[Solved] Suspended: Shopper

[baghban]

could you please check why it is suspended:

 

a.my HelioHost username : shopper

b. server my account is on : stevie

c. HelioHost main domain : shop-place.biz

 

Thank you

[Shinryuu]

We received reports of malware on your site. I cannot unsuspend this account or provide a backup.

[baghban]

We received reports of malware on your site. I cannot unsuspend this account or provide a backup.

 

Could you please tell me which file is malware, i am completely sure about my content on the server. I am sure something wrong here, i just use script to automatic backup my database, which is from this website http://www.hostliketoast.com/developer-channel/automatic-cpanel-mysql-backup-script/ and it is a trust web site, I request kindly to check it again and tell me in detail which file exactly you mean? I am very surprised about that!

[Shinryuu]

As I said, we received a report from a third party about your site; I've asked an admin to look into it but I've told you all I can.

[baghban]

Ok thank you very much for your help , actually i have a backup of my website, the only thing i need is to know why there should be a report , what is the source of malware , because i am sure about what i put on my server , also i have an dedicated ip on this account , is it any possibility to keep it ?

[baghban]

Ok thank you very much for your help , actually i have a backup of my website, the only thing i need is to know why there should be a report , what is the source of malware , because i am sure about what i put on my server , also i have an dedicated ip on this account , is it any possibility to keep it ?

 

I am Still waiting for Your News about the file which content malware, also i paid for a dedicated IP, is it possible to transfer it on another Account ?

[Ice IT Support]

Please create a new topic in Customer Service for your dedicated IP. You can check for possible malware yourself by scanning your latest backup with anti-virus software.

[baghban]

Ok I will open a new topic in Customer Service, I check with anti-virus software but I do not find anything, I am sure about that !

[Krydos]

-------- Original Message --------
Subject: [HE ABUSE #448749][65.19.143.4] New malicious URL found on: shop-place.biz (IP: 65.19.143.4)
Date: Sun,  4 Aug 2013 02:40:58 -0700 (PDT)
From: no-reply@abuse.he.net
To: abuse@connexinternet.com

We have received a complaint about your account. Please investigate and fix within 24 hours.

Hurricane Electric Abuse Department
support@he.net

From malwaredb@it-mate.co.uk  Sun Aug  4 02:40:49 2013
Return-Path: &--#60;malwaredb@it-mate.co.uk&--#62;
X-Original-To: report@abuse.he.net
Delivered-To: report@abuse.he.net
Received: from he.net (he.net [216.218.186.2])
by abuse.he.net (Postfix) with SMTP id BF3CA541100
for &--#60;report@abuse.he.net&--#62;; Sun,  4 Aug 2013 02:40:48 -0700 (PDT)
Received: from mysteryfcm.co.uk ([212.56.95.253]) by he.net for &--#60;abuse@he.net&--#62;; Sun, 4 Aug 2013 02:39:22 -0700
Received: from Malmon by mysteryfcm.co.uk (MDaemon PRO v13.0.3)
with ESMTP id 23-md50000033171.msg
for &--#60;abuse@he.net&--#62;; Sun, 04 Aug 2013 10:39:29 +0100
X-Spam-Processed: mysteryfcm.co.uk, Sun, 04 Aug 2013 10:39:29 +0100
(not processed: spam filter heuristic analysis disabled)
X-HashCash: 1:20:130804:md50000033171::UrvVZ9blgAXkJmz+:00002AHb
X-Return-Path: malwaredb@it-mate.co.uk
X-Envelope-From: malwaredb@it-mate.co.uk
X-MDaemon-Deliver-To: abuse@he.net
Date: Sun, 04 Aug 2013 10:39:18 +0100
Subject: New malicious URL found on: shop-place.biz (IP: 65.19.143.4)
To: abuse@he.net
From: malwaredb@it-mate.co.uk
Reply-To: services@it-mate.co.uk
X-Mailer: I.T. Mate Malware Monitor
Message-ID: &--#60;MDAEMON-F201308041039.AA3924845md50000000501@mysteryfcm.co.uk&--#62;

A new malicious URL has been found in Hurricane Electric IP space.

Host: shop-place.biz
IP: 65.19.143.4
URL: http://shop-place.biz

Since they weren't very specific about what was "malicious" about your site I have gone ahead and unsuspended it for you. Our virus scanner can't find any malware files on your account either. It might be in your best interest to contact your accusers and find out what they think is malicious about your site, and work with them to make sure they don't report your site again. We take malicious sites and our ToS very seriously. If we receive another report about your site it will be suspended again.