Hey guys i recieved below email and now i am not sure what i have to look out for and how i know which scripts is causing this. Is their any how ic an find out??

could this be done by my contact us form or a application form that i have or will it be things like forums, picture gallery or calendar or something?

This morning we started receiving complaints that your comain.org.uk account was sending spam; upon investigating this that was the case, spam was being sent from your account. Spam affects all users on the server as our ability to send email to other providers may be diminished as a result of them blocking us due to an outburst of spam on their systems. As a result of this I had no option but to suspend your account.

Further investigation shows that there were a number of malicious files on your account that would allow a remote attacker to do things such as manipulate your files, download new files to your account, as well as to send out spam.

This kind of thing usually happens as a result of outdated and/or insecure scripts installed on your account that are found and subsequently abused by remote attackers. You have a number of old scripts, one or more of which could be part of the problem.

Was the email from your hosting company? If so I'd just respond to them and ask for help identifying the scripts causing the problem. They should be willing to help since it's their server.

There are a lot of ways this could happen. It could be one of your scripts isn't as secure as it might be or maybe someone hacked into the site and added some of their own scripts. It's also possible it was another site on the same server that left a hole enabling someone to affect your site.

Start with your web host. I'm assuming they sent you the email. Let them know you weren't aware of the problem and ask them for help in cleaning things up. They should be happy to help.

I would also read up on header injections.

http://www.izonedesign.co.uk/blog/se...der-injection/