Possible solutions of your questions

Hello.

Check amps. what kind of domain is it?

Your sites highly contaminated, so when you log the antivirus is blocking access to them. We launched a scan of Your account at the end of synervoice into Your mailbox will receive the report.

scan carried out, a report sent to Your Inbox.

Aybolit is a simple scanner, the sites contained in the database of the antivirus is blocked, You need to contact Avast so they checked and removed the site from the database.

what does avast? You check your email? Str***@mail.ru is your box?

yesterday we sent another complaint on your website

[ SpamCop V*.*.* ]
This message is brief for your comfort. Please use links below for details.

Spamvertised web site: http://art-asfalt.com/z*hnl
https://www.spamcop.net/w*m?i=z**********z**e*b******d*d*****d***f*e****e*z
http://art-asfalt.com/z*hnl is **.**.*.**; Tue, ** Oct **** **:**:** GMT

[ Offending message ]
\"From Conrad.***@daniellysimmer.com Tue Oct * **: **:** ****\"
Return-Path:
Received: from dslb-***-***-***-***.***.***.pools.vodafone-ip.de
(dslb-***-***-***-***.***.***.pools.vodafone-ip.de [**.***.**.*])
by thor.haveland.com (*.**.*/*.**.*) with ESMTP id u**Kxoai******
for ; Tue, * Oct **** **:**:** +****
Received: (from hq@localhost)
by daniellysimmer.com (*.**.*/*.**.*/Submit) id CAFC*F*C****.
Tue, ** Oct **** **:**:** +****
(envelope-from hq)
Date: Tue, ** Oct **** **:**:** +****
Message-Id:
To: x
Subject: contact information
MIME-Version: *.*;
Content-Type: multipart/mixed; boundary=\"--****** cf****c***fcd******ef***d*\"
From: \"Moshe Conrad\"

----******cf****c***fcd******ef***d*
Content-Type: text/plain;
charset=\"utf-*\"
Content-Transfer-Encoding: *bit

Infected sites referenced in the attachment:
http://art-asfalt.com/z*hnl

is a world renowned organization against spam and viruses

www.spamcop.net

they brought forth the complaint in Cento yeah that one site is spreading viruses

and provided a link to the virus itself.

http://art-asfalt.com/z*hnl

this file was in the Koren website.

what did you do in order to clear the site and secure it from last time?

when will work with the website, please report Your ip, we will open You the access

it is possible. you can at least * *

open access

You can simply change the password, and this password sruzu set to login via FTP.

the Question referred to the administrator, wait for amp.

this should not be done, assign a more complex password, if You want to appear in СЃPanel via a button in Your personal profile, passwords must match.

Yes, the password is changed immediately and on the FTP.

check amps. what sites, and when was the backup made?

the attacker does not work with your ip, no burglar in their right mind will polzovalas his ip, so calculating the ip and blocking it completely meaningless http://lukomore.org/lurk/Вычислю_по_IP

the Only thing for which you may need the ip so it to search the action log from this ip

utochnyat please name the file backup

utochnyat on what ip to do a search?

need to review the logs and look for the attacker.

you can view the logs. logs you can find  in paneeli menu - neopentane access logs. we can assist you in finding the right koncertnoy information  in the log. ie you say what specifically , what specific word you need  to seek and we will make You a sample of the log

in fact, to leave the site unattended without updates for a long time impossible. it happens that there are critical vulnerabilities and their need to quickly eliminate.  of course break not all sites. hosting there are sites which are already over *-* years that has not been updated in , have a bunch of critical vulnerabilities and not hacked. but they are very lucky. usually hacking is not a person but a robot using kriticheskie vulnerability just takes ukad server ip and scans sites on it and breaks all websites that have this critical issue **% of break-ins are done exactly.

American translators once again screwed up with the translation, each update panel, change the name

menu block - metrics

menu - access to the raw data

with Notepad. these are text files

what is the password from the user [email protected] ?

http://whatismyipaddress.com/ip/***.***.***.***

now, change all the passwords

and check your computer for viruses. to crack the password it is impossible, unless of course it is not too simple, but to steal a password Trojan elementary

judging by the log TOD, this file was in the downloads, ip is clearly not your

account vosstanovlen from your backup

Hello. utochnyat what exactly should be recorded in the logs? let what to look for and we will make You a sample of logs. we can only check You site again antivirus

connect to the website service https://virusdie.ru

specify which folders you what to replace

just specify the path to the folder you want to replace

what are the sites which you need vosstanovit from backup

the request sent to the administrator.

if ftp then you need to scan your computer. because different passwords can not be stolen

have you added ftp user [email protected]  ?

delete this user or smenet him the password

change passwords

ok

do not change until nichego sites

files replaced by files from backup

virusdie this additional monitoring of the site.

This is an empty file. You can delete it.

Expect. We ran a scan of your account.

Yes.

at the beginning, copy all these files to his computer, just in case, to have something to replace if not correct edit the file.

it is Desirable to change, for greater reliability.

Result: str**/public_html/AI-BOLIT-REPORT-__-******-**-**-****_**-**.html

What to replace?

please Wait.

check Report:

/public_html/AI-BOLIT-REPORT-__-******-**-**-****_**-**.html

upload, will check it out.

Specify the name of the file

the scan started at the end, Your Inbox will be sent the report.

the rescan is running.

It is in your public_html folder, you can download to your local computer.

please Wait.

the report in the folder. You have downloaded?

ok