[Solved] Suspended: Romainb

[romainb]

Heliohost username : romainb

Server : stevie

Main domain : rnb.heliohost.org

 

I did not receive a suspended account notification by mail (though it has been a little inactive so that might be why). Tried reactivating through the script and got :

"We're sorry, but we either could not find that account in the database, or it is not listed as inactive. Please contact an administrator if you feel this message is in error."

 

(cleared cache and tried different browsers, same issue)

 

Thanks!

[yashrs]

Your account was suspended for the following reason:

 

Malware. 2 file(s). HTML.Exploit.CVE_2014_0322 FOUND

 

That means that there are some malware files found on your account.

 

For your safety and to protect your website from potential further corruption the account has been suspended.

 

To find the infected files we recommend making a backup of your site, download the backup file to your computer, and scan the backup using a reputable virus and malware scanner. If you're having trouble locating the offending files please ask and we can provide more information.

 

If you are you certain that it is a false-positive, we strongly encourage you to file a false positive form here: http://cgi.clamav.net/sendvirus.cgi

 

Your account should be unsuspended now, but keep in mind that this is a temporary unsuspension. You have 24 hours starting at the time of this post to clean your account of any and all malicious files or your account will be resuspended.

[romainb]

Hi,

 

I scanned a complete backup of my home directory with ClamWin, ESET, and Avast without finding anything. Could you point me to the files that were detected as malware?

 

Thanks

[yashrs]

This support request is being escalated to our root admin.

[Krydos]

Your account is showing up as clean now. Thank you for taking care of this.