[Solved] Suspended: Scprofit

[scprofit]

a. my HelioHost username: scprofit

b. the server my account is on: stevie

c. my HelioHost main domain: www.shortcutprofit.com

 

Pls reactivate my account as perhaps the setting in error of cronjob,

but i did checking last time that the cronjob creation in every 4 mins was disappeared.

 

Thks for your kind assistance!

 

 

regards,

Alvin

alvinkvc@gmail.com

[wolstech]

You're suspended for spam because we received the following abuse report.

 

We have received a complaint about your account. Please investigate and fix within 24 hours.
Hurricane Electric Abuse Department
support@he.net
From scomp@aol.net  Mon Mar 28 20:02:41 2016
Return-Path: <scomp@aol.net>
X-Original-To: report@abuse.he.net
Delivered-To: report@abuse.he.net
Received: from smr-m06e.mx.aol.com (smr-m06e.mx.aol.com [204.29.186.196])
    by abuse.he.net (Postfix) with ESMTPS id 019D05402C4
    for <report@abuse.he.net>; Mon, 28 Mar 2016 20:02:41 -0700 (PDT)
Received: from scmp-m004.mail.aol.com (scmp-m004.mail.aol.com [172.29.110.247])
    by smr-m06e.mx.aol.com (AOL Mail Bouncer) with ESMTP id 55789380010F
    for <report@abuse.he.net>; Mon, 28 Mar 2016 23:02:40 -0400 (EDT)
Received: from scomp@aol.net by scmp-m004.mail.aol.com; Mon, 28 Mar 2016 23:02:36 EDT
To: report@abuse.he.net
From: scomp@aol.net
Date: Mon, 28 Mar 2016 23:02:36 EDT
Subject: Email Feedback Report for IP 65.19.143.2
MIME-Version: 1.0
Content-Type: multipart/report; report-type=feedback-report; boundary="boundary-1138-29572-2659438-8563"
X-AOL-INRLY: stevie.heliohost.org [65.19.143.2] scmp-m004
X-Loop: scomp
--boundary-1138-29572-2659438-8563
Content-Type: text/plain; charset="US-ASCII"
Content-Transfer-Encoding: 7bit
This is an email abuse report for an email message with the message-id of a6548438ea9b1487c37c8fd5246b9bba@shortcutprofit.com received from IP address 65.19.143.2 on Mon, 28 Mar 2016 23:01:36 -0400 (EDT)
For information, please review the top portion of the following page:
http://postmaster.aol.com/Postmaster.FeedbackLoop.php
For information about AOL E-mail guidelines, please see
http://postmaster.aol.com/Postmaster.Guidelines.php
If you would like to cancel or change the configuration for your FBL please use the tool located at:
http://postmaster.aol.com/SupportRequest.FBL.php

--boundary-1138-29572-2659438-8563
Content-Disposition: inline
Content-Type: message/feedback-report
Feedback-Type: abuse
User-Agent: AOL SComp
Version: 0.1
Received-Date: Mon, 28 Mar 2016 23:01:36 -0400 (EDT)
Source-IP: 65.19.143.2
Reported-Domain: stevie.heliohost.org
Redacted-Address: redacted
Redacted-Address: redacted@

--boundary-1138-29572-2659438-8563
Content-Type: message/rfc822
Content-Disposition: inline
Return-Path: <harriet_hodges@shortcutprofit.com>
Received: from stevie.heliohost.org (stevie.heliohost.org [65.19.143.2])
    (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
    (No client certificate requested)
    by mtaig-aaa02.mx.aol.com (Internet Inbound) with ESMTPS id DA1CE70000089
    for <redacted>; Mon, 28 Mar 2016 23:01:36 -0400 (EDT)
Received: from scprofit by stevie.heliohost.org with local (Exim 4.82)
    (envelope-from <harriet_hodges@shortcutprofit.com>)
    id 1akjui-0005MW-V9
    for redacted; Mon, 28 Mar 2016 20:01:26 -0700
To: redacted@aol.com
Subject: Love to F&ck
Date: Mon, 28 Mar 2016 20:01:52 -0700
From: Harriet Hodges <harriet_hodges@shortcutprofit.com>
Message-ID: <a6548438ea9b1487c37c8fd5246b9bba@shortcutprofit.com>
X-Priority: 3
X-Mailer: PHPMailer 5.2.9 (https://github.com/PHPMailer/PHPMailer/)
MIME-Version: 1.0
Content-Type: multipart/alternative;
    boundary="b1_a6548438ea9b1487c37c8fd5246b9bba"
Content-Transfer-Encoding: 8bit
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - stevie.heliohost.org
X-AntiAbuse: Original Domain - aol.com
X-AntiAbuse: Originator/Caller UID/GID - [1528 32003] / [47 12]
X-AntiAbuse: Sender Address Domain - shortcutprofit.com
X-Get-Message-Sender-Via: stevie.heliohost.org: authenticated_id: scprofit/from_h
X-Source: /usr/bin/php
X-Source-Args: /usr/bin/php /home1/scprofit/public_html/wp-content/themes/portfolio-gallery/images/ini.php
X-Source-Dir: shortcutprofit.com:/public_html/wp-content/themes/portfolio-gallery/images
x-aol-global-disposition: G
Authentication-Results: mx.aol.com;
    spf=temperror (aol.com: while processing the SPF record for shortcutprofit.com we encountered a temporary error.) smtp.mailfrom=shortcutprofit.com;
x-aol-sid: 3039ac1b01d656f9f00d0528
X-AOL-IP: 65.19.143.2
X-AOL-SPF: domain : shortcutprofit.com SPF : temperror
--b1_a6548438ea9b1487c37c8fd5246b9bba
Content-Type: text/plain; charset=us-ascii
Take me to heaven with your c0ck, neighbor!
Do you really care what hypocrites will say?
My body is sensational!
[ http://itracknow.com/qhcka/gallery.php?d=62&dDeY=PmJ2w3dAwYH&7RS=7kY ] See this when nobody's there
It's gonna happen soon, can't wait!

--b1_a6548438ea9b1487c37c8fd5246b9bba
Content-Type: text/html; charset=us-ascii
<html>
<body>
<br><br>
Take me to heaven with your c0ck, neighbor!
<br>
Do you really care what hypocrites will say?
My body is sensational!
<br>
<a href="http://itracknow.com/qhcka/gallery.php?d=62&dDeY=PmJ2w3dAwYH&7RS=7kY">See this when nobody's there</a>
<br><br>
It's gonna happen soon, can't wait!
</body>
</html>

--b1_a6548438ea9b1487c37c8fd5246b9bba--
--boundary-1138-29572-2659438-8563--

 

/home1/scprofit/public_html/wp-content/themes/portfolio-gallery/images/ini.php

In your case, it looks like WordPress got hacked (the leading cause of spam suspensions here at Heliohost) because you installed a malicious "free" theme. We recommend that users do not use WordPress due to these issues. If you do though, always update everything regularly, and avoid "free" extensions and themes from random websites. Most such free themes and extensions from dubious websites are actually malware or backdoors.

 

We typically give users one chance to fix spam, however if you are suspended for spam again, you will not be unsuspended a second time. Are you ready to fix the issue?

[scprofit]

How am i going to fix and resolve this issue ? as I need to maintain to use the account, pls assist thks.

[wolstech]

The proper fix is to delete your Wordpress installation because it is infected. After that, you need to either reinstall Wordpress avoiding free themes and extensions from dubious sites, or (my recommendation) use a different program.

 

When you're ready to fix it, let me know and I'll unsuspend you.

[scprofit]

ok proceed to uninstall the free theme, thks