madler Posted March 9, 2013 Posted March 9, 2013 Username: madlerServer: StevieMain URL: http://mikeadler.heliohost.org I have a backup of my website to upload, but I am on a mac, is there any free virus scan tools that can ensure the backup I upload is clean of the C99-9 files? Or can you point me to the 2 files that are giving the C99-9?
Krydos Posted March 9, 2013 Posted March 9, 2013 Your account was suspended for the following reason: Malware. 2 file(s). PHP.C99-9 FOUND That means that there are some malware files found on your account. For your safety and to protect your website from potential further corruption the account has been suspended. To find the infected files we recommend making a backup of your site, download the backup file to your computer, and scan the backup using a reputable virus and malware scanner. If you're having trouble locating the offending files please ask and we can provide more information. If you are you certain that it is a false-positive, we strongly encourage you to file a false positive form here: http://cgi.clamav.net/sendvirus.cgi Your account should be unsuspended now, but keep in mind that this is a temporary unsuspension. You have 24 hours starting at the time of this post to clean your account of any and all malicious files or your account will be resuspended. Or can you point me to the 2 files that are giving the C99-9? /home/madler/public_html/wp-includes/js/js/cnn.php /home/madler/public_html/wp-includes/js/js/rconfig.php
madler Posted March 9, 2013 Author Posted March 9, 2013 (edited) Thanks for the reply, I will check those files Edited March 9, 2013 by madler
Krydos Posted March 9, 2013 Posted March 9, 2013 It looks like you're running wordpress which is probably the most commonly targeted website software for hackers to try to upload junk to and gain control of. I would recommend upgrading to the latest version, deleting all themes and plugins, and only install themes and plugins that are verified as clean. A lot of free themes for wordpress are actually just backdoors for hackers to upload whatever they want to your website. Fixing the underlying problem will prevent your account from being suspended again for malware in the future.
Krydos Posted March 11, 2013 Posted March 11, 2013 Your account is showing up as clean now. Thank you for taking care of this.
Recommended Posts