Just ordered a 2-year commitment and within hours, before anything was done / uploaded, I get six (6) e-mail notices (roughly the same time):
Hello,
Our systems performed a routine malware/virus scan on your account and unfortunately located infected/malicious files. We've automatically moved the infected files(s) out of your public_html directory into a safe, quarantined directory. Below is the file our scanners were able to locate:
/home/<mydomain>/public_html/<mydomain>/wp-includes/jameson-limpkin.php
(quarantined to /home/hawkinfected/cxsuser/<mydomain>/jameson-limpkin.php.1460163030_1) ClamAV detected virus = [Php.Trojan.WSO-1]
All of them are Php.Trojan.WSO-1, various names obviously. Now, when I got my first confirmation / account info e-mail, I followed the instructions to change my cPanel pw, and I did to a solid pw (letters, numbers, symbols, etc). What gives? Heck, when I go to my site, it's still blank - I've not setup WordPress or anything yet. How is this happening so quickly, and why do I feel like I've made a terrible error in judgement?