Is There A New Virus Threat?

[Norma Holt]

Word from my sister this morning is that there is a horrible bug going around that is stealing all one's information, wiping out their web sites, robbing banks and Paypal accounts, etc. She is not computer savvy and heard it on the radio last night. The announcer does a program on computer information and his own machine was currently being worked on after an attack.

Today I can't log in to most sites. The browser window indicator is spinning and it took me several attempts before I could log in here. So needless to say I am reluctant to try too many things. I can't get into Twitter which is another site mentioned in relation to it.

Anyone else having problems? If so what is the course of treatment. I have already scanned my computer with no indicators of a nasty but apparently that is what is supposed to happen. Help! I am in the dark as to what is going on and feel that someone here can throw some light on it.

Norma

[George Wright]

I just got an email from Zone Alarm warning of Gumblar. Sounds bad. Zone Alarm says they can stop it for $19.95 and that you are not protected if you only have the ZA free version.

However they did say Gumblar affects IE so now might be the time to use FireFox for a while.

George Wright

[Norma Holt]

Originally Posted by George Wright

I just got an email from Zone Alarm warning of Gumblar. Sounds bad. Zone Alarm says they can stop it for $19.95 and that you are not protected if you only have the ZA free version.

However they did say Gumblar affects IE so now might be the time to use FireFox for a while.

George Wright

Spoke to my sister and yes, its the Gumbler. It is bad and thank God I use Firefox or I might be sorry. At the moment I can get onto some sites but I think many sites are affected. Clicked on one site from a Squidoo lens and got a large red warning that it was an attack site so it must be getting spread around from web sites.

Norma

[Floyd Fisher]

Originally Posted by George Wright

I just got an email from Zone Alarm warning of Gumblar. Sounds bad. Zone Alarm says they can stop it for $19.95 and that you are not protected if you only have the ZA free version.

However they did say Gumblar affects IE so now might be the time to use FireFox for a while.

George Wright

Do you mean this bad boy?


Infostealer.Daonol | Symantec

That's old news. I've been protected from that since mid-May.

Just have a decent antivirus, and keep it updated and it should be no problem.

[George Wright]

Hi Norma,

Yes it hacks into and affects websites then jumps on your pc takes over your ftp and moves on from there. Scary.

Hi Floyd,

Thanks for the tip.

George Wright

[Edgar Moreno]

Gumblar is the only new virus I have heard of and its supposed to be worse than conflicker. There are some programs that will clean your computer for free but even they recommend that if you are infected, you may as well format your system to make sure it is truly gone.

[Kay King]

Web Attack That Poisons Google Results Gets Worse - Business Center - PC World

According to the article above and other sources I've read recently, this virus targets flaws in Adobe and Flash.

Definitely not a nice little worm!

kay

[Norma Holt]

Originally Posted by George Wright

Hi Norma,

Yes it hacks into and affects websites then jumps on your pc takes over your ftp and moves on from there. Scary.

Hi Floyd,

Thanks for the tip.

George Wright

Hi George, glad I brought this up because if its that bad how do we protect ourselves? Can't find any reference to it on the news. I have not done any work on the computer today because I was worried about it.

Norma

[WendellC]

Here's some information on Gumblar:

Gumblar .cn Exploit - 12 Facts About This Injected Script | Unmask Parasites. Blog.

Gumblar Exploit

ScanSafe STAT Blog - ScanSafe STAT Blog - GumblarQ&A


It could also be the Beladen virus as described here: Security Fix - Beladen Loads Hacked Web Sites With Badness

Suggestion is the run Malwarebyte's AntiMalware program Malwarebytes.org and be sure to use a secure FTP program from now on.

Hope this helps.

Wendell

[Zack Lim]

Hi Norma,

Thank for sharing and I only know of this virus when I read your post.

Time to update and scan my whole computer.

Thanks again

Zack

[morry]

I got hit by gumblar and it cost me thousands of dollars. Most of my sites got malware warnings all over them and it kept on coming back, even after cleaning and changing my FTP details.

It seems to have sorted itself out now. I ran just about every virus thingo I could, but apparently didn't completely get rid of it. I had to take my computer to the shop yesterday because my video card died and the guy said I still had a ton of infected and corrupt files.

I hope no one else gets hit by this, it really is a pain in the backside

Sean

[Lloyd Buchinski]

Originally Posted by clickguy

Here's some information on Gumblar:

Gumblar .cn Exploit - 12 Facts About This Injected Script | Unmask Parasites. Blog.

I found this bit particularly interesting in the link click supplied.

"Maybe it’s just a coincidence but about 95% of the infected sites used PHP. It is not possible to say for sure if the rest sites used PHP. Who knows.

9 This exploit doesn’t use some particular script vulnerability. I encountered it on phpBB, SMF and vBulletin forums, on WordPress 2.7.1 blogs, on proprietary PHP sites."

So it doesn't seem to root in basic html sites. All those sites take a lot of input like comments and posts and it didn't say but I suppose that is how the injection happens?

Oh well I don't do a lot of browsing anyway and with this going on it is going to be a little less for a few days. Besides I need to get a lot of work done so maybe I'll even stay away from those vBulletin forums.

best wishes everybody

[ezimedia]

LOL so funny... just have a firewall and an update virus scanner on your pc and know what you are downloading and installing..

Tom

[Peter Bestel]

Originally Posted by ezimedia

LOL so funny... just have a firewall and an update virus scanner on your pc and know what you are downloading and installing..

Tom

Yeah, hilarious!

Really funny when you're locked out of your websites, find that malicious software has been installed all over the place, Google flags them as Attack Sites, you lose visitors and income. I'd laugh so much I think I'd cry.

Tom, I'm all for seeing the lighter side in any situation, but please don't brush situations off like this with such a throw-away, dismissive comment. I've got decent, up to date virus and firewall protection. I don't visit known hack sites or use P2P progs yet something got through quite recently.

Prior to my experience I may have ignored such a thread and considered myself quite secure given the steps I had been taking. I certainly would NOT have come here to have a childish gloat at the expense of other peoples' livelihoods.

Peter

[DonnaLeona]

Originally Posted by Peter Bestel

Yeah, hilarious!

Really funny when you're locked out of your websites, find that malicious software has been installed all over the place, Google flags them as Attack Sites, you lose visitors and income. I'd laugh so much I think I'd cry.

Tom, I'm all for seeing the lighter side in any situation, but please don't brush situations off like this with such a throw-away, dismissive comment. I've got decent, up to date virus and firewall protection. I don't visit known hack sites or use P2P progs yet something got through quite recently.

Prior to my experience I may have ignored such a thread and considered myself quite secure given the steps I had been taken. I certainly would NOT have come here to have a childish gloat at the expense of other peoples' livelihoods.

Peter

What virus and firewall protection do you use that let this in?

[Peter Bestel]

Originally Posted by DonnaLeona

What virus and firewall protection do you use that let this in?

I was using Avast (paid version) and Windows firewall. I hasten to add that I wasn't attacked by this virus being discussed in this thread but something very similar. I have since moved over to Avira Antivirus and ZoneAlarm firewall.

Peter

[BurgerBoy]

Originally Posted by DonnaLeona

What virus and firewall protection do you use that let this in?

Get eset smart security 4. Nothing will get on your computer again and it has a built in scanner on demand and will find and remove anything you have on your computer now.

Since I installed it on my computers none of them have EVER been attacked again.

It catches it and stops it before it can enter your computer.

It is also a fire wall for your computer.

You can find it here ESET - Antivirus Software with Spyware and Malware Protection