opieantc Posted August 31, 2014 Posted August 31, 2014 (edited) Problem resolved, false-positive malware detection by ClamAV. Edited August 31, 2014 by opieantc
yashrs Posted August 31, 2014 Posted August 31, 2014 Your account was suspended for the following reason: Malware. 1 file(s). Win.Trojan.Wpbrutebot-2 FOUND That means that there are some malware files found on your account. For your safety and to protect your website from potential further corruption the account has been suspended. To find the infected files we recommend making a backup of your site, download the backup file to your computer, and scan the backup using a reputable virus and malware scanner. If you're having trouble locating the offending files please ask and we can provide more information. If you are you certain that it is a false-positive, we strongly encourage you to file a false positive form here: http://cgi.clamav.net/sendvirus.cgi Your account should be unsuspended now, but keep in mind that this is a temporary unsuspension. You have 24 hours starting at the time of this post to clean your account of any and all malicious files or your account will be resuspended.
opieantc Posted August 31, 2014 Author Posted August 31, 2014 Thank you. Looking up Win.Trojan.Wpbrutebot-2 on Google turns up a number of recent results about this being a false positive problem with some virus definitions released for ClamAV. At least two of the search results are here on this forum (Unisan and Jontron). Jontron's problem was resolved when a new scan was done with newer ClamAV virus definitions. Could you please scan my account again with the updated ClamAV? Thanks again.
opieantc Posted September 5, 2014 Author Posted September 5, 2014 Your site is showing good now. My site is showing up as suspended again. I'm guessing it was still automatically re-suspended after 24-hours even though the site showed up as clean when it was checked again. Hopefully this can be fixed. Thank you.
Byron Posted September 5, 2014 Posted September 5, 2014 Your account was suspended for inactivity, because you haven't logged into your account in the last 30 days. To reactivate your account, please visit http://www.heliohost.org/home/support/scripts/renew. To prevent this from happening in the future please remember to visit http://heliohost.org/ to log into your account at least once every 30 days. If you are still seeing the Account Suspended page after renewing your account, please clear your cache.
opieantc Posted September 5, 2014 Author Posted September 5, 2014 Thank you. For whatever reason, I didn't receive an inactivity notification e-mail like I have when that was the problem before. Thanks again.
Recommended Posts