jje

@jje - Check Stevie while your at it if you don't mind.

The partitions on Stevie look fine at the moment.

I've given /var/ a little bit of a cleanup on Johnny

Working on this...

I've unsuspended your account again (you had 4 cron jobs).

You were suspended for having too many cron jobs (6). Your account is now unsuspended.

However, when I try accessing your domain, I see an error message from "Homestead". We are not associated with "Homestead" and we cannot, therefore, help in regards to that problem.

Thanks

The account associated with the URL you provided is currently inactive. You can renew your account at the following link:

http://www.heliohost.org/home/support/scripts/renew

However, the username associated with this URL is not "headless" - please could you check this?

Thanks

This support request is being escalated to our root admin.

Your account was suspended for causing high server load. I have unsuspended your account, but please try to limit the load you put on our servers as it slows down not only your site, but the sites of all other HelioHost users sharing your server.

If you still see the suspended page, please clear your cache.

This should be fixed now.

This was due to incorrect permissions being set on your home directory (/home1/amirba). Your home directory was set to privileges 0744, when it should have been set to 0711.

I've also reset the files you changed to 0777 back to normal.

That account does not appear to be suspended at this time.

This support request is being escalated to our root admin.

A serious Terms of Service violation was found on your account.

Would you like me to escalate this so you can have a specific reason why it is suspended?

A lookup of your domain shows that it does not appear to be pointing to our two nameservers, ns1.heliohost.org and ns2.heliohost.org.

If you have already set them, you may need to wait up to 24 hours for DNS propagation to complete.

Hi,

Which addon domain is having problems?

Thanks

Your account was suspended for causing high server load. I have unsuspended your account, but please try to limit the load you put on our servers as it slows down not only your site, but the sites of all other HelioHost users sharing your server.

If you still see the suspended page, please clear your cache.

Looks like the request I made to Johnny to unblock your IP a few days ago didn't fully complete.

I'm really sorry about that; should be fixed now.

Your account was suspended for causing high server load. I have unsuspended your account, but please try to limit the load you put on our servers as it slows down not only your site, but the sites of all other HelioHost users sharing your server.

If you still see the suspended page, please clear your cache.

Your account was suspended for causing high server load. I have unsuspended your account, but please try to limit the load you put on our servers as it slows down not only your site, but the sites of all other HelioHost users sharing your server.

If you still see the suspended page, please clear your cache.

To disable Incapsula, you will need to point your domain to HelioHost's nameservers from the website you registered your domain name from. Based on your domain's whois records, I will assume this website will be http://internet-webhosting.com/

You will need to point the domain to the following nameservers from your domain registrar:

ns1.heliohost.org

ns2.heliohost.org

Yes, ClamAV is matching v.php as being the infected file.

If you didn't place v.php yourself in public_html, it is possible that other files *could* be infected, however.

Hi,

I'm afraid that our upstream provider charges us for dedicated IP addresses, so we can't provide dedicated IPs for free.

If you need a dedicated IP, please read the following: http://www.heliohost.org/home/signup/218

Thanks

As we have already said, we can't. It is way too much of a security risk to run a continuous shell script for users, which is the main reason we have SSH access disabled. No exceptions.

I ran a quick scan on your account from Stevie, and the results showed there is a file called "v.php" in public_html which is matching a PHP.ShellExec.

Sorry, but I can't run shell scripts for you - currently it is too much of a security risk.

Your account was suspended for the following reason:

PHP.Shell found on the account

That means that there are some malware files found on your account.

For your safety and to protect your website from potential further corruption the account has been suspended.

To find the infected files we recommend making a backup of your site, download the backup file to your computer, and scan the backup using a reputable virus and malware scanner. If you're having trouble locating the offending files please ask and we can provide more information.

If you are you certain that it is a false-positive, we strongly encourage you to file a false positive form here: http://cgi.clamav.net/sendvirus.cgi

Your account should be unsuspended now, but keep in mind that this is a temporary unsuspension. You have 24 hours starting at the time of this post to clean your account of any and all malicious files or your account will be resuspended.