Godaddy 空间病毒 紧急求救

小余

谢谢啊，我用360把所有域名都扫描了，没有任何问题啊，我给Godaddy写了一封信，他的回复是这样子，是不是我的网站内容有危险？:'(

好烦啊，每一个月都给我发一封这样子的信件

Dear Paul,

Thank you for contacting Hosting Support. In regards to your hosting account for holhand.com:

We appreciate your cooperation in this matter. At this time, our Security team has evaluated your hosting account for any possible malicious content. We request that you scan your content with your preferred virus scan application. This is for you to verify that any possible content has been removed from your local system to prevent further infection.

In addition, we require the following in order to consider this issue resolved:

1. A statement that you have reviewed and agree to abide by the terms of the "Web Hosting and Virtual Dedicated Hosting Service Agreement," and
2. A statement that you have removed any malicious content residing on your web site, and
3. A statement that you agree to secure your web site in such a way as to ensure that there is not a re-occurrence of this issue in the future.

Please contact us if you have any further issues.

小余

我用的是Godaddy的 150G空间，Window 主机，今年1月份买的；

已经收到networkviolations 4次了，大概1个月1封； 问题是我这个空间放了20多个网站，我不知道哪一个网站有问题，应该删去哪一个？  

请问有在线杀毒之类的吗？

大伙们你们都是怎么处理的。

超级无敌烦！！！是不是要删除所有文件，重新上传呢？

如何根除这个问题，或者杜绝这个问题，哎！ 好心人，请回答一下

The ***.com web site has been found to be compromised which is a violation of section 3 "Your Obligations" of Go Daddy's Web Hosting and Virtual Dedicated Hosting Service Agreement.

The relevant passage of this agreement has been provided below:
"You may not use Go Daddy's servers and Your web site as a source, intermediary, reply to address, or destination address for mail bombs, Internet packet flooding, packet corruption, denial of service, or other abusive activities. Server hacking or other perpetration of security breaches is prohibited and Go Daddy reserves the right to remove sites containing information about hacking or links to such information."
Go Daddy's "Web Hosting and Virtual Dedicated Hosting Service Agreement" is located at the following URL: https://www.godaddy.com/agreements/showdoc.aspx?pageid=HOSTING_SA


This situation has resulted in a potential security threat to Go Daddy's network and the security we provide to other customers. It appears that this abusive action may have been the result of your server becoming compromised and ultimately exploited by a third party. Upon detection of this problem Go Daddy's Security Operations Center requested that Go Daddy's Advanced Hosting Team alert you of this action in the hope that you can resolve the issue.

小余

谢谢了，

小余

是这样子的，我这个空间绑定的主域名是AA.COM; Godaddy来信如下，就是说绑定的主域名有问题，那是不是其他域名没有问题，只是这个主域名有问题呢？

信件如下：


The AA.com web site has been found to be compromised which is a violation of section 3 "Your Obligations" of Go Daddy's Web Hosting and Virtual Dedicated Hosting Service Agreement.

The relevant passage of this agreement has been provided below:




"You may not use Go Daddy's servers and Your web site as a source, intermediary, reply to address, or destination address for mail bombs, Internet packet flooding, packet corruption, denial of service, or other abusive activities. Server hacking or other perpetration of security breaches is prohibited and Go Daddy reserves the right to remove sites containing information about hacking or links to such information."



Go Daddy's "Web Hosting and Virtual Dedicated Hosting Service Agreement" is located at the following URL: https://www.godaddy.com/agreements/showdoc.aspx?pageid=HOSTING_SA




This situation has resulted in a potential security threat to Go Daddy's network and the security we provide to other customers. It appears that this abusive action may have been the result of your server becoming compromised and ultimately exploited by a third party. Upon detection of this problem Go Daddy's Security Operations Center requested that Go Daddy's Advanced Hosting Team alert you of this action in the hope that you can resolve the issue.





*** IMPORTANT ***

Due to the serious nature of this situation, your site is scheduled to be suspended if you do not take immediate action. Your site is eligible for suspension on Saturday, April 7th, 2012 at 8:00 AM. To avoid this suspension, not only must you prevent a repeat occurrence of this problem, you must also reply to this notice with an email message containing the statements outlined below.

****************

enta

小余 发表于 2012-4-4 05:21 PM
是这样子的，我这个空间绑定的主域名是AA.COM; Godaddy来信如下，就是说绑定的主域名有问题，那是不是其他 ...

http://bbs.73yi.net/thread-168-1-1.html
用在线挂马检测工具吧

暮木娃娃

一般会注明是哪个网址下的网站，你联系Godaddy客服问问是哪个文件吧

enta

小余 发表于 2012-4-4 08:29 PM
谢谢啊，我用360把所有域名都扫描了，没有任何问题啊，我给Godaddy写了一封信，他的回复是这样子，是不是我 ...

你把所有文件打包下载回来，解压缩慢慢查，用全球最牛的几个杀毒软件扫描一下试试

暮木娃娃

小余 发表于 2012-4-4 08:29 PM
谢谢啊，我用360把所有域名都扫描了，没有任何问题啊，我给Godaddy写了一封信，他的回复是这样子，是不是我 ...

每一个月，也太夸张了吧
那你的账户不早被封了啊

小余

我也觉得奇怪，今天收到回信了, 我没有删除任何内容，每次写完Statement， 客服那边就说结束，也不知道乍的~~~，也不告诉我哪一个文件有问题；然后过10多天，又是同样一封信过来，我就快缺水了~~~

Dear Sir/Madam,

Thank you for contacting Hosting Support. In regards to your hosting account for holhand.com:

We appreciate your cooperation in this matter. I have reviewed your account and it is now in compliance as such I have marked this issue as closed.

Please contact us if you have any further issues.

Regards,

Jeanette Mcc.

Hosting Support Technician

小余

我帮一些朋友，建了几个站；一出问题，我就不知道，那里有问题了~~ 写信Godaddy，每一次，也是答非所问