@adamwalker, all of @Vega's domains are hosted on our CGI servers.
@Vega, I've taken a quick look, and I suspect I know what might have happened...
If you look in your root webspace directory though, you'll see a number of hidden files (starting with a dot), named like this:
.threatscan_infected_<date><time>
You'll also notice a directory named .threatscan_quarantine that seems to contain directories/files from some of your Wordpress plugins.
To see these directories, you can either use the File Manager via the Hosting Control Panel, or alternatively configure your FTP client to display hidden files/folders.
Whilst I'll admit not being familiar with the approach (first time I've seen anything like this), I reckon Hostopia may have identified malicious/compromised content on your websites, and moved the affected files/directories into the hidden quarantine folder.
When you then try browsing to your sites, you're getting a blank screen or 5xx error because content is being called that is no longer where it's expected to be.
If you have a backup somewhere then you can try restoring from that. If you don't, then you can try moving the quarantined content back to it's proper location, but I'd be careful because some of those files may be infected or placed there maliciously.
The alternative is that we contact Hostopia, however I've a feeling it may be quicker you trying to sort it out yourself (that may also be the advice they give).
Whatever your approach, you'll need to ensure that all of your CMS/plugin content is fully up to date, patched, and none of your files have been compromised once things are back up, else risk similar happening again.
Hope that helps.
Bob Pullen
Plusnet Product Team
If I've been helpful then please give thanks ⤵
