My Website - spam abuse

[olienet]

Hello,
I've received a message from my hosting provider about my website (see below).
He said that i need to do fresh installation to my website, what should i do?
What is the best method to overcome this problem.

"Hi,

We detect your website CILIDESIGN.COM is infected by malicious code and use our server send out the spam mail and cause our server IP get blacklisted.
We have temporary remove some suspected file from your account to prevent further spam.

However, we do scan and found alot of your website files is infected by virus code.
Please do clean your website by do a fresh installation again.

If the spam issue happen again from your account, we will suspend your account.
Thanks."

 

[bartosimpsonio]

There's not way to avoid a fresh installation.

Even if you recover that database(assuming it's Wordpress) it's probably still infected.

 

[patrickthomas]

this is a big issue. this happened to many of my websites 4 years back.
i would suggest you to export your database and install word-press again. Make sure to backup images from WP-content/uploads. Now in your new WP, upload your database and you are all done. Malicious files are really harmful.

 

[Krusty]

stop using nulled copies

 

[Stablebox]

Which CMS are you using for your website?

 

[CommandobotStudios]

Reinstall wordpress and be very-very careful with the database. If it's possible, I would recover everything manually, or you should go back to an earlier backup.

 

[strawlink]

The only way to rid of this virus is to install a fresh copy of wordpress or find online virus remover. I had virus in my main website few months back, I just simple removed those files which were infected by virus and yes they were good for temporary. It got infected again, so there is no proper way to completely rid the virus.

Thanks

 

[Seven4]

How they know it contain virus, this makes no sense to me. I dont personally think you will need to go over.

 

[olienet]

this is a big issue. this happened to many of my websites 4 years back.
i would suggest you to export your database and install word-press again. Make sure to backup images from WP-content/uploads. Now in your new WP, upload your database and you are all done. Malicious files are really harmful.

So database and image will not be infected by virus right?
All i need to remove is script from wordpress file is it?
Thanks in advance.

 

[olienet]

stop using nulled copies

Sorry what is nulled copy?

 

[olienet]

Which CMS are you using for your website?

Im using wordpress

 

[olienet]

The only way to rid of this virus is to install a fresh copy of wordpress or find online virus remover. I had virus in my main website few months back, I just simple removed those files which were infected by virus and yes they were good for temporary. It got infected again, so there is no proper way to completely rid the virus.

Thanks

Can you share which online virus removal that you use?

Thank you

 

[Hosterbox]

Once you re-install make sure to download and use a security plugin. They really help. Also, check if your current web host is using Mod_security rules they really help with certain attacks.

-Matt

 

[olienet]

Once you re-install make sure to download and use a security plugin. They really help. Also, check if your current web host is using Mod_security rules they really help with certain attacks.

-Matt

Do you have any security plugin to recommend?

regard

 

[ziplack]

when this happens to me i made a fresh install
check for the plugins to virus and templates
with diferent scanners
and then reinstall

 

[haroldparker]

A far, I would recommend a fresh install and backup your images and database. Hope all' good

 

[V]

Happens mostly when people use nulled themes/plugins and do not regularly update the site. Please install a security plugin like wordfence which sends out an email if someone logs into your site. Plus, it also scans themes/plugins to see if the code has been modified. Install a plugin to mail you a backup copy of your site (DB+posts) directly to your email address weekly. You must be careful, that's all you can do.

 

[starcreatives]

Something like this is very difficult to get out of if you are already infected, if you can pinpoint when you may have been infected you could avoid a complete reinstall but even then that is difficult. I would just be very careful when putting in any back up and reinstall wordpress again and if possible don't use anything nulled as that could be your problem if you were doing so.

 

[salo123]

So database and image will not be infected by virus right?
All i need to remove is script from wordpress file is it?
Thanks in advance.

I guess you use a hacked Wordpresstheme or plugin, be careful with this, 99% of theses "free" stuff is infected.

 

[Sejo245]

My guess if you used something that was nulled and wasn't clean. I would personally start again to avoid the problem coming back as. Not doing a fresh installation could mean the problem could stick around and you have complaints from your provider again.