Kampeon Ng Pagibig Blog Was Suspended

Kailangan ko lang i-compile lahat ng nangyari sa website at hosting package ko for the past 8 days. It has been a battle between me and my web host pero it is worth the wait.

Na suspend kasi siya due to so many fault in our stars. Paki-basa na lang po ang email logs:

****

Your hosting account has hacked content. It appears you are running vulnerable PHP that has allowed your account to be controlled by an attacker. You will need to remove all PHP files from your hosting account and update your content to a more secure system. Failure to do so will result in your account remaining suspended.

Example hacked content found on your account:

/htdocs/zaipan/zaipan/wp-content/themes/watercolor/template.php
/htdocs/mahalaga/desktop/2013 – 5 May/http-aup/opct.php
/htdocs/site/blog/wp-content/themes/wordpresstheme_1948/truth_of_love/footer.php
/htdocs/emy1.old/wp-content/themes/Coolio/functions.php
/htdocs/mahalaga/desktop/2013 – 5 May/http-aup/ditebec.php
/htdocs/zaipan/zaipan/wp-content/themes/pictures_on_a_clothesline_eve006/footer.php
/htdocs/zaipan/zaipan/wp-content/themes/wooden-fence/template.php
/htdocs/zaipan/zaipan/wp-content/themes/pictures_on_a_clothesline_eve006/functions.php
/htdocs/mahalaga/desktop/2013 – 5 May/http-aup/rlhuval.php
/htdocs/site/blog/wp-content/themes/Schemermag/Schemermag/footer.php

 

Mon 06/16/2014 02:02 pm

WordPress repair using Account Manager:
/htdocs/zaipan/zaipan/wp-content/themes/watercolor/template.php
/htdocs/zaipan/zaipan/wp-content/themes/pictures_on_a_clothesline_eve006/footer.php
/htdocs/zaipan/zaipan/wp-content/themes/wooden-fence/template.php
/htdocs/zaipan/zaipan/wp-content/themes/pictures_on_a_clothesline_eve006/functions.php
 
Files Deleted:
/htdocs/mahalaga/desktop/2013 – 5 May/http-aup/opct.php
/htdocs/mahalaga/desktop/2013 – 5 May/http-aup/rlhuval.php
/htdocs/mahalaga/desktop/2013 – 5 May/http-aup/ditebec.php
 
Themes Deleted:
/htdocs/site/blog/wp-content/themes/wordpresstheme_1948/truth_of_love/footer.php
/htdocs/emy1.old/wp-content/themes/Coolio/functions.php
/htdocs/site/blog/wp-content/themes/Schemermag/Schemermag/footer.php
 

We have found the excessive use of non-website-related content in the following folder:
/htdocs/mahalaga

We value you as our customer and we would like to be able to continue to provide services to you.  Therefore, please review the steps below and proceed accordingly. You can then request to have your account re-activated by sending us an email that meets the following criteria after you have removed the offending content:

The email must contain an explanation of why the violation occurred. If the violation occurred as a result of someone else’s actions on your email or hosting platform, please provide the steps taken to secure your services to prevent future violations. If you are unable to take action due to the suspension, please indicate that you will resolve the issue as soon as possible once the suspension is lifted.

  • The email must acknowledge that you are aware that such activity violates our service agreement.
  • The email must contain a statement that you will refrain from future violations of  our Service Agreement.
  • You must refer to Service Request 1-768631208 in your email.

Please email us at aupnotify@networksolutions.comYour email must meet all of the above criteria. Responses typically take 24 to 48 hours. Due to the volume of requests, if your email does not meet the criteria referenced above, Network Solutions may reject your request without a response to you.  If your account is re-activated, any further complaints that violate our service agreement may result in the immediate and permanent termination of your service.

Tue 06/17/2014 05:05 am

Hi,
 
refer to Service Request 1-768631208
 
I have removed a huge number of portable programs and desktop backup files on the folder /htdocs/mahalaga.
 
Please lift my suspensions.
 
Let me know.
 
Thanks you.

Tue 06/17/2014 12:59 pm

Hi Thomas,
 
I have deleted the folder and all of its contents.
Please take out the suspension.
 
Let me know.
 
Thanks.
 
Pepi de Leon
JOSEPH036
kampeonngpagibig.com

 

 

Your hosting account has hacked content. It appears you are running vulnerable PHP that has allowed your account to be controlled by an attacker. You will need to remove all PHP files from your hosting account and update your content to a more secure system. Failure to do so will result in your account remaining suspended.

Example hacked content found on your account (NOTE: This is just an example and all hacked files will need removal; we cannot provide a full listing of your hacked content): /htdocs/warleigh/coupons.html:JS.Trojan.Iframe-6

/htdocs/gallery/upgrade/templates/Welcome.html:JS.Trojan.Iframe-6

/htdocs/warleigh/escalation.html:JS.Trojan.Iframe-6

/htdocs/warleigh/horoscopejason049.jpg.html:JS.Trojan.Iframe-6

/htdocs/emy3/modules/mod_poll/index.html:JS.Trojan.Iframe-6

/htdocs/emy3/media/index.html:JS.Trojan.Iframe-6

This can be caused by code vulnerabilities in an existing content-management system (CMS) or other script that has been compromised. The most common cause is an outdated, hacked CMS such as Joomla, Drupal, or WordPress. To rectify this issue, you will need to secure your CMS. If your site is a CMS, you will need to update the code/script(s) via FTP. We will not enable web access for you to secure your compromised form(s) or site(s). If you can’t update the site via FTP you will need to disable the site before we can lift any suspension, including removing ALL of the PHP content.

June 19, 2014 07:15 am

Hi,
 
I have removed all php code that may be vulnerable through php.
However, please understand that my main website is on wordpress and further troubleshooting must be done within the dashboard.
 
Please lift suspension.
 
Once lifted, I will be running advanced troubleshooting scripts within the wordpress dashboard to finish the cleanup.
 
It would be very timely if this can be done asap, for I have scheduled posts and deadlines in 12 hours time.
 
Thanks.
 
Pepi de Leon
JOSEPH036
kampeonngpagibig.com

This is sent to inform you that we have reinstated your Network Solutions hosting service.

Leave a Reply

Your email address will not be published. Required fields are marked *