[anupam_luv]

I did remove the file and replaced it with a new file download ... and re-scanned ... it again reported it as virus....

I raised a ticket regarding the issue and hostgator replied with the following response. ...

-----------------------------------------
From server logs, I could see that port 80/443 is blocked for the user xxxxxxx. This could be a reason for the issue you have reported earlier.

We have an automated scanning cron which disables port 80/443 of a user, when the user account has malicious file(s). Also, it disables all such file(s) with immutable attribute and null permission to avoid further infection. Check the scan results given below:
=======
Infected files: 2

/home/xxxxxxx/public_html/dstreetdirect.com/clientscript/ckeditor/ckeditor.js
/home/xxxxxxx/public_html/fitnessmatter.com/forum/clientscript/ckeditor/ckeditor.js
=======

As of now, I have reverted immutable attributes and null permission set on above file(s) so that you can modify those files(s).

Please note that, simply deleting/replacing infected file(s) will not be a permanent solution. If any of those file is used by your website theme/plugin/CMS then removing those file(s) may cause downtime to your websites.

Hence, I suggest you to double check your website contents like CMS, themes, plugins and make sure that they are up-to-date. Further, scan and re-upload above mentioned file(s) and get back to us.

Once your account is cleaned, we will activate port 80/443 for the user xxxxxxxxxx.

This will help you to avoid similar issues in future.

------------------------------------------

After that I repeated same steps .... Scanned > Quarantined > Re-uploaded new file > Scanned Again .... and again found same files as virus... Deadlock!!!