[Solved] Suspended: Zodiaco

[zodiaco]

Hello i have my account Suspended Again

 

whats going on this Time?

 

Thanks for your Help.

 

=) HelioHost

[Shinryuu]

Your account was suspended for the following reason:

 

Malware. 3 file(s). PHP.Hide FOUND

 

That means that there are some malware files found on your account.

 

For your safety and to protect your website from potential further corruption the account has been suspended.

 

To find the infected files we recommend making a backup of your site, download the backup file to your computer, and scan the backup using a reputable virus and malware scanner. If you're having trouble locating the offending files please ask and we can provide more information.

 

If you are you certain that it is a false-positive, we strongly encourage you to file a false positive form here: http://cgi.clamav.net/sendvirus.cgi

 

Your account should be unsuspended now, but keep in mind that this is a temporary unsuspension. You have 24 hours starting at the time of this post to clean your account of any and all malicious files or your account will be resuspended.

[zodiaco]

can you please show me the file like the last time? i dont know where the problem is now, sorry for the inconvenience

 

and what should i do to avoid this problems? thanks

[Shinryuu]

I can't see the files or call the scanner etc etc. However, last time and this time the same type of infection was detected, last time was a wp-include thing, which I'm assuming is from whatever WordPress themes or plugins you've set up, so my best guess is that the theme or plugin you're using has a backdoor that's letting someone have their way with your account.

[zodiaco]

Hello ive used Sucuri Scanner Plugin to find the possible Virus, but in all my sites are Clean, i dont know what is happening whit my site, what should i do? or i should pay to some one to check my place and look for that virus? i cant found it

 

thanks for your help i hope we can solve this problem

[Krydos]

/home/zodiaco/public_html/rednatura31.tk/wp-content/themes/Mentor/cache/external_2dfa51ad98cd96c011d87a1f04e1f27f.php
/home/zodiaco/public_html/rednatura31.tk/wp-content/themes/Mentor/cache/external_6230953d4ceb804319e701f8cd0693a0.php
/home/zodiaco/public_html/rednatura31.tk/wp-content/themes/Mentor/cache/external_22b3840addd9d4394eb22c489eafdefe.php

[zodiaco]

its done thanks! when i click on them to show them, it appear a warning from my antivirus it says backdoor blocked

 

Thanks you very much! how can i avoid this kind of problems? cuz i dont want to bother you guys

 

i love Helio host

[Shinryuu]

I can't see the files or call the scanner etc etc. However, last time and this time the same type of infection was detected, last time was a wp-include thing, which I'm assuming is from whatever WordPress themes or plugins you've set up, so my best guess is that the theme or plugin you're using has a backdoor that's letting someone have their way with your account.

 

Meaning, before you install stuff, check to make sure it's from a reputable source and been vetted by other users, and even scan it on your home pc before installing it on the server.

[Krydos]

Your account is showing up as clean now. Thank you for taking care of this.