My Site was broken into

Security is something we all should be concerned about m rite now my own blogs get atleast 100/day attacks from diffrent hackers .. best bet is to create string passwords and keep changing them regularly

I'm not sure how HostGator would know he got your password from a "key-sniffer trojan" on your computer?

It would be pretty hard to tell how some got your password. Could of been 1 on 100 things.

They might of just said that to divert the blame? IDK

They should be able to see where the emails are coming from by monitoring the mail queue & logs. It's also possible that they simply don't want to do that since it takes time.

My bet is that your website itself has been exploited and a script is being used to send SPAM from.

That is funny that hostgator claims YOU have a keyword sniffer.

Use random passwords on every site you use. Use roboform to save them.

I had a huge problem with this about a year ago, as some hackers (I think from the Ukraine) hijacked my site and uploaded porn and viruses on it. I would clean everything off and they would just keep coming back. Ruined my business at the time and forced me to completely change my plans. After fooling around with a few wordpress plugins designed to keep hackers out I finally figured out they had access to my FTP server somehow.

Change your hosting passwords frequently. And clean your computer of viruses regularly as they can uploaded keyloggers and other Trojan horse software programs and wreak havoc.

I meant how would HostGator know he had keyword sniffer on his computer?

The password could of been stolen a lot of different ways, maybe the Adobe hacks ect.

I just think that is a strange claim.

hostgator is known for diverting the blame on the customers. I would suggest leaving a bad review all over the net and charging back or getting a refund from them. they are crap hosting now.

I had a MySQL error took me weeks and issue was never solved. they are crap.

As someone who has a day time job in the computer security industry and who reads email logs and email headers all day long, I will say this:

you should be able to find out the origin of the email from hostgators logs. if anything connected to their server and was sent out via their server, they have a log of it. they're suppose to keep a log for a certain amount of time, then they most likely dump the logs. most places keep logs for about a weeks time.

hostgator should have no way of knowing if you have a keylogger or trojan on your computer. they're just giving you an easy answer so they don't look like an unsecure webhost. however, it's still a plausible cause for this to happen, so they fed it to you. good thing you ran a scan.

if only your website/domain was sending out the spam, im guessing you're using an exploitable script or vulnerable copy of wordpress or something like that. May want to make sure you're using the most up to date copy of all scripts on this domain.