My account has been infected. What do I do?

 

It has come to our attention that an account under your control has been compromised and is being used as part of a spam ring. Abuse of this nature is commonly caused by one or more virus/malware infected devices used to connect to the associated account(s). The signature of this particular spam ring indicates that this was the method used to gain account access.

It is extremely important that action is taken on your end to secure the infected computer(s) and stop the source of the spam. Continued spam like activity will result in the blacklisting of the IP addresses used for sending email and may effect the overall reputation of the domain used in the sending.

Please scan all computers, laptops, and macbooks with an updated AV and Malware scanner to ensure that the infection is removed. Please see the documentation below for suggested actions when cleaning an infected device.

General instructions on removing malware can be found here: http://forums.majorgeeks.com/showthread.php?t=35407

MalwareBytes and ComboFix are anti-malware programs (with free versions) that have had known success in detecting recent strains of malware.

MalwareBytes: http://www.malwarebytes.org
ComboFix: http://www.bleepingcomputer.com/combofix/

Below is a list of free anti-virus programs.

Avast! Antivirus: http://www.avast.com
AVG Anti-Virus: http://free.avg.com
Bitdefender: http://www.bitdefender.com/scan8/ie.html
ESET: http://www.eset.com
F-Secure: http://support.f-secure.com/enu/home/ols.shtml
Kaspersky: http://www.kaspersky.com/virusscanner
Microsoft Security Essentials: http://www.microsoft.com/en-us/security_essentials/default.aspx
Spybot Search & Destroy: http://www.safer-networking.org
Super Anti-Sypware: http://www.superantispyware.com
Trend Micro: http://housecall.trendmicro.com

If you are using an Apple computer, we suggest using the following program.

ClamXav: http://www.clamxav.com

** Important **

  1. Please run both anti-virus and anti-malware programs to ensure your computer is completely clean.
  2. Do not use old/previous passwords for your accounts as these would be compromised and known to the hacker

After all computers has been scanned and cleaned with an updated anti-virus and anti-malware program, you will need to log back into your cPanel account and change all email passwords, including the cPanel password.

Please let us know if you have any questions or require further assistance.