I've been hosting my website with just host since 2 years. Just a couple of months back, it got hacked by some wannabe hacker. I recovered the site, changed most passwords, changed password to wp-admin, lost all the customizations I had made to my theme though. To my surprise, within 24 hours, it got hacked again. Amidst all this my hosting plan was near its completion so I renewed it for another 2 years. Now when I wrote to the support, they advised all sort of things, even ran their security checks, claimed to clear 20 malware scripts from among my wordpress files. In short they deleted everything from the wordpress, except the database. I had to re-install it to make it work. I changed the wp-admin password again and, to my amusement, the site got hacked again and now in less than 12 hours. Funny! :-/ After this, I've lost hope in their support and security system. Its just been 4 days when I renewed my account. Is there a way I can get them to refund my money? I've paid $167 (yes, your eyes aren't playing any tricks) to them and I want it back. I paid through credit card, though I have a paypal account as well. Some one who has faced similar problem and managed to get their money back please advise. Thank you.
Have you asked their support about a refund? Checkout: http://www.justhost.com/anytime-money-back-guarantee.
Likely nobody here can help out in regards to this, you'll need to contact their support department. Worse case scenario you could open a dispute, but it ends up being up to PayPal/CC company that makes the final decision (due to it being an intangible good). Are your scripts all up to date, I'm assuming?
Have you tried the steps in this guide? http://codex.wordpress.org/Hardening_WordPress As for a refund: If you're determined on getting one I suggest you speak to your host first and see if you can work it out between yourselves. If not, seen as you paid via credit card, you may be able to issue a chargeback with your provider.
It looks like the security issue its not on their servers but on your end. Its not the first time I see people having an infected laptop or computer because they downloaded pirated software from P2P or other strange sources. Or their computer is just infected. You can change passwords and hosts as many times as you like, if its your system which is compromised the attacker has the logins, again and again. The first thing someone should do when he is hacked is check his network side and not always blame the provider. There are paid FTP softwares for example out on the net which you can download for free, all pirated and they all send your FTP logins to someone with malicious intention when you use it. Check for keyloggers in your PC. If it was indeed a server problem with them you would see allot of people having their websites hacked. I don´t say its not the issue, maybe it is, but then you should check on their forums or look other people in Google hosting there if they got hacked as well, and ask them in which server they are. It could also pretty much be something in your website, a plugin, a theme or something which is hacked, if the vulnerability or injected code is for example in your MySQL database the attacker is going to get in time after time.
If you cannot resolve it with the company, I suggest escalating the matter to PayPal or your credit card co. Keep in mind that if payment was made >90 days ago, there may be an issue.
Make sure to keep all the passwords complicated and confidential. Never save it in the browser and keep your password file protected. Make sure your wordpress is latest and has not vulnerabilities. Make sure the plugins and themes are not vulnerable. If you don't resolve the vulnerabilities you may get hacked again even if you move to another host.
Tell JustHost you'd like to cancel your account and you'd like a pro-rated refund to your credit card. Before you cancel your hosting account make sure that your website and computer is totally clean from infection and move your website to your new web host. Once your website has been up on your new web hosting account for several days then you should cancel your old JustHost account. Best of luck to you!