Hoorkeet Posted February 11, 2013 Share Posted February 11, 2013 a. your HelioHost username: hoorkeetb. the server your account is on: Stevie?c. your HelioHost main domain: afisha.te.ua Please explain what is wrong with it, thanks. Link to comment Share on other sites More sharing options...
Tjoene Posted February 11, 2013 Share Posted February 11, 2013 Your account was suspended for the following reason: Malware. 4 file(s). Heuristic.HTML.Dropper FOUND That means that there are some malware files found on your account. For your safety and to protect your website from potential further corruption the account has been suspended. To find the infected files we recommend making a backup of your site, download the backup file to your computer, and scan the backup using a reputable virus and malware scanner. If you're having trouble locating the offending files please ask and we can provide more information. If you are you certain that it is a false-positive, we strongly encourage you to file a false positive form here: http://cgi.clamav.net/sendvirus.cgi Your account should be unsuspended now, but keep in mind that this is a temporary unsuspension. You have 24 hours starting at the time of this post to clean your account of any and all malicious files or your account will be resuspended. Link to comment Share on other sites More sharing options...
Hoorkeet Posted February 11, 2013 Author Share Posted February 11, 2013 Hi! Should you point me exactly to the files infected? I've tested the files, but had not found anything malicious.. Maybe it is this piece of code? <script src="http://tools.spylog.ru/counter_cv.js" id="spylog_code" type="text/javascript" counter="706543" part="" track_links="ext" page_level="1"> And this is just a counter from spylog.ru - let me know, if this really need to be removed I'll remove. Link to comment Share on other sites More sharing options...
Krydos Posted February 11, 2013 Share Posted February 11, 2013 Should you point me exactly to the files infected? /home1/hoorkeet/public_html/geonotes/moo/accordion.html /home1/hoorkeet/public_html/geonotes/moo/native.html /home1/hoorkeet/public_html/geonotes/moo/Request.JSON.html /home1/hoorkeet/public_html/geonotes/moo/Sortables.html Link to comment Share on other sites More sharing options...
Hoorkeet Posted February 12, 2013 Author Share Posted February 12, 2013 Should you point me exactly to the files infected? /home1/hoorkeet/public_html/geonotes/moo/accordion.html /home1/hoorkeet/public_html/geonotes/moo/native.html /home1/hoorkeet/public_html/geonotes/moo/Request.JSON.html /home1/hoorkeet/public_html/geonotes/moo/Sortables.html Yes! Really, found it there and removed successfully. Should be now clean. Thanks! Link to comment Share on other sites More sharing options...
Krydos Posted February 13, 2013 Share Posted February 13, 2013 Your account is showing up as clean now. Thank you for taking care of this. Link to comment Share on other sites More sharing options...
Recommended Posts