News Web-based malware hits 40,000 sites

http://www.bit-tech.net/news/bits/2009/06/04/web-based-malware-hits-40000-sites/1

A new strain of malware - which attempts to exploit Internet Explorer and Firefox flaws to infect passing visitors - has latched itself on to more than 40,000 websites.

 

I wish these sort of things would be done in a controlled environment.

 

We've seen the majority of these are located after the closing html tag in the file. You can locate the files on your PC if you search for unescape and then look at the code. If it's something you didn't put there, it could be either one of these infections (I'm not sure what they're called yet) or a martuz or gumblar type of malscript.

If it's a martuz or gumblar, it will probably be located after the closing head tag, but before the opening body tag.

That's been our experience anyway. YMMV

 

Have had about 60 calls on virus showing up as goldrun, detected by malwarebytes-antimalware. So far only the customers with malwarebytes, and avira both installed are calling in. This all started yesterday, guessing this might be it? so far, we are just re-imaging, as none of the scanners we use seem to repair/remove the problem.

 

Yeah, I've seen several sites infected with this; it's an iframe embedded worm originating from a series of Chinese servers. Pretty easy to block but nonetheless very annoying.

 

+1 for FF + NoScript tbh.

 

HELP please with malware issue !!

I have been infected with malware that has infiltraited all of my web projects, in my entire ftp, I have cleaned our the nasty scripts, taken down all files and replaced them to clean out the ftp and all files, I have purchased over 300 in maleware tool removers and still the nasty thing is back. Any suggestions? We have purchased root kit cleaners everything to this point adn now it has infected yet still a second server and all files there as well. NEED HELP IN THE WOSRT WAY PLEASE.. you can email me direct with any suggestions Avast paid professional version, Norton paid pro , windows defender, and zone,has not helped. I need to be rid of this phising and redirect attackes anyone ??? Please !

 

to email or not to email that is the question!

HI FELLOW CANADIAN I am having significant issue from this please email me I need advise . Ciao webdesignone