rejetto forum

web space suspended

0 Members and 1 Guest are viewing this topic.

Offline rejetto

  • Administrator
  • Tireless poster
  • *****
    • Posts: 13510
    • View Profile
Updates for beta version are not working currently because some smart asses reported HFS as a trojan.
And with no respect for their customer, the web hosting (servage, where i hold dovedove.it) decided to suspend the account.
I'm spending a lot of time to get a solution to this.



Dear Massimo,

A Servage system administrator has made the following note to your account:

------- Note -------

admin note: please read this carefully

We inform you in the last notes about phishing sites in your account.
We were informed about similar phishing sites again.

next time of abuse we are abel to take a administrative fee of GBP 19.80 (see http://www.servage.net/page/terms_of_service/)


remove the content and contact our support team for further steps!



-----------------------
Dear abuse team,

please help to close these offending viruses sites(1) so far.

status: As of 2010-08-08 05:29:53 CEST
http://support.clean-mx.de/clean-mx/viruses.php?email=abuse@servage.net&response=alive

(for full uri, please scroll to the right end ...


We detected many active cases dated back to 2007, so please look at the date column below.
You may also subscribe to our MalwareWatch list http://lists.clean-mx.com/cgi-bin/mailman/listinfo/viruswatch

This information has been generated out of our comprehensive real time database, tracking worldwide viruses URI's

most likely also affected pages for these ip may be found via passive dns
please have a look on these other domains correlated to these ip
example: see  http://www.bfk.de/bfk_dnslogger.html?query=77.232.72.244

If your review this list of offending site, please do this carefully, pay attention for redirects also!
Also, please consider this particular machines may have a root kit installed !
So simply deleting some files or dirs or disabling cgi may not really solve the issue !

Advice: The appearance of a Virus Site on a server means that
someone intruded into the system. The server's owner should
disconnect and not return the system into service until an
audit is performed to ensure no data was lost, that all OS and
internet software is up to date with the latest security fixes,
and that any backdoors and other exploits left by the intruders
are closed. Logs should be preserved and analyzed and, perhaps,
the appropriate law enforcement agencies notified.

DO NOT JUST DELETE THE FILES. IF YOU DO NOT FIX THE SECURITY
PROBLEM, THEY WILL BE BACK!

You may forward my information to law enforcement, CERTs,
other responsible admins, or similar agencies.

+-----------------------------------------------------------------------------------------------

|date                           |id     |virusname      |ip             |domain         |Url|
+-----------------------------------------------------------------------------------------------
|2010-08-08 05:01:34 CEST       |633454 |unknown_exe    |77.232.72.244  |dovedove.it    |http://www.dovedove.it/hfs/hfs265.exe
+-----------------------------------------------------------------------------------------------


------- Note -------

If you have questions or concerns kindly submit a support ticket via the control panel and we will get back to you as soon as possible. This can be done via the "Support & Notifications" link in control panel.



Best regards,
Your  Team, http://www.servage.net

This is an automated email. For questions or concerns kindly
open a support ticket via the control panel: http://cp.servage.net/


Offline SilentPliz

  • Operator
  • Tireless poster
  • *****
    • Posts: 1298
  • ....... chut ! shh!
    • View Profile

Offline TEA-Time

  • Occasional poster
  • *
    • Posts: 76
    • View Profile
Wow, their ignorance is astounding (and so is their English. heh) for a business in that "profession".  virusname - unknown_exe.  Oh no!!!!  ::) ::) ::)


Offline MarkV

  • Tireless poster
  • ****
    • Posts: 764
    • View Profile

Offline TSG

  • Operator
  • Tireless poster
  • *****
    • Posts: 1935
    • View Profile
    • RAWR-Designs
You can host the beta on our hosting for now if you want. We already host the hfs.exe mirror, just dump it in that folder.

We're with http://www.argeweb.nl/?txt_taal=en now, after our first shitty hosting. We've had no problems with them so far, they don't even complain when we exceed our monthly quota, or take the site offline. The only thing I don't like about it, is the English side of the admin is not great... so I can't do much with the control panel, have to rely on Richard.
« Last Edit: August 11, 2010, 03:15:26 PM by TSG »


Offline crazyboris

  • Tireless poster
  • ****
    • Posts: 140
    • View Profile
ahhh thats soooo stupid.
not even look at the files , and just suspend the account.

they belive a noncustomer more than a real customer to them.
that says it all.
dont use there service anymore.