1000 FAQs, 500 tutorials and explanatory videos. Here, there are only solutions!
Error: "550 Virus Detected and Removed" / FTP access suddenly blocked
We have put an anti-virus solution (clamAV) in place on all our shared servers to fight virus uploads via FTP and scripts. We call it FTPban.
FTPban detects potential hacking of FTP accounts or simply the sending, either deliberately or otherwise, of files (Wordpress themes, fake plugins, etc.) containing malicious code or malware.
The virus scanner checks all files less than 1MB in size and prevents any detected virus or phishing/spam script etc from being uploaded. It then changes the password of the FTP account and locks the incriminating files (FTPban).
The FTP server then sends a message such as the following back to the FTP client:
550 Virus Detected and Removed: botnet.infomaniak.5.UNOFFICIAL
550 Virus Detected and Removed: winnow.botnet.ff.trojans.15900.UNOFFICIAL