what's giving hackers access to your account the situation will only get worse.
Krydos Posted February 23, 2013 Posted February 23, 2013 Your account is showing up as clean now. Thank you for taking care of this.
Recommended Posts