Question: |
Hello.Today I saw the following entry on its website (500mb.ru) \"Your hosting account has been suspended, the reasons may be as follows: 1. You delayed the payment for hosting, after hosting renewal, the account will be unlocked automatically. 2. You run a test hosting. 3. Your hosting account`s violation of any applicable laws or regulations of our hosting.All the questions You can solve in Your billing account and open a ticket in the section of Those.support, if you do not find the answer. \"Payment is not a problem, so I would like to understand what is it-a blog about the technology of site-building could pogoditi? |
Answer: |
Hello. On your website full of viruses and slysa spam /home/webber/public_html/500mb.ru/wp-content/themes/delicate/cache/866c0fee959a15565a30eb774195feec.php: PHP.Hide FOUND /home/webber/public_html/500mb.ru/wp-content/themes/delicate/cache/85c38ea67a024fe02e9808c5b29af258.php: PHP.Hide FOUND /home/webber/public_html/500mb.ru/wp-content/themes/delicate/cache/bb7bba42235d9fce151bf8357d8d81f8.php: PHP.Hide FOUND /home/webber/public_html/500mb.ru/wp-content/appset.php: PHP.Shell-84 FOUND /home/webber/public_html/500mb.ru/wp-content/themes/delicate/cache/173e7883530db0138c3208575fd61230.php: PHP.Hide FOUND /home/webber/mail/smet.ru/info/new/1395084920.H611639P616165.german.blogway.EN,S=17846: Heuristics.Phishing.Email.SSL-Spoof FOUND /home/webber/public_html/500mb.ru/wp-content/themes/delicate/cache/c5e03f679db04e5d76efb5d8fac023b4.php: PHP.Hide FOUND /home/webber/public_html/500mb.ru/wp-content/themes/delicate/cache/bb7bba42235d9fce151bf8357d8d81f8.php: PHP.Hide FOUND /home/webber/public_html/500mb.ru/wp-content/themes/delicate/cache/173e7883530db0138c3208575fd61230.php: PHP.Hide FOUND /home/webber/public_html/500mb.ru/wp-content/themes/delicate/cache/7fb7a21fb5a6609ef37943e859705fa7.php: PHP.Hide FOUND /home/webber/public_html/500mb.ru/wp-content/themes/delicate/cache/92d6d95de630c5fa9659529268647ac8.php: PHP.Hide FOUND /home/webber/mail/smet.ru/info/new/1405173607.H253806P474081.german.blogway.EN,S=14289: Win.Trojan.Downloader-62638 FOUND we sent you a notification, but since you didn`t respond to the account has been locked. please take action, this is not the first time let ip with which you will work and we will open you the access |
Question: |
unfortunately, messages from hosting I have not seen, it is possible to change the e-mail for notifications?ip address dynamic IP now |
Answer: |
Yes. let the new email access is now open |
Question: |
maybe you have admin access to the hosting customers skomprometiroval? I have a few days ago, even on a static website has a virus, there is no admin access, only ftp was proluvial only once in FileZilla and was beaten there for more than a year, and I don`t expect its possible the interception from the outside... changed just in case this password, now with the static site probably is the same problem Google swears.In favor of my assumption that site in the signature of \"Feedback\" (right on your site):\"many thanks to Eugene for the help. very responsible and helpful person. Larissa multifilms.org\"also sawiroeben - Google complains. Painfully strange coincidence. |
Question: |
EMAIL |
Question: |
thanks went ftp. On a static website the same technology intrusion append file .htaccess , I tried the last time to set the right CHMOD on this file to 444 that is under any t-x not to allow to change it, just replace via ftp , but hosting machine reassigns parawa to 644 Maybe it`s your security hole, etc. hosting 444 POS-t set. |
Answer: |
you will be surprised to learn how often break sites, for many reasons. from stealing passwords to the vulnerability of the sites. we have a few easy thousands of customers that contain dozens if not hundreds of thousands of sites. do you think it`s a coincidence that hacked few easy sites of several thousand? Take care of your account. about this site on html, if the site in your account and the attacker was vessel. that means he has 100% access to all your sites on the current account and can change anything. |
Question: |
I`m a web master and an Amateur in the field of security, so I just assumed, I not want you in something to blame, but only to get rid of this problem, preferably longer.I would be grateful if you tell me what exactly to defend against web Shelah, and right now I`m cleaning everything, and that it would be a couple of days.prolinnova need to change? |
Answer: |
nachnet e check all files of sites http://www.revisium.com/ai |
Question: |
well, I`m VirusTotal check, but there, too, then check. |
Answer: |
ok
|
Question: |
I have a Internet disconnect bilr changed: IP |
Answer: |
please Check now.
|
Question: |
Yes access is, thank you, continue to clean |
Answer: |
ok
|
Question: |
Listen to a webinar on Dolittle, I want to go to the hosting connection through sftp, enter the data you need all the same? only connect to port 22? |
Answer: |
the port 22 with ssh access |
Question: |
why? open any way? |
Answer: |
closed for security reasons |
Question: |
working on updating and protection SME something I otogiriso from ftp and cpanel tells about the timeout of the connection, and the domains and the server is not penguasa. |
Answer: |
Hello. Your website will be available to You in the near future. We apologize for the inconvenience. In a data center network issues
|